3. Cookie & Tracking Policy

## 3.1 What we use

Dawingo Resto uses a small number of strictly functional cookies and browser storage entries. We do **not** use third-party advertising or cross-site tracking cookies.

| Name / type | Purpose | Duration | Category |
|---|---|---|---|
| `dawingo_restro_session` | Keeps you signed in after OTP verification (secure session token) | 7 days | Strictly necessary |
| Device identifier cookie | Recognises your device at a table so your cart and order stay linked to you | 365 days | Strictly necessary |
| Payment gateway cookies | Set by the payment aggregator's hosted checkout page to process your payment securely | Per gateway policy | Strictly necessary (third party) |
| Local storage (cart, preferences) | Holds your in-progress cart and display preferences on your device | Until cleared | Strictly necessary |
| Push subscription token | Delivers order-status notifications you opted into | Until revoked | Consent-based |

## 3.2 Analytics and error monitoring

Usage analytics and error monitoring are **self-hosted on Wephoton's own servers**. No analytics data, error report, or identifier is sent to any third-party analytics or advertising service, and no cross-site tracking is performed.

## 3.3 Managing cookies

Strictly necessary cookies cannot be disabled without breaking ordering and login. You can clear cookies and local storage from your browser settings at any time; doing so signs you out and empties your cart. You can disable push notifications from your browser or device settings.

---