Cookies are small files a website asks your browser to keep. OrdaBook uses as few as it can: only the ones that sign you in and keep you signed in.
In the app
When you sign in, our server (api.ordabook.com) sets these cookies, which only it can read. They’re essential: without them you couldn’t stay signed in, so they don’t need your consent.
| Cookie | What it’s for | How long |
|---|---|---|
| Session | Keeps you signed in. | Until you sign out, or 30 days without use, and 90 days at most before you sign in again. On a colleague’s phone, 2 hours at most. |
| Device | Recognises a phone or computer you’ve signed in on, so you can unlock it with your PIN and see it in Settings. | Up to 400 days, or until you remove the device or clear your browser. |
| Google sign-in | Only if you choose Continue with Google: makes sure the sign-in finishes in the browser that started it. | 10 minutes. |
On our website
Our website, ordabook.com, sets no cookies of its own. If you accept on the notice at the foot of the page, we count your visits with Cloudflare Web Analytics, which uses no cookies and doesn’t follow you across sites: we see totals, such as visits per page, not who you are. The tracking, request and group pages that businesses send their customers set no cookies, show no notice and count nothing. Where a form checks that it’s sent by a person (Cloudflare Turnstile), that check is used for nothing else.
Your choice on the cookie notice
The first time you open our website, a notice at the foot of the page asks you to accept or decline. It never covers the page for good: choose either, and it goes.
- Accept: Cloudflare Web Analytics counts your visits to ordabook.com, without cookies.
- Decline, or no choice yet: it doesn’t load at all, and nothing counts your visits.
The app’s sign-in cookies are essential, so they’re set whichever you choose, and only when you sign in.
Your choice is kept in your browser’s storage on that phone or computer (under the name ordabook.cookies), not in a cookie, and never sent to us. To change it, choose Cookie Choices at the foot of any page of our website, and the notice comes back. Clearing your browser’s data for ordabook.com forgets it too, and the notice asks again.
What the app keeps on your phone
So the app works on a weak connection or none, it keeps records in your browser’s storage on that phone (IndexedDB and local storage, not cookies): the customers and orders you may see, including names and phone numbers, other records you’ve opened, your recent news, small copies of photos, and changes and photos waiting to be sent. They aren’t encrypted by us. It also remembers your language, light or dark appearance, the email you last signed in with, and which guides you’ve seen. If you stop part-way through signing up or setting up a business, it keeps what you typed, never a password, for up to a day.
None of this goes anywhere by itself, apart from your changes, which go to our server. Your records’ copy is cleared when you sign out, or when someone else signs in on a shared phone; changes still waiting are kept for you until they can go; the rest stays until you clear your browser’s data.
If we switch on counting how invitations to a bigger plan do (see our Privacy Policy; it isn’t on as of the date at the top of this page), the app will also keep a random id in this storage, tied to nobody, and send it with each count.
What we don’t use
We use no analytics cookies and no advertising or tracking cookies. If that ever changes, we’ll update this policy first and ask for your consent on the notice.
Questions
Write to privacy@ordabook.com.