Cookie Policy
Last updated: 26 September 2026
This page lists every cookie set by the MenuDock marketing site (menudock.co.uk) and our hosted storefronts, together with its purpose, duration, and the party that sets it. We comply with the UK Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. Strictly necessary cookies do not require consent; all other categories are only set after you opt in via our cookie banner.
Changing your choices
You can change or withdraw your consent at any time using the link below, or via the “Cookie settings” link in the site footer.
Strictly necessary cookies
These cookies are essential for the service to function. They do not require consent under UK PECR but are listed here for transparency.
| Name | Purpose | Duration | Set by |
|---|---|---|---|
| sb-<project>-auth-token | Supabase authentication session for signed-in admins (admin panel, mobile webview). Required to keep you signed in. | 1 year (rotated on use) | Supabase |
| sb-<project>-auth-token-code-verifier | OAuth PKCE flow verifier used while completing sign-in. | Session | Supabase |
| menudock_cc | Stores your cookie consent choices so the banner is not shown again. | 180 days | MenuDock |
| md_analytics_consent | Set on a restaurant storefront that offers analytics. Stores your accept/reject choice so the notice is not shown again. | 180 days | MenuDock |
| __stripe_mid, __stripe_sid, m | Set on stripe.com (third-party domain) when you reach the Stripe Checkout page. Used by Stripe for fraud prevention. These are not set by us on menudock.co.uk. | 30 min to 1 year (Stripe-controlled) | Stripe |
Analytics cookies
We use Google Analytics, delivered through Google Tag Manager, to understand how the marketing site is used so we can improve it. We also use Microsoft Clarity, on this site and on restaurant storefronts that offer it, to record how pages are used (clicks, scrolling and page movement, with everything you type hidden) so we can find and fix what gets in the way. Clarity is not loaded at all until you accept analytics cookies. These cookies are only set after you accept analytics cookies via the banner; until then Google Tag Manager runs in consent “denied” mode and sets no analytics cookies. The exact cookies depend on the tags configured in our container; the common ones are listed below.
| Name | Purpose | Duration | Set by |
|---|---|---|---|
| _ga | Google Analytics 4 (loaded via Google Tag Manager). Distinguishes unique visitors so we can measure site usage. Only set after you accept analytics cookies. | 2 years | |
| _ga_<container-id> | Google Analytics 4 session state for our specific property (loaded via Google Tag Manager). Only set after you accept analytics cookies. | 2 years | |
| _clck | Microsoft Clarity. Keeps the same anonymous visitor id across visits so session recordings and heatmaps can be grouped. Only set after you accept analytics cookies. | 1 year | Microsoft |
| _clsk | Microsoft Clarity. Joins the pages of one visit into a single recording. Only set after you accept analytics cookies. | 1 day | Microsoft |
| CLID, MUID, ANONCHK, SM, MR | Set by Microsoft on clarity.ms and bing.com (third-party domains) when Clarity loads. Only set after you accept analytics cookies. | Session to 1 year (Microsoft-controlled) | Microsoft |
Marketing cookies
If we run advertising campaigns, Google Ads tags (also delivered through Google Tag Manager) may set the cookies below to measure their effectiveness. They are only set after you accept marketing cookies; until then no marketing cookies are set.
| Name | Purpose | Duration | Set by |
|---|---|---|---|
| _gcl_au | Google Ads conversion linker (loaded via Google Tag Manager). Used to measure ad effectiveness. Only set after you accept marketing cookies. | 90 days |
Third-party services
When you start a checkout, you are redirected to Stripe Checkout on a Stripe-owned domain. Stripe sets its own cookies on that domain for fraud prevention and session continuity. Those cookies are governed by Stripe's cookie policy.
OAuth sign-in (Google / Apple) redirects to those providers and relies on their cookies during the redirect flow. See Google's cookie policy and Apple's cookie policy.
Questions
For any questions about this cookie policy or how to exercise your rights, contact privacy@menudock.co.uk. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.