Cookie notice
Version 1.1.0In effect from Oct 24, 2026
1. What we store in your browser
Bitecard uses cookies and the browser's local storage (localStorage, sessionStorage). Items that are strictly necessary for the service are set without consent, because without them you could not sign in, choose a language or continue work you started. We place analytics items, on the website and in the admin app alike, only after you consent. We use no advertising cookies and no tracking across other websites.
2. List of cookies and stored items
| Name | Provider | Purpose | Category | Lifetime |
|---|---|---|---|---|
__Secure-next-auth.session-token | Bitecard | keeps the user signed in | necessary | 30 days |
__Host-next-auth.csrf-token | Bitecard | protects the sign-in form against cross-site request forgery | necessary | until the browser is closed |
__Secure-next-auth.callback-url | Bitecard | remembers where to return after sign-in | necessary | until the browser is closed |
NEXT_LOCALE | Bitecard | remembers the chosen language | necessary | 1 year |
activeOrganizationId | Bitecard | remembers which restaurant the signed-in user is working in | necessary | until the browser is closed |
sidebar_state | Bitecard | remembers whether the admin sidebar is open or collapsed | necessary | 7 days |
bitecard_draft | Bitecard | brings the visitor back to the menu draft started on the try page | necessary | 30 days |
analyticsConsent | Bitecard | stores whether the visitor accepted or declined analytics, with the time of the answer and the version of the banner it answered | necessary | 1 year |
onboarding-locale-handoff | Bitecard | sessionStorage item carrying the chosen language into account setup | necessary | until the tab is closed |
team-invite-resend-cd: | Bitecard | localStorage items (one per invitation) that stop an invitation being resent too often | necessary | until the cooldown ends |
ph_<project key>_posthog | PostHog | cookie and localStorage item identifying the browser to product analytics; PostHog also keeps further ph_ items in sessionStorage for the current tab | analytics, only with consent | 1 year |
The public menu pages place no analytics items in restaurant guests' browsers.
3. Consent and withdrawal
You decide about analytics in the banner shown at the bottom of the website and the admin
app. The "Accept" and "Decline" buttons carry equal weight. If you decline, only the
analyticsConsent cookie is set and PostHog is not loaded. We store your answer together
with its time and the banner version. If the banner's question changes, we ask again.
You can change your answer at any time, as easily as you gave it: when signed in, under Settings → Privacy; when signed out, with the "Cookie settings" link in the website footer, which reopens the choice. The answer applies per browser, so we ask again in another browser or on another device.
4. Changes
If we introduce a new cookie or an existing one changes purpose, we update this notice and give it a new version number. The version number and the effective date are always shown at the top of the page. If a new cookie needs consent, we ask again.