Zero Tracking & Zero Advertising Cookies
We only use strictly-necessary storage required to operate your basket, keep you signed in, and process payments securely. We never track your browsing across other sites or sell your data.
This site uses only strictly-necessary cookies and similar technologies, such as your browser's local storage - things required to provide the service you ask for. We do not use analytics, advertising, or tracking cookies, and we do not share any information with third parties for advertising. Because we set no non-essential cookies, there is no cookie-consent banner: under UK PECR, consent is only needed for non-essential cookies, and asking for consent to strictly-necessary ones is neither required nor appropriate.
Device Storage Summary
An itemized overview of what is stored on your device and why:
| Storage Key / Name | Type | Provider | Purpose |
|---|---|---|---|
| nyxis_cart | Local Storage | Storefront | Retains items in your basket between visits |
| sb-*-auth-token | Local Storage | Supabase | Maintains authenticated diner session |
| __stripe_mid, __stripe_sid | Cookie | Stripe | Payment processing & fraud prevention |
| Turnstile Check | Security Check | Cloudflare | Confirms diner is human and not a bot |
What we store on your device
- Your basketnyxis_cart
The items in your basket are kept in your browser's local storage (
nyxis_cart), so they're still there if you reload the page or come back later. It stays on your device and isn't sent to us until you check out. - Keeping you signed in (account holders only)sb-*-auth-token
If you sign in to an account, your sign-in session is kept in your browser's local storage (a key starting
sb-and ending-auth-token) so you stay signed in. It's removed when you sign out. - Payment & fraud prevention (Stripe)__stripe_mid, __stripe_sid
When you pay at checkout, or save or manage a card on your account page, our payment provider Stripe sets cookies (for example
__stripe_midand__stripe_sid) to process your card securely and help detect fraud. They're used only for that purpose. - Security check (Cloudflare Turnstile)Human Verification
On the sign-in and create-account pages, Cloudflare Turnstile runs a check to confirm you're a person and not an automated program. It's used only for that check.
If this changes
If we ever introduce any non-essential cookie (for example website analytics or a marketing pixel), we will first add a consent banner that asks for your permission before any such cookie is set, with rejecting cookies as easy as accepting them. Until then, none are used.