1. What cookies and similar technologies are
Cookies are small values stored by a browser and sent with relevant web requests. Local storage remains until it is cleared, while session storage normally lasts for the current browser tab. We describe all three here because they can remember information about a browser even when they are not used for advertising.
2. Categories
- Essential: required for authentication, security, booking and form continuity, consent storage and staging access where applicable. These cannot be switched off through the preference manager.
- Analytics: optional measurement of adult visitors' use of Serving T. No analytics script or identifier is currently installed.
- Advertising and personalisation: optional adult-user advertising personalisation or audience activation. No advertising pixel, identifier, matched-audience tool or provider is currently installed.
Rejecting non-essential categories does not prevent login, passwordless authentication, booking requests, instant bookings, draft continuity, Stripe Checkout or security controls.
3. Current first-party inventory
| Name | Provider and purpose | Category | Typical duration |
|---|---|---|---|
sb-<project>-auth-token and chunked variants | Serving T / Supabase. Maintains and refreshes the authenticated session. The exact project-derived name can vary by environment. | Essential | Controlled by the Supabase Auth session and cleared on sign-out or expiry. |
serving_t_login_email | Serving T. Carries the submitted email and a sign-in-method presentation hint in encrypted form between the email-first and password or email-code steps. It is not available to browser scripts and is never an authorisation signal. | Essential | 15 minutes, or cleared when the sign-in step finishes. |
serving_t_booking_draft_<opaque-id> | Serving T. Stores an unguessable, HTTP-only claim secret so the same browser can securely continue an unauthenticated booking draft. Personal booking details remain in the protected database record rather than this cookie. | Essential | 24 hours. A consumed or expired secret no longer authorises draft access. |
serving_t_cookie_consent | Serving T. Stores the consent-policy version, an opaque consent ID, category choices and update time. | Essential | 180 days, then choices are requested again. |
__Host-serving-t-staging-access | Serving T. Protects a non-production staging deployment behind its access gate; it is not used on normal production pages. | Essential | Up to 7 days. |
4. Current local and session storage
| Name | Purpose | Category | Typical duration |
|---|---|---|---|
serving-t-partner-setup-guide | Remembers whether an authenticated hitting partner expanded or collapsed the setup guide. | Essential preference | Until browser storage is cleared. |
serving-t:partner-application-draft | Preserves an in-progress partner application in the current tab, including entered application details. | Essential continuity | Current browser-tab session. |
serving-t-message-draft:<conversation> | Preserves an unsent booking message in the current tab and removes it after the message is sent. | Essential continuity | Current browser-tab session. |
With a current Analytics opt-in, waitlist submissions may also record campaign fields and a referrer path when the form is submitted. Without that opt-in, the server discards those fields. They are database records, not cookies, and are described in the Privacy Policy.
5. Third-party services
When a user chooses to visit Stripe's hosted Checkout or Connect onboarding, Stripe may use its own essential security, fraud-prevention and payment cookies under its policy. Supabase and Vercel may process request and security information needed to provide their services. Serving T does not classify a third party's optional advertising cookie as essential merely because that provider also supplies an essential service.
The current Serving T application contains no analytics SDK, advertising pixel, audience matching tool, tracking embed or CAPTCHA. Before any optional provider is introduced, it must be assigned to the correct category and prevented from loading until the required choice is present.
6. Changing or withdrawing your choice
Use at any time. A withdrawal updates the consent timestamp, stops future optional initialisation and removes removable first-party optional identifiers where technically feasible. There are currently no optional first-party tracking identifiers to remove. Browser controls can also clear all cookies and storage, although doing so may sign you out or remove unsent drafts.
7. Contact
For a question about these technologies or your choices, email hello@servingt.com. See the Privacy Policy for access, correction and complaint rights.