Cookie Policy
Last updated: 26 July 2026
Cookies and similar browser storage keep the ordering site working and, with your permission, help us improve it.
Strictly necessary (always on)
- Basket — remembers the items and add-ons you've chosen.
- Sign-in session — keeps you logged in to your customer, staff or driver account.
- House account tab — remembers the account you're ordering on.
- Checkout & payment — links your order to its secure payment.
- Cookie choice — stores the preferences you set here.
These cannot be switched off because the site cannot take orders without them.
Strictly necessary storage inventory
| Name or provider | Purpose | Typical duration |
|---|---|---|
| __cf_bm (Cloudflare) | Bot detection and protection of this website. | 30 minutes after inactivity |
| cafe1_cookie_consent | Remembers the cookie categories you accepted or rejected. | 180 days |
| Basket and order setup | Keeps your basket, fulfilment choice and delivery setup on this device. | Up to 2 hours after activity, or until cleared |
| Supabase sign-in storage | Maintains an authenticated customer, staff or driver session. | Until sign-out or session expiry |
| sidebar_state | Remembers the operational dashboard sidebar layout. | 7 days |
Cloudflare may set its security cookie before you make a choice because it is required to protect the site. It is not used for advertising or cross-site tracking.
Analytics (optional)
If analytics is enabled by Café 1, Google Analytics 4 loads only after you allow it. It records page use in aggregate so we can improve the menu and ordering flow. Advertising storage, signals and personalisation remain disabled. No analytics script or analytics storage is loaded before consent, and withdrawing consent stops further collection.
Marketing (optional)
Used only if you allow them: measuring promotions, showing offers that are relevant to you, and loading social video players from Facebook, Instagram, TikTok or YouTube. Those players stay blocked until you consent.
Third parties
Cloudflare provides website security and hosting-edge protection. Our payment provider may set strictly necessary cookies on its payment pages when you pay by card. Our website fonts are hosted by Café 1 and do not require a Google Fonts request. Google Maps services check delivery locations and provide attributed public review data. Facebook, Instagram, TikTok and YouTube receive browser data only when you allow marketing cookies and load an embedded player. Google Analytics receives browser data only if it is configured and you allow analytics.
Your current choice
You haven't set a preference yet — only strictly necessary storage is in use.
Managing cookies in your browser
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop the basket and checkout from working.
Policy details
Last updated: 9 August 2026. Contact info@cafe1luton.co.uk with questions.
Contact us
Café 1 Luton · Crown Court, LU1 2AA · Futures House, LU3 3QB · info@cafe1luton.co.uk