Legal & Transparency

Cookie Policy

A short policy, because we set very few cookies. One to keep you signed in, and Google Analytics so we can see which pages people actually use. No advertising cookies, no data sold to anyone.

Effective Date — 29 August 2026
Last Updated — 30 August 2026
Advertising Cookies — None
Analytics Cookies — Google Analytics
Jurisdiction — India (DPDP Act 2023)
01 What Cookies Are 02 What We Set 03 What We Don't 04 Third Parties 05 Your Control 06 Contact
Section 01

What a Cookie Is

A cookie is a small text file a website stores in your browser. It lets the site recognise your browser between page loads — which is how a shopping cart remembers what you put in it.

This policy covers cookies and the related browser storage the site uses. It sits alongside our Privacy Policy.

Section 02

What We Set

One strictly necessary cookie, without which you could not stay signed in or keep a cart, and two set by Google Analytics.

PHPSESSID
Your session identifier. It is how the site knows that the person adding an item to the cart is the same person who checks out, and that you are signed in. It holds a random identifier only — no name, address or payment detail is stored in the cookie itself.
Duration: until you close your browser, or after 2 hours of inactivity
Essential
Required
_ga
Set by Google Analytics. A randomly generated identifier that lets us tell a returning visitor from a new one, so that a person who browses the menu on Monday and orders on Friday is counted once rather than twice. It carries no name, email or address.
Duration: 2 years
Analytics
Optional
_ga_74LQ9R0DFB
Set by Google Analytics alongside the one above. It holds the state of your current visit — when it started and how far through it you are — so a single visit is not counted as several.
Duration: 2 years
Analytics
Optional

How it is protected

  • HttpOnly — scripts cannot read it, which limits the damage of a cross-site scripting bug
  • Secure — over HTTPS it is never sent in the clear
  • SameSite=Lax — it is not sent on cross-site requests, which blocks a class of forgery attack
  • The identifier is regenerated when you sign in, so a session cannot be fixed in advance by someone else
Your cart lives on our server, not in a cookie. The cookie only carries the identifier that points at it. Prices are always recalculated from our menu database, so nothing stored in your browser can change what an order costs.
Section 03

What We Don't Set

Worth stating plainly, because most sites do use these:

  • No advertising cookies. We do not run ads and do not let anyone advertise to you based on your visit.
  • No Meta Pixel, no heatmap and no session-recording tools. We do not record your screen or replay your visit.
  • No cross-site tracking. We do not follow you to other websites.
  • No data brokers. We do not sell or rent your data.
There is no consent banner on this site yet. The analytics cookies above are set on arrival. If you would rather they were not, the browser controls in Section 05 block them without affecting anything else on the site, and Google's own opt-out add-on turns off Analytics everywhere.
Section 04

Third Parties

Google Analytics

The two _ga cookies above are set by Google Analytics, which we use to see which pages people visit and where they leave. Google processes that data on our behalf and receives your IP address as part of it. What we look at are totals — how many people opened the menu, how many reached checkout — not individuals, and we never send Google your name, email, address or anything about what you ordered.

You can turn Analytics off across every site you visit with Google's opt-out browser add-on, or block the cookies here using the browser controls in Section 05.

Google Fonts

Our typefaces are served by Google Fonts. Google does not set cookies when serving a font file, but your browser does contact Google's servers, which means Google receives your IP address as part of that request.

Google Sign-In

The "Continue with Google" button is enabled on this site. If you use it, Google sets its own cookies on accounts.google.com under Google's own policies, not ours. We receive only your name, email address and profile picture. We never see your Google password.

WhatsApp

Order confirmation and support happen over WhatsApp. Following a WhatsApp link takes you to a service run by Meta under its own terms and privacy policy. We do not control what it stores.

Ordering platforms

Links to Zomato and Swiggy lead to their own websites. Anything they store once you arrive is governed by their policies.

Section 05

Your Control

Every browser lets you view, block and delete cookies — usually under Settings, then Privacy.

Blocking our session cookie will break the site. You will not be able to sign in, keep a cart, or place an order. This is a technical consequence, not a penalty — the cookie is the only thing linking your requests together.

Signing out clears your session immediately. You can also delete cookies for this site at any time; the next page load simply starts a fresh session.

Section 06

Talk to Us

Questions about this policy, or about anything we store:

Privacy questions
→ thequestkitchenco@gmail.com
→ WhatsApp us
→ Contact form

See also our Privacy Policy, Terms & Conditions and Refund Policy.