Cookie Policy
Effective date: June 5, 2026
Develemit LLC, doing business as Diner Decider ("Diner Decider," "we," "us," or "our") uses a minimal set of cookies. We do not use advertising, behavioral profiling, or cross-site tracking cookies.
Quick read
We use one strictly-necessary cookie, dd_session, to keep you signed in — this cannot be turned off. We also offer optional analytics, which are off unless you choose to turn them on. A cookie banner appears on your first visit with equally-prominent Accept All and Reject All buttons, plus a "Manage preferences" option; you can change your choice at any time from the "Cookie preferences" link in the footer. We honor opt-out signals including the Global Privacy Control.
1. What cookies are
A cookie is a small text file your browser stores on your device when you visit a website. Cookies let a site remember things between page loads — like that you are signed in.
2. Cookies Diner Decider uses
Strictly necessary
These are required to deliver the Service. You cannot turn them off because the Service does not work without them. Under the EU ePrivacy Directive and equivalent laws, strictly-necessary cookies do not require consent — they require only disclosure (this document).
| Name | Set by | Purpose | Category | Duration | Notes |
|---|---|---|---|---|---|
dd_session | API (@fastify/session) | Authentication — maintains signed-in state | Strictly necessary | 30 days | HttpOnly, SameSite=Lax, Secure in production, signed with our session secret. Not used for tracking. Not shared with any third party. |
That is the entire list.
Functional
These remember preferences you have set. No functional cookies are currently set — your theme preference is stored in localStorage, not in a cookie.
Analytics
We use a first-party analytics tool to understand how the Service is used (page views, feature usage, and similar aggregate behavior). It does not set a cookie — it stores an anonymous identifier in localStorage on your device. This category is off by default; you turn it on by choosing "Accept all" or enabling it in "Manage preferences" on the cookie banner.
3. What we do NOT use cookies for
- Advertising or retargeting
- Behavioral profiling or cross-site tracking
- Social media integrations
- Google Analytics, Meta Pixel, or similar third-party analytics
4. Third-party cookies during OAuth
When you sign in with Google or Apple, the identity provider redirects you to their site briefly. The provider may set its own cookies on its own domain during that flow. We do not control those cookies, and they are governed by the provider's policy:
Once you return to Diner Decider, only our own dd_session cookie remains.
5. How to manage cookies
To change your analytics choice within Diner Decider, use the "Cookie preferences" link in the footer of any page — it reopens the same preferences panel shown on your first visit.
You can also manage cookies at the browser level. Every modern browser lets you view, block, or delete cookies on a per-site or global basis:
For general information on managing cookies visit allaboutcookies.org.
If you block the dd_session cookie, the Service will not be able to keep you signed in.
6. Do Not Track and Global Privacy Control
- Global Privacy Control (GPC): if your browser or an installed extension sends a Global Privacy Control signal (
navigator.globalPrivacyControl), we detect it automatically, treat it the same as choosing "Reject all," and skip showing the cookie banner — as required by California law (CCPA / CPRA). - Do Not Track (DNT): we treat a browser's DNT signal the same way as GPC. DNT has no formal legal standing, but we honor it anyway.
Either signal only ever affects the optional analytics category — it cannot and does not disable the strictly-necessary dd_session cookie, since the Service can't keep you signed in without it. You can still turn analytics back on afterward from "Cookie preferences" in the footer if you'd like to help us improve the app.
7. Changes to this policy
If we add a new non-essential cookie category beyond analytics, we will update this document and the "Effective date," and notify signed-in users via in-app banner or email at least 14 days before any new data collection begins.
8. Contact
For any question about this policy or about a specific cookie, email [email protected]. For broader privacy questions, see our Privacy Policy.