Cookie Policy

1. What cookies are

Cookies are small text files stored in the browser. Tavolify also uses browser storage (localStorage and IndexedDB) on POS devices so the till keeps working without internet.

2. Which ones we use

We use only cookies that are strictly necessary for the service. We do not use third-party advertising or analytics cookies.

Name	Purpose	Lifetime
session cookie (name depends on the setup, for example …-session)	keeps you signed in, remembers the panel language and theme	until the browser closes or you sign out (by default 2 hours of inactivity)
XSRF-TOKEN	protects forms against CSRF attacks	same as the session cookie
POS device storage (localStorage, IndexedDB)	menu, orders waiting to sync, till settings	until the device is signed out or the browser data is cleared

3. Legal basis

Strictly necessary cookies do not require consent (Article 399(3) of the Polish Electronic Communications Law). If we ever add cookies that need consent, we will ask first.

4. Managing cookies

You can delete or block cookies in your browser settings. Blocking strictly necessary cookies prevents signing in to the panel.

5. Contact

Questions about cookies: info@tavolify.com. The controller is LOKI SOFTWARE TECHNOLOGIES SP. Z O.O., ul. Jurajska 4, lok. U05, 02-699 Warszawa, PL.