What cookies are
Cookies are small files a website saves in your browser to remember things, like the fact that you're logged in. Here's which ones we use, what for, and how to change your choice. Who handles your data and your rights are in our Privacy Policy.
When we ask
The first time you visit, we show you a notice. Until you answer, we only use essential cookies and send nothing to our analytics tool. You can accept, reject or choose:
- Analytics: to see which pages get visited, how you found us and where people get stuck, including recordings of your visit.
- Advertising: if you came from a Google ad, to tell Google whether you signed up.
If you reject, we send nothing. We keep your choice for 12 months, then ask again.
Website and dashboard cookies (tizamenu.com)
| Cookie | Set by | What for | Lasts | Type |
|---|---|---|---|---|
| tz_cookies | Tiza | Remembers your cookie choice | 12 months | Essential |
| Dashboard session | Tiza | Keeps you logged in to your dashboard | 90 days, renewed as you use it | Essential, only if you log in |
| __cf_bm | Cloudflare | Tells people from bots and protects the site | 30 minutes | Essential, only when bot protection is on |
| ph_<code>_posthog and browser local storage | PostHog, on Tiza's behalf | Analytics: pages you visit, where you came from, your clicks and recordings of your visit, with a random ID (details below). When you log in, it's linked to your account | 1 year | Analytics, only if you allow it |
| tz_origen | Tiza | Remembers how you found Tiza (the link's utm parameters) and, if you allow advertising cookies, the Google ad click ID (gclid) | 90 days | Analytics and advertising, only if you allow them |
What analytics collects if you allow it:
- The pages you visit, the page you came from, your browser, operating system and screen size.
- Your IP address, which is stored, and the approximate location PostHog gets from it (country, region and city).
- Your clicks and what you click on, which we also use for heatmaps.
- Recordings of your visit: what's on screen, mouse movements and clicks, the browser console log, and the address and timing of each request. Recordings hide everything you type into fields, email addresses, your account details in Settings and your VAT number, and never include the content of requests. Card details are entered on Stripe, never on Tiza. Recordings are kept for 30 days.
It helps us see what works and where people get stuck, so we can fix it. If you don't allow analytics, none of this is loaded or sent. More in our Privacy Policy.
When you pay: the checkout page and billing portal belong to Stripe (checkout.stripe.com and billing.stripe.com), which uses its own cookies to process payments and prevent fraud, under its cookie policy.
The blog (blog.tizamenu.com) doesn't use cookies.
Advertising: we don't show you ads on Tiza. If you allow advertising cookies and came from a Google ad, we keep the click ID and tell Google whether you signed up, started using your trial or paid. Google handles that data under its privacy policy. If you withdraw your permission, we delete the click ID.
Restaurant menu cookies
Menus (tizamenu.com/<restaurant>) belong to each restaurant, and Tiza runs them on its behalf. They have no third-party analytics and no ads.
| Cookie | Set by | What for | Lasts | Type |
|---|---|---|---|---|
| tz_ok_<code> | Tiza, on the restaurant's behalf | Remembers your answer to that menu's notice (one cookie per menu) | 12 months | Essential |
| tz_<code> | Tiza, on the restaurant's behalf | Stores only the date of your last visit to that menu, to count returning guests | 13 months | Analytics, Pro menus only. In Europe, only if you say yes |
| __cf_bm | Cloudflare | Tells people from bots | 30 minutes | Essential, only when bot protection is on |
How to change your choice
- On the website: click "Cookies" at the bottom of any page.
- In your dashboard: go to Settings and, under "Terms & privacy", click "Settings".
- On a menu: use the privacy link at the bottom.
- In your browser: you can delete or block cookies in its settings. If you block essential cookies, you won't be able to log in.
Withdrawing your permission is as easy as giving it, and doesn't affect what happened before.