Cookie notice
We keep cookies to the minimum needed to run the site. This page lists every cookie and third-party service we use.
Last updated:
1. First-party cookies (strictly necessary)
These cookies are required for the website to work and are exempt from consent under PECR Regulation 6(4). They do not track you across other sites.
| Cookie | Purpose | Duration |
|---|---|---|
laravel-session | Keeps you logged in and remembers your cart, your delivery address and the restaurant you are ordering from during a visit | 120 minutes of inactivity |
XSRF-TOKEN | Protects forms and cart actions against cross-site request forgery | 120 minutes |
remember_web_* | Only set when you tick "Remember me" at login | Up to 5 years, or until you log out |
The website also uses your browser's sessionStorage to remember the address and contact details you typed during checkout. This is cleared when you close the tab and is never sent to third parties.
2. Third-party services (functional)
The services below are loaded only on the pages where you use the feature. Each provider may set its own cookies or similar identifiers in order to deliver that feature securely. We do not control these cookies; please see the provider's notice for details.
| Service | Where | Why | Provider notice |
|---|---|---|---|
| Stripe (js.stripe.com, m.stripe.com) | Checkout page | Secure card payment form and fraud prevention (cookies such as __stripe_mid, __stripe_sid) | stripe.com/gb/privacy |
| Google Maps Platform | Home page address search, checkout and saved addresses — loaded only after you start typing an address | Address autocomplete and geocoding | policies.google.com/privacy |
| Cloudflare Turnstile | Registration and rider application forms | Distinguishing people from bots without a CAPTCHA puzzle (cookie cf_clearance may be set) | cloudflare.com/privacypolicy |
| OpenStreetMap Nominatim | Address lookup fallback | Used only if Google Maps is unavailable; sets no cookies | osmfoundation.org |
3. What we do not use
We do not use analytics, advertising, social-media or cross-site tracking cookies, and we do not load fonts or scripts from advertising networks. Because of this the site does not show a cookie banner.
4. Managing cookies
You can delete or block cookies in your browser settings. Blocking the strictly necessary cookies will stop the cart, login and checkout from working. Blocking third-party cookies may prevent the payment form from loading; in that case please try another browser or contact us.
5. Mobile apps
The VG Delivered apps do not use cookies. They store a login token on your device and use the services listed in our privacy notice (Stripe, Google Maps, Expo push notifications).
6. Changes
If we add a new service that sets cookies we will update this page and, where consent is required, ask for it first.