Legal

Cookie Policy

Last updated: July 31, 2026

This Cookie Policy explains how Meraki Group Ltd. uses cookies and similar technologies on the Menubarai platform. We are committed to using cookies responsibly and transparently. Unlike many platforms, we do not use advertising or cross-site tracking cookies.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide useful information to site owners.

Menubarai uses HTTP-only session cookies — cookies that are inaccessible to JavaScript running in your browser, which significantly reduces the risk of cross-site scripting (XSS) attacks. We do not use client-accessible cookies for sensitive data.

2. Cookies We Use

We use strictly necessary cookies only. We do not use advertising, marketing, or third-party tracking cookies. All cookies set by Menubarai are first-party (set by our domain) and essential for the platform to function.

NamePurposeTypeDuration
mb_accessShort-lived JSON Web Token (JWT) used to authenticate API requests. Contains your user ID, role, and business ID. HTTP-only and Secure flagged.Strictly Necessary15 minutes (configurable by admin)
mb_refreshSecure refresh token used to silently obtain a new access token when the current one expires, keeping you logged in. The raw token is hashed before storage — it cannot be replayed if intercepted. HTTP-only and Secure flagged.Strictly Necessary7 days (configurable by admin)

No other cookies are set by Menubarai. If you see cookies from third-party domains in your browser inspector while using Menubarai, they are set by browser extensions or other sites you have visited — not by us.

3. What We Don't Use

We do not use:

  • Advertising or remarketing cookies (e.g., Google Ads, Facebook Pixel, LinkedIn Insight)
  • Cross-site tracking cookies
  • Analytics cookies from third-party providers (e.g., Google Analytics, Mixpanel, Hotjar)
  • Social media tracking cookies
  • Any cookies that transmit your personal data to third parties for marketing purposes

Our first-party usage analytics (page views, feature usage patterns) are collected without cookies, using anonymised server-side logs.

4. Managing & Deleting Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

  • View and delete cookies stored on your device
  • Block cookies from specific websites
  • Block all third-party cookies
  • Clear cookies when you close the browser

Please note that deleting or blocking our authentication cookies (mb_access and mb_refresh) will immediately log you out of the Service. These cookies are strictly necessary — the Service cannot function without them.

Browser-specific guidance:

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Cookies and site permissions → Cookies and site data

5. Local Storage & Session Storage

In addition to cookies, Menubarai uses browser Local Storage for non-sensitive UI state, such as sidebar preferences, theme settings (dark/light mode), and cached non-personal configuration data.

We do not store any personal data, authentication tokens, or sensitive information in Local Storage or Session Storage. Local Storage data persists across browser sessions until explicitly cleared. It is accessible to JavaScript running on our domain — which is why we use HTTP-only cookies for all authentication tokens.

7. Changes to This Policy

We may update this Cookie Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last Updated" date at the top of this page reflects the most recent revision.

8. Contact Us

For questions about our use of cookies, contact us at:

Meraki Group Ltd.

Email: privacy@merakigroupltd.com

This Cookie Policy was last updated on July 31, 2026.