Cookie Policy

What cookies are

Cookies are small files a website keeps in your browser. We also use the browser's "local storage" and, in the apps, the phone's secure storage, which work in a similar way. This policy covers pratoroo.com, the web app and the Pratoroo, Pratoroo Business and Pratoroo Driver apps.

Legal basis

Article 5 of Portuguese Law 41/2004 (as amended by Law 46/2012) allows information to be stored on and read from your device without consent only when it is strictly necessary to provide the service you asked for. Other cookies (for example statistics or advertising) require your prior, free, specific and informed consent under the GDPR. The Portuguese data protection authority (CNPD) supervises these rules.

What we use

Today Pratoroo only uses cookies and storage that are strictly necessary for the service you ask for to work (signing in, ordering, paying, remembering choices you made). We use no advertising, statistics or social media cookies, and we do not track what you do on other sites or apps. Under the law (article 5 of Portuguese Law 41/2004 and the GDPR) these cookies therefore need no consent; we show a notice so you know they exist.

Pratoroo's cookies

Name	What for	How long
Session (…-session)	Keeping you signed in, your language and the address you chose during the visit	Until the browser closes or 2 hours of inactivity
XSRF-TOKEN	Protecting forms against forged requests	Same as the session
pratoroo_cookies	Remembering that you saw this notice (and your choices), so we don't ask again	400 days
pratoroo_device	Security: a random number for this device, to stop fraud with orders and refunds (it says nothing about you)	400 days
pratoroo_place	Remembering the address you chose in "Near you", so we don't ask again (encrypted)	400 days (deleted when you tap "Change address")
appearance	Remembering light or dark mode	1 year
sidebar_state	Remembering whether the dashboard menu is open (businesses only)	1 year
pratoroo_touch	Recognising a touch-screen tablet, to open the right screens for businesses and couriers	1 year
pratoroo_app_push	In the apps: remembering that this phone is registered for notifications	1 year

Other companies' services, only when you use them

Service	When	What for
Cloudflare (network, Turnstile)	Every page; Turnstile on sign-in, sign-up and order forms	Security: protecting the site against attacks and bots
Stripe	On the card, Apple Pay or Google Pay payment page	Making the payment and preventing fraud (Stripe's cookies, needed for the payment)
PayPal	Only if you choose PayPal	Making the payment (PayPal's cookies on PayPal's site)
Ifthenpay	Only if you pay with MB WAY or Multibanco	Making the payment (no cookies on our site)
Google Maps Platform	When you type an address	Suggesting addresses. It sets no cookies; the address map is sent by our server, so your browser does not talk to Google to show it
Google and Apple (sign-in)	Only if you tap "Continue with Google/Apple"	Confirming who you are, on Google's or Apple's site

These services may set their own strictly necessary cookies, for example:

Name	Whose	What for	Duration
__cf_bm	Cloudflare	Telling people from robots and protecting against attacks	30 minutes
_cfuvid	Cloudflare	Applying traffic limits fairly	Until you close the browser
cf_clearance	Cloudflare	Remembering that you passed a security check	Up to 1 year
__stripe_mid	Stripe	Fraud prevention for card payments	1 year
__stripe_sid	Stripe	Fraud prevention for card payments	30 minutes

These companies may change names and durations; their cookie policies prevail: Cloudflare, Stripe, PayPal.

Local storage and the apps

In the browser's local storage we keep your basket, favourites, recently viewed businesses, how the list is shown, vibration on taps and the last address you chose. In the apps we also keep, in the phone's secure storage, the courier's sign-in and the proof that you accepted the terms (so we don't ask again). This data stays on your device only.

How to manage and delete

You can view, block and delete cookies and local storage in your browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data;
• Safari (iPhone/iPad): Settings → Safari → Advanced → Website Data; Safari (Mac): Safari → Settings → Privacy → Manage Website Data;
• Firefox: Settings → Privacy & Security → Cookies and Site Data;
• Edge: Settings → Cookies and site permissions.

In the apps, you can delete the data in your phone's settings (Android: Settings → Apps → Pratoroo → Storage; iPhone: delete and reinstall the app). If you block necessary cookies, some parts (signing in, ordering, paying) stop working.

We keep a record of your cookie choice (date, notice version and encrypted IP address) for 5 years, to prove we informed you (see the Privacy Statement).

If we ever use cookies that need your consent (for example statistics), we only switch them on after you accept — with "Accept" and "Refuse" equally visible — and you can change your choice at any time through the "Cookies" link at the bottom of every page. We update this policy and ask again.

More information: Privacy Statement.