Türkçe · English
Cookie Policy
Last updated: 27 October 2026. This is a translation; in case of any discrepancy, the Turkish version prevails.
This policy explains which cookies and similar technologies are used on the Menü Uyum website and business panel, why they are used and how you can manage them. For general information on how your personal data is processed, please see our Privacy Notice.
1. In short
- We use only one cookie, a session cookie that is strictly necessary for the service to work.
- We do not use advertising, marketing, analytics or social media cookies, and we do not track visitors across websites.
- Menus opened by scanning a QR code do not set any cookies.
2. What is a cookie?
A cookie is a small text file saved by your browser when you visit a website. The website reads it on later requests, for example to recognise that you are logged in. The browser's local storage is a similar technology.
3. Cookies we use
| Name | Type | Purpose | Duration |
|---|---|---|---|
mu_oturum |
Strictly necessary, first-party | Recognises your session after you log in and protects forms against forged requests (CSRF) by confirming they were sent by you. It is created only when you log in, sign up or use a form. It cannot be read by JavaScript (HttpOnly) and, on a secure connection, is sent over HTTPS only. | Deleted when you close the browser; becomes invalid on the server after 8 hours of inactivity. |
mu_cihaz |
Strictly necessary (at your request), first-party | Created only in the business panel when you tick "Remember this device" while entering the verification code; on this browser no code is asked at sign-in (the password still is). It is a random key; the server stores only its hash. It cannot be read by JavaScript (HttpOnly). You can remove it at any time on the two-step verification page. | 30 days |
mu_dil |
Functional (at your request), first-party | Created only when you choose a language for the website or business panel, so the next page opens in that language. It holds only the language code. It cannot be read by JavaScript (HttpOnly). | 1 year |
4. Information kept in your browser (menu visitors)
Some choices you make in a QR-code menu are saved only in your own device's browser storage, so they are remembered when you open the page again. This information is not sent to our servers or to the restaurant on its own. Only when you place an order or call a waiter are your table-session code and (if you entered it) your name sent with that request, as described below.
| Name | Contents | Duration |
|---|---|---|
menuuyum-tercih | The allergen and dietary filters you selected, whether to hide items containing allergens, and the price currency. | Until you delete it |
menuuyum-kart | The allergies, their severity and the dietary preferences you selected on the "Show to staff" card. | Until you delete it |
menuuyum-hikaye | Which stories at the top of the menu you have already viewed (so their ring fades). | Until you delete it |
menuuyum-sepet:… | The dishes in your basket before you send the order (per restaurant). | Until you send or delete it (at most 6 hours) |
menuuyum-masa:… | The private code of your table session, so you can follow and cancel your own orders. The restaurant cannot identify you with it. | Until the table is closed (at most 6 hours of inactivity) |
menuuyum-hazir:… | Which of your orders you have already been told are ready (so the alert is not repeated). | Until you delete it |
menuuyum-ad | The name you entered in the basket, so it is filled in for your next order. Sent to the restaurant only with an order. | Until you delete it |
menuuyum-mod | Whether you chose the light or dark look of the menu. | Until you delete it |
menuuyum-cagri | The number and private code of your last waiter call, so the menu can show "Your waiter is on the way". Session storage. | Until the tab is closed (at most 15 minutes in use) |
You can delete this information at any time with your browser's "clear site data" option. In a private window it is deleted when the window is closed.
The business panel and the staff screens (waiter, floor and queue screens) also keep a few display preferences on that device only: light/dark look
(menuuyum-garson-mod, menuuyum-sira-mod), the waiter selected on the screen (menuuyum-garson-kim), automatic receipt printing
(menuuyum-fis-oto, menuuyum-fis:…) and, in session storage, the open tab and open sections (menuuyum-sekme, menuuyum-acik).
So that they can show the last state when the internet is down, the waiter and floor screens keep the last order and table data they received (menuuyum-ekran:…)
and a copy of the page on that device; it is deleted when the staff member signs out. They are not sent to the server.
If the restaurant has enabled "Call waiter", it works in one of two ways. In-app: your table number, the request type (waiter or bill) and the menu language are sent to the restaurant's staff screen; no name or phone number is asked for. The request is kept for 30 days so that the business can answer complaints such as "I called but nobody came", then deleted. WhatsApp: a message opens in your own WhatsApp and you send it yourself; neither the message nor your phone number reaches us.
If the restaurant accepts orders from the table, your order (dishes, quantities, your note, table number, menu language and times) is sent to the restaurant's staff screen; no phone number is asked for. You may enter your name in the basket: staff see it so they know whose bill an item goes on, and it is deleted with the table session after 7 days. Orders are kept for 90 days so that disputes about an order can be settled, then deleted. Payment and receipts are handled by the restaurant.
5. External resources
QR-code menus do not connect to any outside service: everything, including typefaces, is served from our own servers. The services below are used only in the business panel.
Only files or data are fetched from the services below; no cookies are set through them. However, as with any internet request, your device's IP address and browser information are passed to the service concerned.
- Open Food Facts: when a product is looked up by barcode in the business panel, only the barcode number is sent.
6. How can you manage cookies?
You can view, delete or block cookies in your browser settings (Safari: Settings → Privacy; Chrome: Settings → Privacy and security →
Cookies). If you block the mu_oturum cookie you will not be able to log in to the business panel; QR-code menus keep working without cookies.
7. Legal basis
Because the cookie we use is strictly necessary for providing and securing the service, it is based on Articles 5(2)(c) (performance of a contract) and 5(2)(f) (legitimate interest) of the Turkish Personal Data Protection Law No. 6698 (KVKK) and does not depend on your explicit consent. If we ever start using a non-essential cookie (for example visit statistics), it will only be activated after your explicit consent, and this page will be updated.
8. Contact
Menümde
Istanbul
E-mail: iletisim@menumde.com