Cookie policy
A cookie is a small piece of data a site stores in your browser. Here are all the ones Merlin uses and how you decide about those that are not necessary.
The operator's legal details are missing: whatever says “to be confirmed” is filled in before publishing.
The essentials, in plain words
- Necessary cookies keep you signed in, protect forms and remember your language.
- Analytics and advertising cookies are optional: they start off and only turn on if you accept them. “Reject” is as visible as “Accept”.
- You can change your decision at any time from “Cookie preferences” at the foot of every page.
This summary helps you read; the full text is what counts.
1. What they are
Cookies and local storage are data the browser keeps so a site remembers something between pages. Necessary ones need no consent because the service cannot work without them; the rest are only used if you accept them.
2. Necessary cookies
All of them are Merlin's own, travel only over a secure connection and cannot be read by another site.
| Name | What it does | Lifetime |
|---|---|---|
__Host-merlin_session | Keeps you signed in. | 24 hours |
__Host-merlin_csrf | Protects your forms from submissions by other sites. | While the session lasts |
__Host-merlin_device | Recognizes a register paired with your business. | 30 days |
__Host-merlin_cashier | Keeps the cashier's shift on that register. | 12 hours |
locale | Remembers the language you chose. | 1 year |
merlin_consent | Remembers which optional cookies you accepted or rejected, and when. | 6 months |
3. Data stored on your device
Besides cookies, Merlin keeps things in the browser's local storage that are never sent on their own: whether sound is on, how you view the catalog, the menu style and whether you prefer less motion.
On registers it also keeps the catalog, prices and sales waiting to be sent, so it can sell without internet. If you erase that data before syncing, those sales are lost.
During your visit, the browser keeps in that tab the campaign or link you came from and a random identifier that does not say who you are, to count how many people reach each sign-up step. It goes when you close the tab.
4. Optional cookies
Analytics: they would tell us how many people visit each page and where they come from, to improve the site. Advertising: they would measure whether a Merlin ad on another platform brought visits or new accounts, and may belong to those platforms.
Both start off. They only turn on if you accept them in the cookie notice or in “Cookie preferences”, and you can accept one and reject the other. Rejecting them changes nothing in the service.
Today only one is active, for analytics, in the table below. When we add another, we will name it here with its provider, purpose and lifetime before asking your permission.
| Name | What it does | Lifetime |
|---|---|---|
merlin_attribution | Analytics, from {brand} itself: remembers which campaign or invite link you came from until you sign up. | 30 days |
5. What we do not do
We use no optional cookie without your permission, we do not track you across sites without consent, and we use nothing you do inside the system for advertising.
6. How to control them
You can see and delete cookies from your browser's settings. If you block the necessary ones, you will not be able to sign in.
You control the optional ones from the notice shown on your first visit or from “Cookie preferences” at the foot of every page. We keep your decision for 6 months; then we ask again. If you withdraw a permission, we delete the cookies of that category that our site can delete.
7. Changes
When this list changes, we will publish the new version with its date.