Cookie Notice
Every cookie we set is strictly necessary. There are no advertising cookies and no analytics cookies, because there is no advertising or analytics technology in this product at all. Cookies that are strictly necessary to deliver a service you asked for do not require consent, and we do not set any other kind. That is why no banner asks you to “accept all”: there would be nothing behind the button.
There is one real choice, and it is about other companies rather than us: maps, videos and booking widgets that a business can add to its own public website. Those are covered in section 4, and you make the choice on the page itself or through Cookie preferences in that site's footer.
1. Cookies we set
| Name | Set by | Purpose | Type | Lifetime |
|---|---|---|---|---|
socialcarbs_session |
Socialcarbs (first party) | Keeps you signed in and ties your session to your account. | Strictly necessary | 24 hours |
csrf_token |
Socialcarbs (first party) | Protects forms against cross-site request forgery. | Strictly necessary | Session |
sc_embeds |
Socialcarbs (first party) | Remembers which embedded maps, videos or schedulers you chose to allow, so you are not asked again on every page. | Strictly necessary (records your own choice) | 6 months |
_GRECAPTCHA |
Google (reCAPTCHA Enterprise) | Distinguishes people from automated abuse on sign-in, sign-up, password reset and public contact forms. | Strictly necessary (security) | 6 months |
2. Browser storage
Some preferences are kept in your browser rather than in a cookie. They stay on your device, are never sent to us, and you can clear them at any time through your browser settings.
| Key | Purpose | Set by | Lifetime |
|---|---|---|---|
sf-a11y |
Remembers your accessibility preferences for this site. | First party | Until you clear your browser storage |
Arcade device identifier |
Identifies your device for the bakery arcade leaderboard, so a score can be attributed to the device that set it. | First party | Until you clear your browser storage |
3. Other services your browser contacts
Loading a page also fetches scripts, fonts and security checks from the hosts below. They do not set advertising or analytics cookies, but they do receive your IP address, which is why they are listed here.
| Host | Why | What it receives |
|---|---|---|
code.jquery.com |
Serves a JavaScript library. | IP address |
cdn.jsdelivr.net |
Serves JavaScript and CSS libraries. | IP address |
unpkg.com |
Serves a JavaScript library. | IP address |
fonts.googleapis.com |
Serves web font stylesheets. | IP address |
fonts.gstatic.com |
Serves web font files. | IP address |
www.google.com |
reCAPTCHA Enterprise anti-abuse checks on sign-in and public forms. | IP address, browser characteristics, interaction signals |
www.gstatic.com |
Serves the reCAPTCHA client script. | IP address |
js.stripe.com |
Serves the Stripe payment form. | IP address, payment details you enter |
4. Maps, video and scheduling on bakery websites
A business can add a map, a video player or a scheduling widget to its own public website. These come from other companies and would set their own cookies as soon as they load.
So we do not load them until you ask. You see a placeholder with a button, and the content — along with anything it sets — loads only after you press it. If you never press it, nothing from these companies reaches your browser.
| Content | Provider | How it is handled |
|---|---|---|
| Google Maps | Google LLC | Loads only after you choose to view the map. |
| YouTube video | Google LLC | Loads only after you press play, from youtube-nocookie.com. |
| Vimeo video | Vimeo.com, Inc. | Loads only after you press play. |
| Calendly scheduler | Calendly LLC | Loads only after you choose to open the scheduler. |
5. Managing cookies
Embedded maps, videos and schedulers. Every bakery website and shop has a Cookie preferences link in its footer. It lists each provider, shows whether you have allowed it, and lets you withdraw that just as easily as you gave it. Withdrawing takes effect immediately, on that visit. Your answer is kept in a cookie on that site alone, for six months — a choice you make on one bakery's site never follows you to another's.
Everything else. You can block or delete cookies in your browser settings. Blocking the session and security cookies will stop you being able to sign in, because they are how signing in works.
6. If this changes
If we ever add a cookie that is not strictly necessary, we will update this page before it goes live and add a way for you to choose. Our automated checks block a release that introduces an analytics or advertising tag without that happening first.