Cookie Policy

1. What cookies and similar storage are

Cookies are small text records stored by a website in a browser. Similar technologies include local browser storage and short-lived transaction records. They can remember a secure session, preserve a preference or connect the start and end of an authorisation journey.

Some technologies are strictly necessary for a requested service. Others, such as optional analytics or advertising trackers, may require a separate choice or consent depending on the user's location.

2. What DFF Reach currently uses

The exact records used depend on the feature and whether you are signed in. Current DFF Reach storage is limited to operational purposes.

• Authentication cookies keep a signed-in account session working and allow a secure session to be refreshed.
• Provider-connection transaction cookies protect official OAuth journeys for services such as Meta, Instagram, Threads and TikTok and help prevent callback substitution or replay.
• A language-preference cookie remembers the chosen interface language and allows a safe fallback to British English.
• Local browser storage may remember a non-sensitive interface choice, such as whether the workspace navigation rail is collapsed.
• Short-lived pending-link records may preserve a user-requested connection to Direct Food Finder while the user completes a protected sign-in step.

3. Security, scope and duration

Sensitive session and provider-transaction cookies are set with protective attributes appropriate to their purpose, such as HTTP-only access, secure transport in production, same-site restrictions, bounded paths and limited lifetimes. DFF Reach does not expose reusable provider authority through these cookies.

A record lasts only as long as needed for its function. A provider transaction is normally short-lived, while a language preference can remain longer so the interface does not unexpectedly change between visits.

4. Analytics, advertising and future changes

DFF Reach does not currently use advertising cookies or cross-site behavioural profiling on the public service. Operational logs and provider receipts may still be generated on the server to secure and run the service; those records are described in the Privacy Policy rather than treated as browser advertising cookies.

If DFF Reach later introduces non-essential analytics, advertising or similar technologies, the service will identify the relevant categories and provide the notice, rejection and consent controls required by applicable law before activating them.

5. Your browser controls

Most browsers allow cookies and site data to be reviewed or deleted. Blocking all cookies can prevent sign-in, security, language, provider-connection and account features from working.

Where a DFF Reach consent control is shown, changing that control will apply to optional technologies governed by it. It cannot disable a record that is strictly necessary to provide a service you have requested while that service is in use.

6. Global service and local rules

This policy is the global baseline for DFF Reach. In the United Kingdom, applicable data-protection and electronic-communications rules apply. Users elsewhere may have additional mandatory rights under their local law.

DFF Reach does not infer a local consent rule that has not been verified. Country-specific notices or controls may be added where the service, law or technology used in that country requires them.

7. Contact and updates

Contact support@directfoodfinder.com with the subject “DFF Reach cookies” if you have a question about site storage.

This policy will be updated if the browser technologies used by DFF Reach materially change. The current version will remain available at this URL.