Cookie Policy

This Cookie Policy explains what cookies and similar technologies are, how El Pueblo Mexican Food uses them on elpueblomex.com, and the choices available to you.

This Policy supplements our Privacy Policy. Please read both together.

What are cookies and similar technologies?

Cookies are small text files placed on your device (computer, phone, tablet) by a website you visit. They allow the site to recognize your device on return visits and to remember preferences or actions.

Similar technologies include: cookies (small text files stored by your browser, used here for consent state and analytics state), session storage (cleared when you close the tab), pixels or tags (tiny image files that record page views), and server logs (records of requests to our servers).

Cookies can be "first-party" (set by this Site) or "third-party" (set by another domain we load content from, such as Google Analytics).

Categories of cookies we use

• Strictly necessary — required for the Site to work (for example, remembering that you've dismissed the cookie banner, keeping form state between pages, protecting against abuse). These cannot be switched off from within the Site.
• Analytics / performance — help us understand which pages people visit, where they come from, and how the Site performs. Data is aggregated and used to improve the Site.
• Functional — remember preferences like selected location or previously viewed menu section to improve your experience.
• Targeting / advertising — we do not currently use advertising cookies on this Site and do not share personal information with advertising networks for cross-context behavioral advertising.

Specific cookies and storage items

Below is a best-effort list of the cookies and third-party trackers that may be set when you visit the Site. Third-party cookies may change without notice; consult the provider for an authoritative list.

ep_consent_pref (first-party cookie; strictly necessary) — stores your analytics-and-marketing consent choice (granted or denied) for one year so the cookie banner does not reappear and so analytics tools can be enabled or disabled accordingly. No personal information.

_ga, _ga_* (first-party cookies from Google Analytics 4; analytics) — distinguish unique visitors and sessions. Only set after you grant analytics consent. See Google's documentation. Typical retention: 2 years (rotated).

__cf_bm, cf_clearance (set by Cloudflare; strictly necessary) — bot-mitigation and security cookies used to distinguish humans from automated traffic. Typical retention: 30 minutes to 30 days.

vercel / _vercel_* (set by Vercel hosting infrastructure; strictly necessary) — routing and caching cookies used to serve the correct version of the Site.

Third parties that may set cookies

Google Analytics 4 (analytics) — set only after you grant consent. See Google's Privacy & Terms and the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.

Cloudflare (security / performance) — see cloudflare.com/privacypolicy.

Vercel (hosting) — see vercel.com/legal/privacy-policy.

If you place an order, you may be redirected to order.online, which sets its own cookies under its own privacy policy.

Your cookie choices

Analytics and marketing cookies are denied by default. When you first visit the Site, a cookie banner lets you Accept all cookies or Decline non-essential cookies. Declining keeps the default-deny state — no analytics cookies are loaded.

You can change or withdraw your choice at any time on our Do Not Sell or Share My Personal Information page (linked in the footer), which provides explicit Opt In and Opt Out controls and shows your current status. Your choice is saved in the ep_consent_pref cookie for one year.

Most browsers allow you to refuse or delete cookies. Check your browser's documentation: Chrome (support.google.com/chrome), Firefox (support.mozilla.org), Safari (support.apple.com), Edge (support.microsoft.com). Blocking strictly necessary cookies may break parts of the Site.

You can opt out of Google Analytics specifically with the browser add-on linked above.

Do Not Track and Global Privacy Control

The Site does not currently respond to Do Not Track (DNT) signals because there is no agreed industry standard for interpreting them.

We do recognize the Global Privacy Control (GPC) signal. If your browser transmits a GPC signal, the Site automatically treats your visit as opted out of any "sale" or "sharing" of personal information under California law and will not load analytics cookies — even before you interact with the cookie banner.

Minors

We do not knowingly set non-essential cookies on devices we believe are used primarily by children under 13.

Changes to this Cookie Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be announced in the cookie banner or elsewhere on the Site.

Contact

Questions about cookies? Email hello@elpueblomex.com with "Cookie Policy" in the subject line.