Cookie Policy
Last updated: July 3, 2026
OpenPizzaMap is built around a simple promise: no ads, no data sold to anyone, and no analytics unless you say yes. The cookies we set by default are the ones that make the site work for you. This page lists every cookie we use, what it does, and how long it lives. If anything ever changes, it changes here first.
What is a cookie?
A small piece of data your browser stores on your device when you visit a website. Cookies let a site remember things like whether you're logged in, what your preferences are, or what you've already clicked. They can be set by the site you're visiting (first-party) or by a service embedded into it (third-party).
Cookies we set
| Name | Purpose | Category | Expires |
|---|---|---|---|
opm.sid |
Keeps you signed in. Without it, every page would log you out. | Strictly necessary | 90 days |
opm.cookies-accept |
Remembers your choice on the cookie banner so we don't ask again on every page. | Strictly necessary | 365 days |
opm.anon |
An anonymous browser id we use to validate form submissions (CSRF protection) when you're not signed in. | Strictly necessary | 365 days |
__Host-opm.x-csrf-token |
A security token that proves form submissions came from this site (CSRF protection). | Strictly necessary | Session |
"Strictly necessary" cookies are exempt from consent under GDPR / ePrivacy because the site can't function without them. We still list them here for full transparency.
Third-party cookies (only if you opt in)
| Provider | When it appears | What it does |
|---|---|---|
| Google Sign-In | Only when you click "Sign in with Google" | Authenticates your Google account so we can create or sign you into your OpenPizzaMap profile. Governed by Google's Privacy Policy. |
| Google Analytics 4 | Only if you click "Accept" on the cookie banner | Sets _ga and _ga_* cookies (up to 2 years) to measure aggregated usage so we can see which pages and pizzerias people reach. Until you accept, it runs in cookieless consent mode and sets nothing. Governed by Google's Privacy Policy. |
What we don't use
- No advertising cookies. We don't show ads, so we don't need them.
- No analytics without your consent. We use Google Analytics 4 only if you click "Accept" on the cookie banner. Until then it runs in cookieless consent mode and sets nothing. We never use it to build advertising profiles.
- No fingerprinting, no cross-site tracking, no data brokers. Ever.
Consent categories
When you click "Accept" on the banner, we record your choice across four standard categories. "Reject" keeps everything but the strictly necessary cookies switched off.
- Necessary: required for the site to function (login, security). Always on.
- Preferences: remember non-essential choices (e.g., map style). Not used today.
- Statistics: aggregated usage metrics. We use Google Analytics 4 here, and only if you accept.
- Marketing: advertising attribution. We will never use this.
How to change your choice
To revisit the cookie banner and update your consent, clear the opm.cookies-accept cookie in your browser settings, or use your browser's "Clear cookies for this site" option. Then refresh the page: the banner will appear again.
You can also block cookies entirely in your browser settings; you'll just be signed out on every page load.
Contact
Questions about cookies, privacy, or anything else: [email protected]. See also our Privacy Policy.