Cookie Policy
Last updated:
This Cookie Policy explains how Mealio SAS (hereinafter “Mealio”) uses cookies and similar technologies on the platform accessible at https://mealio.fr. It is drafted in accordance with the recommendations of the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés, CNIL) and the provisions of Article 82 of the French Data Protection Act (loi Informatique et Libertés).
1. What is a cookie?
A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. It is sent by the server of the visited site to the user's browser and stored there for a set period. On subsequent visits, the browser sends it back to the server of the site that issued it.
Cookies allow the site to recognize your device, remember your preferences, analyze browsing behavior and offer you relevant content. They may be placed by the site you visit (“first-party” cookies) or by third-party services (“third-party” cookies).
Technologies similar to cookies exist, such as web beacons, tracking pixels and local storage (localStorage). This policy also covers these technologies.
2. Types of cookies used
Mealio uses four categories of cookies, depending on their purpose and the level of consent required.
2.1 Strictly necessary cookies
Always activeThese cookies are essential to the operation of the Platform. In particular, they enable navigation on the site, the use of its essential features and the security of transactions. Their placement does not require your prior consent (Article 82 of the French Data Protection Act, exemption).
| Name | Purpose | Duration |
|---|---|---|
| __session | Maintaining the user session after login | Session (browser close) |
| csrf_token | Protection against CSRF (Cross-Site Request Forgery) attacks | Session |
| mealio_auth | Authentication and keeping you logged in (remember me) | 30 days |
| cookie_consent | Storing your cookie consent preferences | 13 months |
| cart_id | Identifying the current shopping cart | 7 days |
| __stripe_sid | Stripe session identification for payment processing | Session |
| __stripe_mid | Stripe machine identifier for fraud prevention | 1 year |
2.2 Analytics and audience measurement cookies
Consent requiredThese cookies allow us to measure our site's traffic, understand how visitors use it and improve its performance. The data collected is aggregated and anonymized. They are placed only with your prior consent.
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Unique visitor identifier to distinguish users | 2 years |
| _ga_XXXXXXXX | Google Analytics 4 | Maintaining Google Analytics 4 session state | 2 years |
| _gid | Google Analytics | Distinguishing users (daily identifier) | 24 hours |
| _gat | Google Analytics | Throttling the request rate to Google servers | 1 minute |
| mealio_perf | Mealio | Internal measurement of performance and page load times (first-party) | Session |
Google Analytics is configured with IP address anonymization (IP masking) enabled. Browsing data is therefore processed anonymously and does not allow you to be directly identified.
2.3 Functional and personalization cookies
Consent requiredThese cookies enhance your experience by remembering your preferences and personalizing the display of the Platform. They are not essential to the operation of the service but improve its usability.
| Name | Purpose | Duration |
|---|---|---|
| mealio_theme | Storing the theme preference (dark/light) | 1 year |
| mealio_lang | Storing the preferred interface language | 1 year |
| mealio_address | Storing your usual address | 6 months |
| mealio_recent | Storing your recently viewed restaurants | 30 days |
| mealio_filters | Storing your search filters (cuisine, rating, price) | Session |
2.4 Marketing and advertising cookies
Consent requiredThese cookies allow us to offer you advertisements and promotions matching your interests, measure the effectiveness of our marketing campaigns and limit the number of times the same advertisement is shown to you. They are placed only with your explicit consent.
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta (Facebook) | Conversion tracking identifier for Facebook/Instagram ads | 3 months |
| fr | Meta (Facebook) | Ad targeting and measurement of ad performance | 3 months |
| IDE | Google DoubleClick | Displaying personalized ads and measuring Google Ads conversions | 1 year |
| test_cookie | Google DoubleClick | Checking that the browser accepts cookies (technical test) | Session |
3. Third-party cookies
Some cookies on our site are placed by third parties. Mealio has no direct control over these cookies. We encourage you to review the privacy policies of these third parties for more information.
Google Analytics
AnalyticsAudience analytics tool by Google LLC (United States). Collects anonymized browsing data to measure the site's performance.
Privacy policy →Stripe
EssentialSecure payment provider. Places cookies necessary to secure and process banking transactions.
Privacy policy →Meta (Facebook / Instagram)
MarketingAdvertising conversion tracking pixel on Meta social networks. Placed only with your explicit consent.
Privacy policy →Google Ads / DoubleClick
MarketingGoogle targeted advertising tool. Measures the effectiveness of advertising campaigns. Placed only with your consent.
Privacy policy →4. Managing your consent
On your first visit to the Mealio site, an information banner presents the different categories of cookies used and asks for your consent for non-essential cookies. Your choice is stored for a maximum of 13 months, in accordance with CNIL recommendations.
You can change your cookie preferences at any time by clicking the “Manage cookies” button in the site footer. You can accept or refuse each category of cookies independently.
Withdrawing your consent
You can withdraw your consent to non-essential cookies at any time, without affecting the lawfulness of processing based on consent carried out before such withdrawal. Withdrawing consent has no retroactive effect.
6. Tools to disable third-party cookies
You can object to the placement of third-party cookies directly with the following organizations:
Google Analytics
Google Analytics opt-out browser add-on
Google Ads / DoubleClick
Google ad preferences manager
Meta (Facebook / Instagram)
Facebook ad settings
Your Online Choices (EDAA)
European platform to opt out of advertising cookies from many players
Network Advertising Initiative (NAI)
Bulk opt-out tool for advertising cookies from NAI members
7. Data collected by cookies and its processing
Data collected via cookies is processed in accordance with our Privacy Policy. Analytics data is pseudonymized or anonymized as soon as possible. It is never sold to third parties.
Data collected via marketing cookies may be transferred to recipients located outside the European Union (Google LLC, Meta Platforms Inc.), governed by the Standard Contractual Clauses approved by the European Commission.
8. Contact and complaints
For any question regarding our use of cookies or to exercise your rights, you can contact our Data Protection Officer:
If, after contacting us, you believe that your rights are not being respected, you can lodge a complaint with the CNIL (www.cnil.fr).