Cookie policy
This policy sets out exactly what we store on your device, why, for how long and how you can control it. We use as few technologies as possible — only those without which ordering would not work.
1. What cookies and similar technologies are
1.1. Cookies are small text files that a website stores in your browser and that are sent back to the server with subsequent requests. They let a site remember information — for example that you are already signed in.
1.2. Similar technologies serve a comparable function without being cookies. We use local storage — data saved in your browser that is not sent automatically to our server with every request. That is where your cart is kept.
1.3. Cookies are first-party when set by our own domain and third-party when set by another domain — for example by an embedded map. By lifetime they are either session cookies (deleted when the browser closes) or persistent cookies (kept until they expire or are deleted).
2. Legal basis
2.1. Under Article 261a(3) of the ECA, which implements Article 5(3) of Directive 2002/58/EC, storing information or gaining access to information stored on a user’s terminal equipment is permitted only with consent, given after clear and comprehensive information.
2.2. Consent is not required where the storage or access is strictly necessary to provide an information society service explicitly requested by the user. That is precisely the case for the technologies described in Section 4 — without them you could not sign in and complete an order.
2.3. Where processing via cookies constitutes processing of personal data, it is carried out under Article 6(1)(f) GDPR — legitimate interest in providing a secure, working service — and, for technologies that require consent, under Article 6(1)(a) GDPR.
2.4. If we introduce analytics or marketing technologies in future, they will not be activated before we ask for and obtain your consent, through a banner offering equally prominent accept and reject options and a separate choice per category.
3. Categories and which we use
| Category | Purpose | Consent required | Do we use it |
|---|---|---|---|
| Strictly necessary | signing in and keeping the session, security, preserving the cart, remembering that you have seen this notice | No — Article 261a(3) ECA | Yes |
| Functional | remembering preferences such as language and a saved delivery address, to avoid re-entering them | Yes, where not necessary for the service itself | Partly — your preferences are stored in your account rather than in separate cookies |
| Analytics | measuring traffic and behaviour — for example Google Analytics, Matomo, Hotjar — for statistics and site improvement | Yes | No — not implemented |
| Marketing and advertising | cross-site tracking, building advertising profiles, remarketing, ad measurement — for example the Meta Pixel, Google Ads | Yes | No — not implemented |
4. Full list of technologies used
| Name | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| rz_session | First-party cookie, strictly necessary | our server | Identifies the signed-in user so that you do not have to enter a code on every page. It contains only a random identifier — not your name, email or address. It is protected with HttpOnly, Secure and SameSite. | up to 365 days from sign-in; deleted on sign-out |
| rz_cart_v2 | Local storage, strictly necessary | the site — in your browser | Holds the contents of your cart — chosen pizzas, sizes, extras and quantities — so it is not lost when you reload or close the page. It is not sent automatically to our server. | until the cart is cleared or you clear your browser data |
| rz_cookie_consent | Local storage, strictly necessary | the site — in your browser | Remembers that you have already seen this notice so we do not show it on every visit. It contains only the version of the notice. | until you clear your browser data |
| cookieConsent, snakeNickname | Local storage, game page only | the site — in your browser | On /en/games these remember the cookie notice choice and the nickname for the leaderboard. They are not used for orders. | until you clear your browser data |
| Google cookies | Third-party cookies | google.com, when an embedded map loads | Google may store information on your device when the embedded map loads. These are governed by Google’s own policies. We neither set nor read them and do not use them for advertising or analytics. | determined by Google |
4.1. This list is exhaustive as at the date of this version. The site does not set advertising identifiers and does not use tracking pixels, device fingerprinting or cross-site tracking.
5. Third-party components
5.1. Address search (Google Places). When you enter a delivery address, the text is sent from our server to the Google Places service so that we can suggest addresses in Burgas. The request comes from us rather than directly from your browser and does not include your name, phone or email. The paid Maps JavaScript API is not used.
5.2. Embedded map (Google Maps). On the establishment information section and when confirming an address, an embedded map is shown which loads directly from Google’s servers to your browser. In doing so Google receives your IP address and browser data and may store information on your device. If you prefer to avoid this, you can block third-party cookies or scripts from Google domains through your browser settings or an extension — the rest of the site and the ordering flow continue to work.
5.3. Web fonts (Google Fonts). The site’s fonts are loaded from Google domains. In doing so Google receives your IP address and browser data. No advertising cookies are set through this component.
5.4. Email delivery. Sign-in codes and confirmations are sent through a transactional email provider. Our messages do not contain tracking pixels to measure opens.
5.5. Google processes data as an independent controller for its own services. Information about Google’s policies is available at policies.google.com/privacy. For more on the recipients of data from our side, see the Privacy policy.
6. Managing and withdrawing consent
6.1. Through the notice on the site. On your first visit we show a notice describing the strictly necessary technologies in use, with a link to this policy. Because we currently use no analytics or marketing technologies, the notice is informational and there is no consent to withdraw. If we introduce technologies that require consent, the banner will offer equally prominent accept and reject buttons, a choice per category and the ability to change your choice at any time.
6.2. Through your browser settings. All modern browsers let you view, block and delete cookies and local storage data, and block third-party cookies:
- Google Chrome — Settings → Privacy and security → Third-party cookies; or Settings → Privacy and security → Delete browsing data;
- Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data;
- Safari (macOS) — Safari → Settings → Privacy → Manage Website Data; (iOS) Settings → Safari → Clear History and Website Data;
- Microsoft Edge — Settings → Cookies and site permissions → Manage and delete cookies;
- Opera — Settings → Privacy and security → Cookies and other site data.
Most browsers also offer a private or incognito mode, in which data is discarded when the window closes, and a setting to block all third-party cookies.
6.3. Signing out. The sign-out button deletes the session cookie and ends the session on our server. This is the fastest way to stop your device being recognised.
6.4. Clearing the cart. The cart is cleared by removing the items from it or by clearing the site’s data in your browser.
6.5. Withdrawing marketing consent. Consent to promotional emails is not given through a cookie. You can withdraw it at any time via the unsubscribe link in the message, from your account, or using the contacts below.
7. Consequences of refusing
7.1. If you block or delete the strictly necessary technologies, the site remains available for browsing the menu, but:
- you will not stay signed in and will need to enter a code for each action;
- your cart will not survive a page reload or closing the page;
- completing an online order may become impossible.
In that case you can order by phone on 0875 40 45 45.
7.2. Blocking third-party cookies affects only the embedded map and does not prevent you from placing an order.
8. Changes and contact
8.1. If we introduce a new technology that stores information on your device, we will update this policy before or at the same time as the change and, where consent is required, will request it in advance.
8.2. Questions about this policy: contact@pizza-rezvaya.bg or 0875 40 45 45. The supervisory authority for cookies and personal data is the Bulgarian Commission for Personal Data Protection (CPDP) — www.cpdp.bg.
8.3. Related documents: Privacy policy · Terms of use. Version 30 August 2026.