Cookie notice

A cookie is a small piece of text a website saves in your browser so it can remember something the next time you visit. Websites can also save things in your browser's storage ("local storage"), which works in a similar way but is never sent to the website by itself.

Businesses' own websites on TreatHour (yourbusiness.treathour.com, or a business's own address) don't set these cookies: booking there is always as a guest.

• Customers' browsers: nothing. (Your private booking and ticket links are texted or emailed to you, not kept in the browser.)
• Business dashboard: small reminders for business owners and their teams: which team member is calling the queue, which Google-profile checklist steps are ticked, and that the opening hours were reviewed.
• The app keeps your sign-in, your guest bookings and queue tickets (with their private links), and the name, phone and email you last booked with as a guest, in your phone's secure storage; and your city, search filters (never your location) and, while you pick a photo, a note of that step, in its ordinary storage. Deleting the app removes them.

• Google Maps. Maps on TreatHour come from Google. On larger screens the search map loads with the search page; on phones it loads when you tap Map; on a business's TreatHour page when you tap Show map. On business websites the map in the "Visit" section loads by itself, on phones too (and tells Google the address of the page you're on), and the business dashboard's map pages load maps by themselves. When a map loads, Google receives your IP address and browser details and may set or read its own cookies, under Google's privacy policy.
• Paystack. When you pay, you go to Paystack's secure checkout page, which uses its own cookies under Paystack's privacy policy. We don't load Paystack on our own pages.
• Photos are delivered by Cloudinary. Like any website that serves images, it sees your IP address and browser details. We don't ask it to set cookies.

We don't use Google Analytics, advertising networks, social media pixels or any other tracking. To show businesses how their page is doing, we count page views ourselves, as plain daily numbers, without cookies.

Our hosting provider (Vercel) may set a short-lived security cookie if it needs to check that a visitor isn't a bot. It isn't used for anything else.

Our sign-in cookie is needed for the service you ask for, and the city cookie only remembers a preference. Neither tracks you across websites or is used for advertising, so we don't ask you to accept cookies. If we ever add cookies that need your consent, we'll ask first and update this notice.

Every browser lets you see, block and delete cookies (look in its Settings, under Privacy). You can also use a private window, which forgets cookies when you close it.

• If you block or delete lm_token, you'll be signed out and can't stay signed in. You can still book as a guest.
• If you block th_city, search works normally; it just won't remember your city.
• Blocking google.com cookies stops Google's cookies, but not the map loading. To avoid Google's maps altogether, use the list instead of the map, and on a phone don't tap Map; business websites' "Visit" sections always show one.

More about how we handle personal data: Privacy Policy.

We'll update this document when our service or the law changes. The date at the top shows when it last changed, and earlier versions stay readable below.

• 14 October 2026: First version.