Cookie policy
Last updated 29 September 2026
Tably sets only the cookies it needs to sign you in. There are no advertising or tracking cookies, so there's nothing to accept or turn off.
Cookies
Set by Auth.js when you sign in to the owner or staff app. Guests ordering from a table get none. On a secure (https) connection their names start with __Secure- or __Host-.
| Name | What it's for |
|---|---|
| authjs.session-token | Keeps you signed in. Removed when you sign out or the session ends. |
| authjs.csrf-token | Protects the sign-in form from forged requests. |
| authjs.callback-url | Remembers the page to return to after signing in. |
Stored in your browser
A few preferences are kept in your browser's own storage. They never leave your device and aren't sent to us.
| Name | What it's for |
|---|---|
| tably:sign-in-as | Whether you last signed in as Owner or Staff. |
| crm-sidebar-collapsed | Whether you collapsed the app's sidebar. |
| tably:receipt-paper | The receipt paper width you print on (80 or 58 mm). |
| tably:building-seen | That you've seen the workspace setup animation. Cleared when the tab closes. |
Analytics
Vercel Analytics counts page views without cookies and without identifying you.
Your control
You can clear or block cookies and site data in your browser settings. Blocking the session cookie means you can't sign in. More on what we collect is in the privacy policy.