1. Website cookies
pandoo_customer: customer session. pandoo_admin: administrator session. Browser-session cookies for login/security, with additional application time limits. pandoo_language: Greek/English preference for up to one year, changeable through the selector.
Secure over HTTPS and HttpOnly are used where configured. Browser deletion/blocking may affect login/language. No Google Analytics or advertising pixels were found in the current code; this does not mean external services use no storage mechanisms.
2. Third parties and mobile storage
Google sign-in/maps may use third-party technologies. Actual cookies/requests require technical inspection and legal assessment of prior consent. This notice is not a consent mechanism and does not by itself block third-party services.
Pandoo Riders stores language, preferences, map cache, a protected session token and Firebase push token. These are device storage rather than browser cookies, covered by the privacy policy.
Adding analytics/advertising requires review and, where needed, accept/reject controls that actually block loading before the choice. Contact: admin@gncs.gr.