Cookie Policy

Last Updated: April 30, 2026

1. About This Cookie Policy

This Cookie Policy applies to the website operated by Cafe Rio, accessible at caferiomexican.digital (the "Website"). This policy is designed to comply with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), as well as industry best practices for digital transparency.

By continuing to use our Website, you acknowledge that you have read and understood how we use cookies as described in this policy. You may withdraw or adjust your cookie preferences at any time using the methods described in this document.

2. What Are Cookies?

Cookies are small text files that are placed on your computer, smartphone, tablet, or other internet-connected device when you visit a website. These files are stored in your web browser and allow the website — or third parties — to recognize your browser and remember certain information about your visit, preferences, or behavior over time.

Cookies serve many purposes. Some cookies are essential for the website to function properly and cannot be turned off. Others help us understand how visitors interact with our website, remember your preferences, or deliver relevant advertising content. Cookies do not typically contain personally identifiable information on their own, but they may be combined with other data to identify you.

2.1 How Do Cookies Work?

When you visit caferiomexican.digital, our server sends a cookie file to your browser. Your browser stores this file locally on your device. On subsequent visits, your browser sends the stored cookie back to our server, allowing us to recognize you or your session and retrieve previously saved settings or analytics data.

Cookies can be set by the website you are visiting directly — these are called first-party cookies. Additionally, third-party services integrated into our website (such as Google Analytics or advertising platforms) may also set their own cookies on your device — these are called third-party cookies.

2.2 Similar Tracking Technologies

In addition to traditional cookies, we may also use similar technologies such as:

  • Web Beacons (Pixel Tags): Tiny invisible images embedded in web pages or emails that help us track whether content has been viewed.
  • Local Storage: A mechanism to store data locally within your browser that persists beyond browser sessions.
  • Session Storage: Similar to local storage but data is cleared when you close the browser tab or window.
  • Device Fingerprinting: A technique that collects information about your device's unique characteristics to identify or track your device across sessions.

For simplicity, all of these technologies are collectively referred to as "cookies" throughout this policy.

3. Types of Cookies We Use

We categorize the cookies used on caferiomexican.digital into the following types based on their purpose and duration:

3.1 Essential Cookies (Strictly Necessary)

These cookies are fundamental to the operation of our website. They enable core functionality such as security, network management, and account access. Without these cookies, our website cannot function properly, and certain features or pages may be unavailable. These cookies do not collect personal information used for marketing and cannot be disabled.

3.2 Analytics and Performance Cookies

These cookies collect information about how visitors interact with our website, including which pages are visited most frequently, how long users spend on each page, and whether users encounter any error messages. This data helps us understand and improve the performance of our website. The information collected is aggregated and anonymous.

3.3 Functional Cookies

Functional cookies allow our website to remember choices you have made in the past — such as your preferred language, region, or display settings — and provide enhanced, personalized features. These cookies may be set by us or by third-party providers whose services we have integrated into our pages.

3.4 Advertising and Targeting Cookies

These cookies are used to deliver advertisements more relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and to help measure the effectiveness of advertising campaigns. They are usually placed by third-party advertising networks with our permission. These cookies remember that you have visited a website and may share this information with other organizations, such as advertisers.

4. Specific Cookies We Use

The following table provides detailed information about the specific cookies used on caferiomexican.digital, including their names, purposes, types, and durations:

Cookie Name Provider Purpose Type Duration
_session_id Cafe Rio (First-Party) Maintains your active session while browsing the website, ensuring pages load correctly and your cart or form data is retained. Essential Session (expires when browser is closed)
csrf_token Cafe Rio (First-Party) Security cookie used to prevent Cross-Site Request Forgery (CSRF) attacks when submitting forms on our website. Essential Session
cookie_consent Cafe Rio (First-Party) Stores your cookie consent preferences so we do not display the cookie banner on every visit. Essential / Functional 1 Year
user_lang Cafe Rio (First-Party) Remembers your language or regional preferences so the website displays in your preferred settings on return visits. Functional 1 Year
_ga Google Analytics Registers a unique ID used to generate statistical data on how you use the website. This cookie is the primary Google Analytics tracking cookie used to distinguish individual users. Analytics 2 Years
_gid Google Analytics Registers a unique ID to generate statistical data about how you use our website. This cookie stores and updates a unique value for each page visited. Analytics 24 Hours
_gat Google Analytics Used by Google Analytics to throttle and limit the request rate — specifically, it is used to reduce the frequency of data collection during high-traffic periods. Analytics 1 Minute
_gcl_au Google Ads Used by Google Ads (formerly Google AdWords) to store and track conversions and measure the effectiveness of advertising campaigns displayed to users who arrive at our website via Google Ads. Advertising 90 Days
_fbp Facebook (Meta) Used by Facebook to deliver a series of advertisement products including real-time bidding from third-party advertisers. Tracks your browsing behavior across sites participating in the Facebook advertising network. Advertising 90 Days
fr Facebook (Meta) Facebook's primary advertising cookie. Used to deliver, measure, and improve the relevancy of ads, with a unique encrypted reference to your Facebook account if you are logged in. Advertising 90 Days
NID Google Registers a unique ID to remember your preferences and other information, including preferred language, number of search results displayed per page, and whether you want Google's SafeSearch filter to be active. Functional / Advertising 6 Months
IDE Google DoubleClick Used by Google DoubleClick to register and report website user actions after viewing or clicking one of the advertiser's advertisements, measuring the efficiency of an advertisement and presenting targeted ads to users. Advertising 1 Year
_hjSessionUser Hotjar Set when a user first lands on a page. Persists the Hotjar User ID which is unique to that site. Ensures data from subsequent visits to the same site are attributed to the same user ID. Analytics 1 Year
_hjSession Hotjar Holds current session data. Ensures subsequent requests within the session window are attributed to the same session. Analytics 30 Minutes

Note: The above list represents cookies that may be placed on your device when visiting our website. The actual cookies present may vary depending on your browsing behavior and the features you interact with on our site.

5. Legal Basis for Using Cookies

Under applicable U.S. law, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), we are committed to being transparent about our data collection practices. Certain cookie-based data collection may constitute the "sale" or "sharing" of personal information under California law, and California residents have specific rights related to such activities.

For users located in California, you have the right to:

  • Know what personal information is collected, disclosed, or sold.
  • Opt out of the sale or sharing of your personal information.
  • Request deletion of personal information collected about you.
  • Non-discrimination for exercising your privacy rights.

If you are a California resident and wish to exercise these rights, please contact us using the details provided in Section 9 of this policy or visit our Privacy Policy page for full instructions.

6. How to Manage and Disable Cookies

You have the right and ability to control how cookies are used on your device. Below, we outline the primary methods available to you:

6.1 Browser Settings

Most modern web browsers allow you to control cookies through their settings. You can configure your browser to accept all cookies, reject all cookies, notify you when a cookie is set, or delete cookies after each browsing session. The following links provide instructions for managing cookies in the most commonly used browsers:

6.2 Google Analytics Opt-Out

To prevent Google Analytics from collecting and using data about your visits across websites, you may install the Google Analytics Opt-out Browser Add-on, which is available for most major browsers:

https://tools.google.com/dlpage/gaoptout

6.3 Google Ads and Personalized Advertising Opt-Out

To opt out of personalized advertising served by Google, you can visit the Google Ads Settings page or use the Network Advertising Initiative (NAI) opt-out tool:

6.4 Facebook (Meta) Advertising Opt-Out

To control how Facebook uses your data for advertising purposes, you can update your ad preferences directly through your Facebook account or use the following resources:

6.5 Do Not Track (DNT)

Some browsers include a Do Not Track (DNT) feature that signals to websites that you do not want to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website may not respond to all DNT signals, though we honor recognized opt-out mechanisms as described in this policy.

6.6 Global Privacy Control (GPC)

California residents may use the Global Privacy Control (GPC) signal, which is a browser-level signal indicating your preference to opt out of the sale or sharing of personal information. We honor GPC signals as required under California law.

7. Impact of Disabling Cookies

The impact of disabling cookies depends on which type of cookies you choose to disable:

7.1 Disabling Essential Cookies

If you disable essential cookies, our website may not function properly. You may experience issues such as:

  • Inability to complete online orders or submit contact forms.
  • Loss of session data requiring you to re-enter information repeatedly.
  • Security vulnerabilities due to the absence of CSRF protection.
  • Inaccessibility of certain pages or features of the website.

We strongly recommend keeping essential cookies enabled for the best experience on our website.

7.2 Disabling Analytics Cookies

Disabling analytics cookies will prevent us from collecting data about your interactions with our website. This means we will have less insight into how our website is performing and how we can improve the user experience. However, you will still be able to use all website features without any functional impact.

7.3 Disabling Functional Cookies

Without functional cookies, our website will not remember your preferences between visits. For example, you may need to re-select your preferred language or region every time you visit. The website will still work, but your experience may be less personalized and convenient.

7.4 Disabling Advertising Cookies

If you disable advertising cookies, you will still see advertisements, but they will be generic and less relevant to your interests. Disabling these cookies does not eliminate advertising — it simply means the ads you see will not be tailored to your browsing history or preferences.

8. Third-Party Cookies and External Links

Our website may contain links to third-party websites and integrations with third-party services. When you interact with these embedded services (such as social media sharing buttons, maps, or video content), those third parties may place their own cookies on your device. We do not control these cookies and are not responsible for the privacy practices of third-party websites.

We encourage you to review the privacy and cookie policies of any third-party services you interact with through our website. Key third-party providers used on our website include:

9. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, updates to applicable laws and regulations, or improvements to our website. Any changes will be posted on this page with an updated "Last Updated" date at the top of the policy.

We encourage you to periodically review this Cookie Policy to stay informed about how we use cookies and how you can manage your preferences. Continued use of our website after any changes to this Cookie Policy constitutes your acknowledgment of those changes.

10. Contact Us

If you have any questions, concerns, or requests related to this Cookie Policy, your privacy rights, or the cookies used on our website, please do not hesitate to contact us using the information below:

Cafe Rio — Contact Information

We aim to respond to all privacy-related inquiries within 30 business days. If you are a California resident and wish to submit a formal privacy rights request under the CCPA/CPRA, please clearly state your request in your communication and we will process it in accordance with applicable law.

This Cookie Policy was last reviewed and updated on April 30, 2026. All information is accurate as of this date.