This Cookie Policy explains how Ordely uses cookies, local storage, session storage and related technologies when you visit Ordely web pages or use those pages inside the Ordely iOS or Android application.
1About this Policy
Cookies are small text files stored on your device by a website. Similar technologies, including local storage and session storage, allow a website or embedded web page to remember information between screens or visits.
Some storage is required for Ordely to provide core functions such as keeping a cart, maintaining a secure sign-in session, remembering a language and completing checkout. Other storage helps us understand whether the Service is reliable and how users interact with it.
2Storage technologies
Small values sent between your browser or in-app WebView and Ordely servers. They may be session cookies or persistent cookies.
Browser storage that remains on the device until it is removed by the Service, the user, browser settings or app data controls.
Temporary browser storage normally cleared when the relevant tab, WebView or browsing session ends.
Information stored on Ordely servers and linked to a random session identifier held in a cookie.
3Cookies we use
The current Ordely storefront uses the following first-party cookies. Actual expiry can be shorter if you sign out, clear site or app data, or if Ordely invalidates a session for security reasons.
| Name | Category | Purpose | Typical duration |
|---|---|---|---|
| ORDELYSESSID | Essential | Maintains the Ordely session, cart and signed-in state. The cookie is protected with HttpOnly and SameSite=Lax settings and Secure on HTTPS. | Up to 1 year; may end earlier |
| PHPSESSID | Essential | Legacy or compatibility session identifier that may be used during parts of checkout and payment completion. | Session or server-configured duration |
| ordely_auth | Essential | Secure “remember me” token used to restore account access. The token is HttpOnly, SameSite=Lax and Secure on HTTPS. | Up to 1 year |
| ordely_lang | Preference | Remembers the language selected for the storefront. | 1 year |
| ordely_vid | Analytics | Random first-party visitor identifier used by Ordely's internal analytics to distinguish visits without storing a name or email in the cookie. | Up to 2 years |
| ordely_asid | Analytics | Random first-party analytics session identifier used to group events from the same visit. | 30 minutes, rolling |
4Local and session storage
Ordely may store the following information on the device. Storage keys can include a version suffix or a random identifier and may change when the Service is updated.
| Storage or example key | Purpose | Retention |
|---|---|---|
| ordely_checkout_draft_* | Temporarily restores checkout details and a selected delivery point after returning from the map. | Used for up to 24 hours, then ignored or removed |
| ordely_checkout_selected_payment_* | Remembers the payment method selected on checkout. | Until changed or local storage is cleared |
| ordely:fib:pending* | Maintains payment return and completion state for First Iraqi Bank (FIB) payments. | Removed after completion or when payment state is cleared |
| ordelyPushSync::* | Prevents duplicate push-token synchronisation during the same authenticated session. | Session storage |
| historyScrollPosition | Restores the previous position on the search-history page. | Session storage; removed after restoration |
| Payment redirect state | Coordinates automatic payment links, return attempts and completion screens. | Session storage or until payment flow is completed |
Checkout drafts may contain information you entered into the checkout form. Avoid using a shared device, and clear site or application data after use if the device is not under your control.
5Ordely internal analytics
Ordely operates a first-party analytics system to monitor reliability, prevent abuse and improve shopping flows. It may record page paths, page titles, clicks, searches, product identifiers, cart and checkout events, device or platform type, screen size, language, time zone, IP address, user agent, referral context and diagnostic metadata.
Analytics cookies contain random identifiers rather than your name, email or payment-card details. If you are signed in, analytics events may be associated with your Ordely account identifier on the server. Search terms and interaction text can also be recorded, so do not enter sensitive personal information into search fields.
Ordely does not use the internal analytics cookies listed above to place third-party advertising on the Service.
6Third-party services
The audited Ordely storefront code does not currently set third-party advertising cookies. However, a payment page, map, support tool, external link or other third-party content may use its own cookies or storage after you open or interact with that service.
Third-party providers control their own technologies and policies. Depending on the feature you use, providers may include payment processors, map providers, hosting or security providers and product-data services. Review the provider's privacy and cookie information before using an external service.
7Legal basis and consent
Where European data-protection and electronic-communications rules apply, Ordely uses storage that is strictly necessary to provide a service you request, including authentication, cart, security and checkout functions. Optional analytics or preference storage is used on the basis required by applicable law, which may include your consent or Ordely's legitimate interests where permitted.
Where consent is required, you may withdraw it at any time without affecting processing that occurred before withdrawal. Blocking essential storage may prevent account login, cart, checkout, payment or language features from working correctly.
8Your choices and controls
- Browser: use privacy or site-data settings to view, block or delete cookies and local storage for Ordely.
- iOS or Android app: clear the application's website data/cache or application data through device settings. Menu names differ by operating-system version.
- Sign out: signing out invalidates account access and removes the active authentication cookie, although other preferences may remain.
- Private browsing: private/incognito sessions generally remove local site data after the private session closes.
- Contact us: ask questions or exercise applicable data-protection rights at info@ordely.org.
Deleting or blocking storage can remove saved language, checkout and payment state and may require you to sign in again.
9Mobile applications and WebViews
The Ordely mobile application can display web content inside an embedded browser known as a WebView. Cookies and local storage created there may be held within the application rather than your normal browser. Removing browser cookies does not always remove WebView data, and deleting app data may sign you out and remove saved checkout state.
Device permissions such as notifications, location, camera and photo access are not cookies. They are controlled separately through iOS or Android settings and are described in the Privacy Policy.
10Changes and contact
We may update this Cookie Policy when Ordely changes its storage technologies, service providers or legal requirements. We will publish the revised version on this page and update the effective date.
Astera Logistics GmbH
Am Kielsgarben 8
40789 Monheim am Rhein, Germany
info@ordely.org
FOP Taranets I I (Ukraine)
Technical enquiries:
info@sande-it.com