Cookies and Similar Technologies Policy
Last updated: 5 November 2026
Version: 2.0
1. Scope
This Cookies and Similar Technologies Policy explains how Mrs Samantha Allonby trading as Boxed Events uses cookies, local storage, pixels, software development kits, device identifiers, notification tokens and similar technologies in connection with BOXXED, our websites, webviews, verification pages, account flows, support pages and administration tools.
2. Technology Provider
BOXXED is powered by NibbleKit technology provided by Paul Hepple trading as DarkByte Creations. NibbleKit provides software, hosting integrations, authentication support, database, storage, messaging, payment and administrative tools. Unless NibbleKit or DarkByte is expressly identified to you as the seller, food business, payment recipient or fulfilment provider for a particular transaction, those technology services do not make NibbleKit or DarkByte the seller of our products or the operator of our food business.
3. Types of Technologies
Cookies are small files a website stores on your device. Session cookies normally end when the browser session ends. Persistent cookies expire after a set period or when you clear them. Browser local storage and similar app storage can remember information between visits without using a cookie; some of this data stays until replaced, cleared or removed by the app.
4. Strictly Necessary Technologies
- BOXXED and NibbleKit: The ordering website saves the basket and checkout recovery information in browser storage so you can return to an order in progress. It also stores sign-in or account-change state to keep baskets separate. The app can keep equivalent account and basket data on the device. Emptying the basket, clearing site data or uninstalling the app can remove local information; it does not cancel an order already placed.
- Firebase (Google): Authentication uses browser storage, including IndexedDB, to keep you signed in across visits where persistence is enabled. The web app also uses session storage to initialise Firebase services and IndexedDB to record SDK activity used in operating the service. Session storage is normally cleared when the tab or browser session ends. Sign out on shared devices and clear site data if you need to remove persistent browser storage.
- Display preference: The ordering site stores your appearance setting in browser storage so it can use your preference on a return visit. It stays there until replaced or cleared.
- Stripe: The ordering website loads Stripe’s payment library. Stripe may use device and browser signals and set payment and fraud-prevention identifiers. See Stripe’s cookie policy for its technologies and durations.
- Push notifications: If you allow push notifications, the app uses a device token to deliver messages to that installation. You can turn notifications off in device settings.
5. Optional Technologies and Consent
Supported release versions of the app use Firebase Crashlytics to help diagnose crashes and errors, including device and app information and technical error reports. Firebase retains crash reports, associated installation identifiers and certain linked data for up to 90 days before beginning removal. See Firebase’s privacy information. Where an optional technology needs consent, we ask before using it and let you change or withdraw your choice. Continuing to browse or accepting our general terms does not give consent.
6. Third-Party Services
Hosting, authentication, payment, map, notification and diagnostic providers may supply technology when you use the relevant service. Our Privacy Policy explains their roles. External pages you open may have their own cookie settings and notices.
7. Personal Data
Where cookies or similar technologies involve personal data, our Privacy Policy explains the categories of data, purposes, lawful bases, sharing, retention and rights that apply.
8. Your Controls
You may be able to manage cookies and similar technologies through our consent tools, your browser settings, device settings, app notification settings, operating system privacy controls or account preferences. Some controls apply only to the device, browser or app installation where they are set.
Blocking storage can stop sign-in, basket recovery or checkout from working. Changes in one browser, app or device may not carry over to another. Clearing cookies and browser storage does not delete your BOXXED account. For that, use the app profile or our data request page.
9. Contact
Questions about this Cookies and Similar Technologies Policy can be sent to:
Mrs Samantha Allonby trading as Boxed Events
128 Midland Road
Royston
Barnsley S71 4QT
United Kingdom
support@boxxedfood.com
07895 986351
You may also want to read: