Cookie Policy

Last updated: 19 October 2026

This policy explains what the Loyii website, landing.loyii.app, stores in your browser, why, for how long, and how to change your choice. There is not much to say: we do not use advertising cookies, and we do not use analytics or tracking cookies.

The short version

No advertising cookies and no analytics or tracking cookies on this site.
A few small items keep the site working. They need no permission.
One item needs your OK: remembering the referral code of the person who invited you.
You can change your mind at any time with Cookie settings in the footer of any page.
The Loyii app (loyii.app) has its own list further down.

What this site stores

Cookies, local storage and session storage are small notes that your browser keeps for a website. This is everything this site uses.

Name	What it is	Why	How long	Needs your OK?
`loyii_cookie_consent`	Cookie	Remembers whether you pressed Accept or Reject, so we do not ask on every page. It holds one word: accepted or rejected.	About 6 months, then we ask again	No. It is set only after you choose.
`loyii_locale`	Cookie	Remembers the language you chose, or the language of a link you opened, so the site opens in it next time.	12 months	No. It only remembers the language you asked for.
`loyii-start` or `loyii-start-free`	Session storage	Keeps your answers and the contact details you type in the application form, so a refresh does not lose them.	Until you close the tab	No. The form needs it.
`loyii-ref`	Local storage	Keeps the referral code from a link someone gave you, so the application form can fill it in.	60 days	Yes. Saved only if you press Accept.
Cloudflare Turnstile	Bot check from Cloudflare	Checks that a person, not a program, is sending the application. It loads only when you reach the application form.	Set by Cloudflare	No. It protects the form.

The bot check runs from Cloudflare's own address, challenges.cloudflare.com. We do not set any cookie for it. Cloudflare may keep a small entry in your browser under its own address. Cloudflare also uses what the check collects, such as your internet address and browser details, to improve its bot detection. What Cloudflare does with the information is explained in its Turnstile Privacy Addendum and Cloudflare's Privacy Policy.

Visit counts

Cloudflare, which hosts this site, counts visits. It adds a small script from static.cloudflareinsights.com to our pages and counts requests on its own servers. The script sets no cookie and keeps nothing on your device. Cloudflare says it does not use your internet address or browser details to recognise you for these counts. The script measures things such as how quickly a page loaded. Cloudflare also asks browsers that support it to tell Cloudflare when a page of this site fails to load (this is called network error logging). The browser keeps that request for up to 7 days. It is not a cookie, and Cloudflare says the reports contain no personal data. See Cloudflare's Privacy Policy.

What we do not use

Advertising cookies or ad pixels.
Analytics or tracking cookies.
Cookies from social networks. The icons in our footer are plain links to Instagram, TikTok, YouTube and LinkedIn. They open those sites and set nothing here.
Embedded video players. The film on the home page plays from our own site.

Referral codes

If someone gave you a Loyii link with a referral code in it, we take the code out of the page address. If you press Accept, we also remember it on your device for 60 days and fill it into the application form for you. If you press Reject, or have not chosen, we keep the code only while that page is open and do not store it. The code is optional: you can always type it into the form yourself.

A referral code is used to credit the person who invited you. How we use it is explained in the Referral links and referrer accounts section of our Privacy Policy.

Change your mind

Use Cookie settings in the footer of any page, or , then press Reject or Accept. Reject deletes the referral code saved on your device. You can also clear this site's cookies and data in your browser settings, which removes everything listed above. If your browser blocks cookies altogether, the site still works, but it will not remember your language or this choice.

Loyii app (loyii.app)

This part covers the Loyii app at loyii.app and the pages Loyii serves for restaurants: sign-in, joining a loyalty program, the member card, bookings and visit ratings. They are separate from this website. The app has no analytics, advertising or tracking cookies. Everything it stores is needed to run the service or was chosen by you, so it does not show a cookie banner. Error monitoring runs on our servers only and puts nothing in your browser.

Cookies in the app

The usual name of the first cookie is loyii_session. The app's settings decide its exact name.

Name	Why	How long	Needs your OK?	Set when
`loyii_session`	Keeps your visit working: sign-in, form security and on-screen messages.	24 hours after your last page view	No. It is necessary.	Your first page on the app, including restaurant pages and the sign-in page
`XSRF-TOKEN`	Security: confirms that forms and requests come from the app.	24 hours after your last page view	No. It is necessary.	Your first page on the app
`loyii_session_device_web` and `loyii_session_device_referrer`	Security: recognises this browser as one of the up to 10 an account may be signed in on, so sign-ins can be limited and ended.	400 days if you tick Remember me; otherwise as long as your session (24 hours after your last page view, or until you close the browser). Renewed while you are signed in, deleted when you sign out	No. It is necessary.	Each successful sign-in by a restaurant team member, Loyii operator or referrer
`remember_web_…` and `remember_referrer_…`	Keeps you signed in on this browser.	400 days, renewed while used, deleted when you sign out	No. Only set if you tick Remember me.	Sign-in with Remember me ticked
`tz`	Your device's time zone, so dates and times show on your clock.	Until you close the browser	No.	Every page you open on the app
`loyii_locale`	The language you chose for the app and the sign-in pages.	1 year	No. It is your choice.	When you pick a language
`loyii_language`	The language you chose on a restaurant's Loyii pages.	1 year	No. It is your choice.	When you pick a language there

Browser storage in the app

Most of this is kept only on the devices restaurant staff use.

Name	What it is	Why	How long	Needs your OK?
`sidebar`	Local storage	Whether the menu sidebar is open, for restaurant team members.	Until cleared	No. It is your choice.
`pos-offline-earn-queue-v2`	Local storage	Holds points sales made while the till is offline (which member by number, the last four digits of their phone, the amount, the outlet and whether a manager still has to approve it) and sends them when it is back online. It does not hold PINs or names.	Until the sale is added or staff remove it. It stays after you sign out, and signing out warns you if sales are still waiting.	No. It is necessary.
`loyii.push-unavailable` and `loyii.ios-install-dismissed`	Local storage	Small remembered choices, such as a notice you dismissed.	Until you clear them	No. They are your choices.
`loyii.push-unavailable-hidden`, `loyii.product-update.` and `loyii-service-wait:`	Local storage	Small remembered choices tied to you, such as a notice you dismissed.	Until you sign out	No. They are your choices.
`loyii:boot-reload`, `loyii:splash`, `inertiaLocationVisit`, `historyKey` and `historyIv`	Session storage	Helps the app start and move between pages properly, and scrambles the pages kept in the tab's history so they cannot be read after you sign out.	Until the tab is closed or you sign out	No. It is necessary.

Other things the app uses

Offline support (the file /sw.js and the cache pos-shell-v2): lets the app be installed and the till screens reload without a connection. It is used only for signed-in team members. It keeps the app's code and icons until they are replaced or you clear them, and copies of the two till screens for the person signed in; signing out deletes those copies.
Alerts to a device (push notifications) for bookings, chats and orders: only after a team member turns alerts on and allows notifications in the browser.
Meta (Facebook) sign-in: only on Settings, WhatsApp numbers, to connect a restaurant's WhatsApp number. Meta may set or read its own cookies there, under Meta's cookie policy.
Google reviews: after a good rating, a customer may be taken to the restaurant's Google review page. Google's own cookies apply there.

Control what the app stores

Signing out deletes the sign-in device and Remember me cookies, the saved copies of the till screens, the page-history keys and the small choices tied to you. If sales saved offline are still waiting, you are warned first and they are kept so that they are not lost. Your browser settings let you block or clear cookies and site data for loyii.app; blocking the necessary ones stops sign-in from working. Team members can turn alerts off in the app or in the browser's notification settings for loyii.app.

Changes

If we ever add something that needs your OK, we will say so here, update the date above and ask you again.

Contact

Loyii is operated by PT Nexus Global Group, a company registered in Indonesia and operating from Malaysia. For questions about cookies or your data, email hello@loyii.app. Our Privacy Policy explains how we handle personal data.