Cookie Policy
Last updated: April 2026
This Cookie Policy describes the types of cookies and similar technologies used by Blero on blero.io and on the public restaurant booking pages, the purposes of these tools and how the user can manage them.
1. What are cookies
Cookies are small text files that websites store on the user's device (computer, smartphone, tablet) to enable or improve the functioning of the site itself and to collect information about its use. In this policy, the term "cookie" is used broadly and includes similar technologies (local storage, pixels, etc.).
2. Cookies used by Blero
| Cookie / Technology | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| JWT auth token (localStorage) | Blero (Xano) | Admin session authentication | Technical, essential (localStorage, not a cookie) | 24 hours |
| Language preference | Blero | Storing the user's chosen language | Technical, essential | 1 year |
blr_staff_key | Blero | Staff session authentication | Technical, essential | 1 year |
blr_staff_session | Blero | Staff device identification (single session) | Technical, essential | 1 year |
_ga | Google Analytics | Distinguish unique users | Analytics (consent) | 2 years |
_ga_* | Google Analytics | Persist session state | Analytics (consent) | 2 years |
| Paddle.js | Paddle | Manage payment checkout | Technical, essential (only during checkout) | Session |
blero_consent | Blero | Store the user's cookie preferences | Essential | 1 year |
_fbp | Meta (Facebook) | Identify the browser for advertising on Facebook/Instagram | Marketing (consent) | 3 months |
_fbc | Meta (Facebook) | Track clicks from Facebook ads | Marketing (consent) | 2 years |
_gcl_au | Google Ads | Attribute conversions to Google ads | Marketing (consent) | 3 months |
_gac_* | Google Ads | Store campaign information | Marketing (consent) | 90 days |
2.1 Cookie categories
Blero groups cookies into three categories, which the user can accept or reject individually via the consent banner:
- Essential — Required for the site to function (authentication, language, storing cookie preferences). Always active and do not require consent.
- Analytics — Help us understand how the site is used via Google Analytics 4 with anonymized IP. Installed only with prior consent.
- Marketing and advertising — Allow us to show relevant advertising on other platforms via Meta Pixel and Google Ads. Installed only with prior consent.
The user can change their preferences at any time via the "Cookie preferences" link in the site footer.
Blero uses Google Tag Manager (GTM) as a centralized system to manage tracking tags. GTM is a technical container that does not install its own cookies: it only manages the loading of analytics and marketing tools (Google Analytics 4, Meta Pixel and Google Ads). The GTM container is loaded only after the user has granted consent to at least one non-essential cookie category; without consent, GTM is not loaded and no tag is fired.
Blero also implements Google Consent Mode v2, the technical mechanism provided
by Google to communicate the user's consent preferences to Google tags. Before consent, all
signals (ad_storage, ad_user_data, ad_personalization,
analytics_storage) are set to denied and no personal data is
collected. After consent, the signals are updated according to the user's choices.
Note: the public restaurant booking pages (blero.io/[slug]/book) do NOT use analytics or marketing cookies. Only essential technical cookies necessary for the booking process are used.
3. Essential technical cookies
Technical cookies are necessary for the proper functioning of the Service and do not require the user's prior consent. Blero uses:
- JWT auth token — needed to keep an authenticated Admin session active. Without this token the user would have to re-enter credentials at every request.
- Language preference — stores the language selected by the user, so the site is shown in the same language on subsequent visits.
4. Analytics cookies
Blero uses Google Analytics 4 to collect aggregate statistical information about the use of the website (pages visited, events, device, browser). The IP address is anonymized (IP anonymization) and data is used exclusively in aggregate form to improve the Service. GA4 is loaded via Google Tag Manager.
These cookies are installed only with the user's prior consent, expressed via the cookie banner. Consent can be withdrawn at any time.
5. Third-party cookies
During the purchase of a paid plan, the Paddle.js script is loaded to handle the checkout. These cookies are active only during the checkout session and are necessary to complete the payment. For more information please refer to Paddle's privacy policy.
Blero also uses, only with the user's prior consent, Meta Pixel (Facebook/Instagram) and Google Ads for marketing and remarketing purposes. These cookies are installed only if the user agrees to the "Marketing and advertising" category via the consent banner. Meta Pixel and Google Ads are also loaded via Google Tag Manager.
6. How to manage cookies
The user can manage cookie preferences directly from their browser. Below are links to the official instructions for the main browsers:
Disabling essential technical cookies may compromise the proper functioning of the Service.
7. Cookie banner and withdrawal of consent
On the first visit to the site, a banner is displayed that allows the user to accept or reject analytics cookies. The choice can be changed at any time via the "Cookie preferences" link in the site footer, or by clearing the browser cookies and reloading the page.
8. Changes to this Cookie Policy
Blero reserves the right to amend this Cookie Policy at any time. Any material changes will be published on the website with the date at the top updated accordingly.
9. Contact
For any request relating to the use of cookies, you may contact privacy@blero.io or send a written communication to Nexora Venture Studio Srl, Piazza della Repubblica 19, 20124 Milano.