Last updated: 2 September 2026
At Food Influencers United, accessible from https://foodinfluencersunited.com, and through our
technology integrated across various food blogs and brand websites, one of our main priorities is the
privacy of our visitors. This Privacy Policy document outlines the types of information that is collected
and recorded by Food Influencers United and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to
contact us.
Scope
This Privacy Policy applies to all our online activities across our website and integrated partner sites. It
is valid for visitors regarding the information they shared and/or collect in Food Influencers United. This
policy is not applicable to any information collected offline or via channels other than our digital
presence.
Consent
By using our website and our integrated technology on partner sites, you hereby consent to our Privacy
Policy and agree to its terms. We process personal data based on your explicit consent, legitimate
interests, contractual necessity, or other lawful bases as required by applicable data protection laws.
Information We Collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it,
will be made clear to you at the point we ask you to provide your personal information.
If you contact us directly, we may receive additional information about you such as your name, email
address, phone number, the contents of the message and/or attachments you may send us, and any other
information you may choose to provide.
When you register for an Account, we may ask for your contact information, including items such as name,
company name, address, email address, and telephone number.
Data Minimization
We collect and process only the personal data that is necessary for the specified purposes.
How We Use Your Information
We use the information we collect in various ways, including to:
- Provide, operate, and maintain our website and integrated services.
- Improve, personalize, and expand our website and services.
- Understand and analyze how you use our website and integrated technology.
- Develop new products, services, features, and functionality.
-
Communicate with you, either directly or through one of our partners, including for customer
service, to provide you with updates and other information relating to the website and our services,
and for marketing and promotional purposes.
- Send you emails.
- Find and prevent fraud.
Log Files
Food Influencers United follows a standard procedure of using log files. These files log visitors when they
visit websites. All hosting companies do this as part of hosting services' analytics. The information
collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider
(ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to
any information that is personally identifiable. The purpose of the information is for analyzing trends,
administering the site, tracking users' movement on the website, and gathering demographic information.
Cookies and similar technologies
We only use cookies and browser storage that are strictly necessary to deliver the service you ask
for. We deliberately refrain from non-essential cookies such as advertising, analytics, statistics or
social-media cookies. We do not load any third-party tracking scripts. Everything listed below is
strictly necessary, so no cookie consent is required for it.
None of the cookies or storage entries we set contain your name, e-mail address, IP address, account
details or any other information that identifies you. We do not use them to build a profile of you
or to follow you across websites.
The list is split in two parts. Part A is everything that can occur on a partner
website that embeds our software. Part B only concerns our own websites and is not
relevant for partners or for the visitors of their websites. Every entry also states this explicitly
under "Partner websites".
Part A. On partner websites that embed our software
This is the complete list of what a visitor of a partner website can receive from us. We never set
a cookie on the partner's own domain. The Cloudflare cookie below is scoped to
cdn.foodinfluencersunited.com: it appears in the visitor's browser while they are on the partner's
website, but it belongs to our domain, and the partner's domain carries nothing from us. The same
applies to tobasket.com after a buy button is clicked. Nothing outside this part applies to partner
websites.
-
When a partner page with our tag loads: your browser fetches our script and the
supermarket button images from cdn.foodinfluencersunited.com. The only cookie set at this point
is the Cloudflare bot-protection cookie on that domain. Our script itself stores nothing in your
browser.
-
Only after you click a buy button: our shopping widget opens in a frame served
from tobasket.com. Only then are the tobasket.com cookie and the local storage entries listed
below created. If you do not click a buy button, nothing is set on tobasket.com.
Cookies
__cf_bm
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Domain
- cdn.foodinfluencersunited.com
- Set when
- A page that embeds our tag loads: our script and the supermarket button images are fetched from this domain.
- Lifetime
- 30 minutes after your last request to this domain.
- Purpose and contents
- Set by our hosting provider Cloudflare, Inc. to tell real visitors apart from automated traffic (bots), so that our script, images and widget are served reliably. Contains an encrypted value related to Cloudflare's bot score that only Cloudflare can decrypt. It holds no personal data and does not correspond to any user id in our systems. HttpOnly, Secure.
__cf_bm
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Domain
- tobasket.com
- Set when
- Only after you click a buy button and the shopping widget opens.
- Lifetime
- 30 minutes after your last request to this domain.
- Purpose and contents
- Same Cloudflare bot-protection cookie as above, for the shopping widget.
Browser local storage on tobasket.com
The shopping widget keeps a few values in your browser's local storage instead of in cookies,
because cookies do not work reliably inside frames on some mobile browsers. Local storage entries
are not cookies: they are never sent to a server automatically, they can only be read by pages on
tobasket.com, and they have no expiry date. They stay until you clear the site data for tobasket.com
in your browser settings or until the widget removes them. All of them are created only after you
have clicked a buy button and the widget has opened.
fiuDisplayedCookieWall
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Set when
- The first time the widget opens in your browser.
- Lifetime
- Until you clear the site data for tobasket.com in your browser.
- Purpose and contents
- Remembers that the short cookie notice has been shown, so it is not repeated on every visit. Contains the value "true".
fiuSessionId
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Set when
- The first time the widget opens in your browser.
- Lifetime
- Until you clear the site data for tobasket.com in your browser.
- Purpose and contents
- Groups the steps of a shopping session (opening the widget, choosing products, placing the order) under one random reference. We use it to count orders per recipe or product page, to attribute an order to the right partner or campaign, and to detect abuse. Contains a random identifier generated in your browser. It is not derived from and not linked to your name, e-mail address, IP address or any account.
fiuPostalCodeString
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Set when
- Only when you enter a postcode in the widget to check delivery or pickup options.
- Lifetime
- Until you clear the site data for tobasket.com, or until a postcode lookup fails.
- Purpose and contents
- Remembers your postcode so you do not have to type it again. Contains only the postcode you entered, without street, house number or name.
fiuDeliveryMethod:<supermarket>
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Set when
- Only when you choose delivery or pickup for a supermarket.
- Lifetime
- Until you clear the site data for tobasket.com in your browser.
- Purpose and contents
- Remembers whether you prefer delivery or pickup, per supermarket. Contains that choice.
fiuPickupStoreId:<supermarket>
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Set when
- Only when you choose a pickup store for a supermarket.
- Lifetime
- Until you clear the site data for tobasket.com in your browser.
- Purpose and contents
- Remembers the pickup store you chose, per supermarket. Contains the supermarket's own id for that store.
fiuFulfillmentStoreLabel:<supermarket>
- Partner websites
- Yes. Can be set for visitors of a partner website that embeds our software.
- Set when
- Only when you choose a pickup store for a supermarket.
- Lifetime
- Until you clear the site data for tobasket.com in your browser.
- Purpose and contents
- Shows the chosen pickup store in the widget after a reload. Contains the address of that store (the shop's address, not yours).
How to remove them. The Cloudflare cookies expire on their own after 30 minutes of
inactivity. The local storage entries can be removed at any time by clearing the site data for
tobasket.com in your browser settings. Doing so does not break anything: the widget simply asks for
your postcode again the next time you use it.
Part B. Only on our own websites, never on partner websites
The cookies below are only set when someone visits foodinfluencersunited.com or
api.foodinfluencersunited.com directly, for example to read this policy or to use the partner
onboarding. They are never set by our tag or by the shopping widget. They are therefore not relevant
for partners embedding our software, nor for the visitors of their websites.
__cf_bm
- Partner websites
- No. Never set on or through partner websites. Only set when you visit our own website directly.
- Domain
- foodinfluencersunited.com
- Set when
- Only when you visit our own website foodinfluencersunited.com.
- Lifetime
- 30 minutes after your last request to this domain.
- Purpose and contents
- Same Cloudflare bot-protection cookie as above, for our own website.
food_influencers_united_session
- Partner websites
- No. Never set on or through partner websites. Only set when you visit our own website directly.
- Domain
- api.foodinfluencersunited.com
- Set when
- Only when you open a page on api.foodinfluencersunited.com directly, such as this privacy policy or the partner onboarding pages.
- Lifetime
- 2 hours.
- Purpose and contents
- Server session needed to serve the page and to protect its forms. Contains an encrypted, random session reference. HttpOnly, Secure.
XSRF-TOKEN
- Partner websites
- No. Never set on or through partner websites. Only set when you visit our own website directly.
- Domain
- api.foodinfluencersunited.com
- Set when
- Same as the session cookie above.
- Lifetime
- 2 hours.
- Purpose and contents
- Protects forms on api.foodinfluencersunited.com against cross-site request forgery. Contains an encrypted, random token. Secure.
onboarding_session
- Partner websites
- No. Never set on or through partner websites. Only set when you visit our own website directly.
- Domain
- api.foodinfluencersunited.com
- Set when
- Only when a partner signs in to our partner onboarding through the link we e-mail them.
- Lifetime
- 30 days.
- Purpose and contents
- Keeps the partner signed in to the onboarding wizard. Contains an encrypted reference to that onboarding session. HttpOnly, Secure.
Third-Party Privacy Policies
Food Influencers United's Privacy Policy does not apply to other advertisers or websites. Thus, we are
advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed
information. It may include their practices and instructions about how to opt-out of certain options.
GDPR Data Protection Rights
- The right to access – You have the right to request copies of your personal data. We may charge you a
small fee for this service.
- The right to rectification – You have the right to request that we correct any information you
believe is inaccurate. You also have the right to request that we complete the information you
believe is incomplete.
- The right to erasure – You have the right to request that we erase your personal data, under certain
conditions.
- The right to restrict processing – You have the right to request that we restrict the processing of
your personal data, under certain conditions.
- The right to object to processing – You have the right to object to our processing of your personal
data, under certain conditions.
- The right to data portability – You have the right to request that we transfer the data that we have
collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these
rights, please contact us.
Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to
the risk. This includes measures to protect your data from loss, misuse, unauthorized access, disclosure,
alteration, and destruction.
Children's Information
Another part of our priority is adding protection for children while using the internet. We encourage
parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Food Influencers United does not knowingly collect any Personal Identifiable Information from children under
the age of 16 without parental consent. If you think that your child provided this kind of information on
our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly
remove such information from our records.
Data Transfers
Any transfer of personal data outside the EU/EEA is done in compliance with GDPR requirements. We ensure
that appropriate safeguards are in place, such as standard contractual clauses or other lawful mechanisms
for data transfer.