Cookie Policy

Last updated: November 14, 2026

This page explains the cookies and similar tools on our website (rootscoffeehouse.com) and on our online ordering page, what each one does, how long it lasts, and how to change your choices. It goes together with our Privacy Policy.

What Is a Cookie?

A cookie is a small text file that a website saves in your browser, so it can remember your browser between pages and visits. “Similar tools” do the same job in other ways, such as your browser’s local storage, or tiny images (pixels) that tell a company a page was opened. Below, we call all of them cookies to keep it short.

The Short Version

Our website uses cookies from Google to count visits and to measure and show our ads, and the Meta pixel (Facebook and Instagram) to measure and show our ads. Decline turns these off.
Squarespace, which runs our website, sets a few cookies of its own for security and visit counts, and the background video on our home page, played by Vimeo, sets its own. Decline does not turn these off.
Our online ordering page is run by Square and has its own cookies, including Meta’s advertising cookies from our pixel there and the Google Analytics cookies we have added through Square’s settings. Our website’s cookie bar and Cookie Choices link do not apply on that page.
In the United States, our website’s analytics and advertising cookies are on unless you decline. The cookie bar does not pop up for you; open it with Cookie Choices. If your browser sends a Global Privacy Control signal, we turn advertising cookies off for you. If your browser is set to a European time zone, the bar appears when you arrive, and these cookies stay off until you press Accept.
You can change your mind at any time: press Cookie Choices.

Cookies on rootscoffeehouse.com

Analytics and advertising (Decline turns these off)

_ga and _ga_SQ4FKF6X64 (Google Analytics). They give your browser a random ID so we can count visits, see which pages are used and see how people reach us. They hold no name or email. How long: up to 2 years. Your choice: analytics. Off when you press Decline. A Global Privacy Control signal alone leaves them on.
Google ad measurement (Google). Because our Google Analytics is linked to our Google Ads account, your browser also contacts Google’s ad measurement server (stats.g.doubleclick.net) so Google can measure our ads. How long: any cookies are set by Google, under Google’s rules. Your choice: advertising. When you press Decline, or your browser sends Global Privacy Control, Google is told not to use advertising cookies. Decline also deletes any Google Ads cookies our website had saved.
_fbp (Meta, through the Meta pixel we run on our website). Lets Meta recognize your browser so we can measure our ads and show them to people who visited. How long: 90 days. Your choice: advertising. Off when you press Decline or your browser sends Global Privacy Control.
_fbc (Meta, through the same pixel). Saved when you arrive by clicking a link on Facebook or Instagram, such as one of our ads. It remembers that click so Meta can tell us whether an ad led to the visit. How long: 90 days. Your choice: advertising. Off when you press Decline or your browser sends Global Privacy Control.

Set by Squarespace and Vimeo (Decline does not turn these off)

crumb (Squarespace). Security: protects the website and its forms. How long: until you close your browser. Needed for the website to work safely.
ss_cvr and ss_cvt (Squarespace’s visit statistics). Help Squarespace’s statistics count unique visitors and their visits on our website. How long: ss_cvr up to 2 years, ss_cvt 30 minutes. Squarespace may also set ss_cid and ss_cpvisit (up to 2 years) and ss_cvisit (30 minutes) for the same purpose. Squarespace sets these on every page, whatever you choose on our cookie bar. Its statistics also send each page view to Squarespace’s own servers.
vuid, cf_clearance, __cf_bm and __cf_ob (Vimeo, which plays the background video on our home page). Set when the home page loads. vuid is a Vimeo visitor ID for Vimeo’s own statistics (up to 2 years). The other three are security cookies used by Cloudflare, the service that protects Vimeo’s player; how long they last varies. Your cookie bar choice does not change them.
Browser-storage items squarespace-announcement-bar and test (Squarespace). The first remembers whether you closed the site’s announcement bar; the second is a test item saved by Squarespace’s software. How long: until you clear your browser’s site data.

Your cookie choice

roots_consent (browser storage, saved by our cookie bar). Remembers whether you pressed Accept or Decline, so your choice applies on your next visit. It does not track you. How long: until you clear your browser’s site data. Needed for your choice to stick.

Other things you may notice:

Our website host is Squarespace. Besides the cookies above, it contacts its own servers to show pages and pictures, so Squarespace sees your IP address and browser details, as any website host would.
Outside servers. To show a page, your browser also fetches our fonts from Adobe Fonts and loads Google’s tag for our website statistics. The home page also plays a background video hosted by Vimeo. Those companies see your IP address and browser details when that happens, as they would for any website.
Spam check on forms. Our website’s forms can use Google reCAPTCHA, a spam check run by Google. Google sees your IP address and browser details when it runs.

Cookies on Our Online Ordering Page (Square)

When you press Order Online, you go to rootscoffeehouse.square.site, a page run by Square. We do not control that page’s cookies, that page has no cookie bar, and our website’s cookie bar and Cookie Choices link do not apply there, so they cannot turn these off. When we last checked (October 2026), an ordinary visit to that page set the following, and our Meta pixel and Google Analytics on the page add their own cookies. The Order Online link also carries a code from our website’s Google Analytics cookie (shown in the address as “_gl”), so that Google Analytics counts your visit to both as one visit. How long Square’s own cookies last is set by Square and can change.

_fbp and _fbc (Meta, through the Meta pixel we have added to this page). Advertising, the same as on our website: they let Meta recognize your browser, and _fbc remembers a click from Facebook or Instagram. How long: 90 days.
_ga and _ga_SQ4FKF6X64 (Google Analytics, which we have added to this page through Square’s settings). Statistics, the same as on our website: they give your browser a random ID so visits, items viewed and orders can be counted. They hold no name or email. How long: up to 2 years.
_snow_id… and _snow_ses… (Square’s site statistics). Count visits and visit sessions on the ordering page. How long: varies.
XSRF-TOKEN, publishedsite-xsrf and websitespring-xsrf (Square). Security: protect the page, its forms and checkout. How long: varies.
__cf_bm (Cloudflare, which protects Square’s servers). Security: helps tell real visitors from automated bots. How long: about 30 minutes.
_dd_s and browser-storage items starting _dd_c_rum (Square’s performance monitoring). Measure how fast the page loads and where it fails. How long: varies.
Browser-storage items site-visitor-uuid and snowplowOutQueue… (Square). Square’s visitor ID and a queue of page-visit messages waiting to be sent. How long: until you clear your browser’s site data.

Other things you may notice on the ordering page:

Square’s code tells Meta, through our pixel, when a page is opened, when you view an item, when you add an item to your cart and when you place an order, with the order’s value and codes for the items. It also sends a copy of these events through Square’s own servers to Meta, and there is no setting for us to switch that copy off. Our Privacy Policy has the details.
The Meta pixel on this page does not respond to Global Privacy Control or Do Not Track signals.
The page sends error reports to a monitoring service run for Square.
If you arrive from a Google food-ordering link, Square’s code may pass a Google tracking code from your browser to Square when you place an order, so the order can be credited to that link.
The newsletter sign-up uses Google reCAPTCHA, a spam check run by Google. Google sees your IP address and browser details when it runs.

When you check out, Square’s payment tools may set more. Square can change these cookies at any time; its own rules are in its privacy notice at squareup.com/us/en/legal/general/privacy.

Your Choices

On our website: press Cookie Choices to open our cookie bar, then press Accept or Decline. You will also find Cookie Choices at the bottom of our website’s pages. Accept turns on our Google Analytics and Google advertising cookies and our Meta pixel. Decline turns them off and deletes the Google and Meta cookies our website had already saved. We remember your choice in your browser. To change it later, press Cookie Choices again.
Global Privacy Control: if your browser or an extension sends this signal, we turn advertising off automatically: the Meta pixel does not load, and Google is told not to use advertising cookies. Analytics stays on unless you also press Decline. If you press Accept after that, your choice wins.
Visitors in Europe: if your browser is set to a European time zone, the cookie bar appears when you arrive until you make a choice, and our Google Analytics and Google advertising cookies and our Meta pixel stay off until you press Accept. Squarespace’s cookies and the home-page video work the same way for everyone.
In your browser: every browser lets you block or delete cookies; look in its settings under Privacy or Cookies. This also works for the cookies our cookie bar does not control. Blocking all cookies can stop parts of our website and our ordering page from working.
Google: manage ads at adssettings.google.com, or install the Google Analytics opt-out add-on at tools.google.com/dlpage/gaoptout. How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
Facebook and Instagram: use the ad settings in your own account.
Industry opt-out: youradchoices.com.
Our online ordering page: the cookie bar choices above do not reach it. Use your browser’s cookie settings and the Google and Meta settings in this list.

What Decline Does and Does Not Do

Decline does:

tell our Google tag not to use analytics or advertising cookies, and delete the Google Analytics and Google Ads cookies our website had saved in your browser;
stop our Meta pixel on our website (so Order Online and phone taps are no longer sent to Meta) and delete the Meta cookies our website had saved;
remember your choice in your browser, so it applies on your next visit.

Decline does not:

turn off Squarespace’s own visit statistics cookies (ss_cvr, ss_cvt, ss_cid, ss_cpvisit, ss_cvisit) or the page views Squarespace counts on its own servers;
turn off the home-page video from Vimeo or its cookies;
remove crumb, the security cookie our website needs;
stop our pages from loading Google’s tag, so Google still sees your IP address and browser details and may receive basic signals that do not use cookies, such as that a page was opened;
take back what was sent before you declined: in the United States, our Google and Meta tools start when a page opens;
change anything on our online ordering page, which has its own tools (see above).

Changes

We may update this policy. The date at the top shows the latest version.

Questions

Email hello@rootscoffeehouse.com, call 817.349.8059 (Fort Worth) or 817.503.7344 (North Richland Hills), or ask us at the café: 400 Bryan Ave, Fort Worth, TX 76104, or 9101 Texas 26 #101, North Richland Hills, TX 76180.