Cookie Policy
Version: 2026.07.19
Last updated: 19 July 2026
1. What Are Cookies?
Cookies are small text files placed on your device when you use our website. We use cookies and similar storage mechanisms to keep core features working, improve reliability, and understand aggregate usage of the public site, booking flow, client account area, and e-book checkout.
2. Our Cookie Categories
- Strictly necessary: required for essential session, login, booking, and security functionality.
- Limited analytics measurement: privacy-friendly measurement used to understand pageviews and key conversion events without sending names, emails, phone numbers, review text, or booking notes.
3. Cookie Notice
We show a local cookie notice for transparency. Dismissing that notice stores ab_cookie_notice for 6 months so we do not keep showing the same message on every visit.
The notice is informational only. It does not switch analytics on or off.
4. Cookie and Local Storage Items We Use
The table below lists cookies currently used by this site codebase. Some are only set in specific user flows (for example staff tools or account pages).
| Cookie Name | Purpose | Typical Expiry | Category |
|---|---|---|---|
ab_cookie_notice | Stores dismissal of the informational cookie notice. | 6 months | Necessary |
PHPSESSID | Maintains secure server session state. | Session | Necessary |
hash | Session integrity/authentication validation. | Up to 1 hour | Necessary |
loggedIn | Temporary login handoff during booking/account flow. | 5 minutes | Necessary |
fname, lname, phone, email | Temporary prefill for booking fields after login/register flow. | 5 minutes | Necessary |
promo-status, promo-discount | Booking discount-code validation state. | 5 minutes | Necessary |
status, emailExists | Short-lived account/login/register status feedback. | 5 minutes | Necessary |
bookingStatus, dbUpdateSuccess, success | Operational status feedback in staff management flows. | 1-5 minutes | Necessary |
from, until, now | Temporary promotion-window diagnostics. | 5 minutes | Necessary |
umami_logout | Short-lived handoff to complete an anonymous sign-out event after redirect. | About 1 minute | Limited analytics measurement |
tryon_device | Identifies a device for the optional Lash Try-On feature, so we can enforce fair-use limits on AI preview generations and prevent abuse. Stores a random identifier only, not any personal or photo data. | Up to 12 months | Necessary |
5. Analytics
We use Umami Cloud for privacy-friendly analytics on non-staff website areas. It helps us measure pageviews and key business events such as booking progress, completed bookings, client account actions, and e-book checkout outcomes.
We do not intentionally send names, email addresses, phone numbers, review text, booking notes, or consent-form text in frontend analytics events.
6. Managing Cookies
You can reopen the site notice any time using Cookie Notice in the footer. You can also manage or delete cookies in your browser settings.
Blocking necessary cookies can break account login, booking, payment, and other core functionality.
7. Updates
We may update this Cookie Policy to reflect legal, technical, or operational changes. The version/date above will be updated when changes are made.