What we store in your browser, and why
In one sentence: this site sets one cookie, only around booking, and it carries nothing about you.
This policy lists every cookie set on our websites, lashandbeautylounge.ca and spaliciousfunbar.ca, both operated by Lash & Beauty Lounge on one Square account and one customer directory, what each cookie is for, how long it lasts, and whether the site needs it, the same way on both. It describes our own practices. Every text message and email a client of either website receives comes from Lash & Beauty Lounge, whichever site was used to book.
We use only the browser storage the site needs to work and to stay secure. We use no analytics, advertising, social or cross-site tracking cookies, and we build no profile of visitors. A cookie that is strictly necessary does not require your consent under Canadian law, so the small notice we show is there to inform you rather than to ask you.
There is no account on this site, so there is nothing to sign in to and no cookie that recognizes you on a later visit. Browsing the site sets nothing at all. Only the booking page can set a cookie, and only in the one case below.
| Cookie | What it is for | How long it lasts | Does the site need it? |
|---|---|---|---|
lbl_captcha | Remembers that you have already passed our bot check, so booking does not challenge you a second time. Set only while the salon has the bot check switched on, and only once you have passed it. | 45 minutes | Yes, when the bot check is on |
It is set by our server and cannot be read by any script running in the page. It carries nothing about you, not your name, not your email address, nothing, and it is not used to recognize you on a later visit or on any other website.
Your browser also keeps a handful of values locally. None of these are ever sent to our server:
Clearing your browser storage removes all of these, and the cookie notice will appear again.
To keep automated software from flooding our booking form and our at-home distance check, our booking page may run a Cloudflare Turnstile check. It is not a cookie, but it is a third party your browser contacts, so it belongs here. Cloudflare acts for us when it performs the check, and for itself when it uses what it collects there to improve its own bot detection, under its own Turnstile Privacy Policy, which we do not control. Our Privacy Policy explains this in full.
You can view, delete or block cookies through your browser settings. Because the one cookie we set is strictly necessary, blocking it means the bot check challenges you again at every step. Nothing we set is used for advertising, so there is nothing to opt out of.
We may amend this policy at any time. The version and effective date shown above tell you which one you are reading. That posted version is the one that applies, and every earlier version stays readable on our Document History page. Write to us and we will tell you what changed.