Last updated: June 2026
This Cookie Policy explains what cookies Bookky sets, why, and what that means for you. It applies to the Bookky admin dashboard, customer booking pages, and any embedded booking widgets operated by Green Candle Digital Studio ("we", "us", "our").
Cookies are small text files placed on your device by a website. They are widely used to make websites work, remember your preferences, and provide information to website owners. Some cookies are deleted when you close your browser ("session cookies"); others persist for a defined period ("persistent cookies").
Bookky uses strictly necessary cookies only. These are cookies without which the service cannot function — for example, keeping you logged in or processing a payment securely. Under the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR, strictly necessary cookies do not require your consent.
sb-[project]-access-tokenStrictly necessaryStores your authentication session so you remain logged in to the admin dashboard or your customer account.
sb-[project]-refresh-tokenStrictly necessaryAllows the platform to refresh your session in the background without requiring you to log in again.
__stripe_midStrictly necessaryUsed by Stripe to identify your device for fraud detection and payment security. Set only during the payment step of the booking flow.
__stripe_sidStrictly necessaryStripe session identifier for fraud prevention during payment processing.
The Supabase cookie names include a project-specific identifier. The names shown above may vary slightly in your browser's developer tools.
We do not use any of the following:
If this changes in future, we will update this policy and display a consent notice where required by law before any non-essential cookies are set.
Stripe's JavaScript SDK (Stripe.js) is loaded during the payment step and may set the cookies listed above. Stripe is an independent controller for data it collects for fraud prevention and financial crime compliance purposes. See Stripe's Privacy Policy for details.
Vercel, our hosting provider, may collect access logs and performance metrics via its edge network. These are not cookie-based and are detailed in our Privacy Policy.
Because we only use strictly necessary cookies, disabling them will prevent the platform from functioning correctly — you will not be able to log in or complete a payment.
You can view and delete cookies via your browser settings:
No. Under PECR Regulation 6(1), consent is not required for cookies that are "strictly necessary" to provide a service explicitly requested by the user. All cookies set by Bookky fall within this exemption — they exist solely to authenticate sessions and process payments, both of which are essential for the Platform to work.
The ICO's guidance ("Guidance on the use of cookies and similar technologies", updated 2019) confirms this position. We keep this policy under review and will add a consent mechanism if we introduce any non-essential cookies.
We will update this page if our cookie usage changes and revise the "Last updated" date above. For material changes (e.g. adding non-essential cookies for the first time), we will notify registered Clients by email.
Questions about cookies or this policy: [email protected]
This document was last reviewed June 2026. This is not a substitute for independent legal advice.