Cookie Policy
Last updated: 2026-05-01
This Cookie Policy explains how Cosmixxology, Inc. ("we", "us") uses cookies and similar technologies on cosmixxology.com and our mobile applications. It supplements our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. We also use similar technologies — local storage, session storage, pixels, and software development kits (SDKs) — that work like cookies. We refer to all of these as "cookies" in this policy.
2. Categories we use
We group cookies into four categories. Only essential cookies are set without your consent.
- Strictly necessary — required for the site to work (authentication, fraud prevention, your consent record).
- Analytics — measures aggregate usage so we can improve the product.
- Preferences — remembers settings like theme and language.
- Marketing — used by us or partners to show relevant ads on other sites.
3. Cookies we set
| Name | Vendor | Category | Purpose | Duration |
|---|---|---|---|---|
| next-auth.session-token | Cosmixxology (NextAuth) | Essential | Keeps you signed in. | Session / 30 days |
| next-auth.csrf-token | Cosmixxology (NextAuth) | Essential | Cross-site request forgery protection. | Session |
| next-auth.callback-url | Cosmixxology (NextAuth) | Essential | Returns you to the right page after sign-in. | Session |
| cosmixx_consent | Cosmixxology | Essential | Stores your cookie consent choices. | 12 months |
| __stripe_mid / __stripe_sid | Stripe | Essential | Fraud prevention during checkout. | 1 year / 30 minutes |
| cosmixx_theme | Cosmixxology | Preferences | Remembers light/dark theme choice. | 12 months |
| cosmixx_locale | Cosmixxology | Preferences | Remembers your language preference. | 12 months |
| ai_user / ai_session | Microsoft (Azure App Insights) | Analytics | Aggregate usage analytics for site reliability. | 1 year / 30 minutes |
| _fbp | Meta (Facebook) | Marketing | Advertising attribution. Only loaded after consent. | 90 days |
4. Third-party services & SDKs
We use the following third parties to operate the Services. Each one publishes its own privacy notice.
- Stripe — Payment processing. Privacy notice
- Resend — Transactional email delivery. Privacy notice
- Microsoft Azure — Cloud hosting, storage, application insights. Privacy notice
- Google Maps — Salon and professional location lookup. Privacy notice
5. How to control cookies
5.1 Our cookie banner
On your first visit you'll see a banner asking you to accept or reject non-essential cookies, or to customize each category. Re-open it any time using the button below or from the footer.
5.2 Browser controls
5.3 Global Privacy Control
We honor the Global Privacy Control signal. If your browser sends GPC, we treat it as a request to opt out of sale or sharing of personal information for cross-context behavioral advertising under the CCPA/CPRA.
6. Changes to this policy
We may update this Cookie Policy when we add, remove, or change cookies. When changes are material we will bump the consent version, which re-prompts you on next visit. The current version is shown in the banner.
7. Contact
Questions? Email us at privacy@cosmixxology.com.