Cookie Policy

Pheaks sets cookies so you can stay signed in and so an online payment can finish. We do not use analytics, advertising, or social-media cookies. There is no cookie banner because there is nothing optional to turn off.

Supabase Auth stores a session on your device (httpOnly, refreshed while you use the app). Without it, every screen would ask you to log in again. Signing out clears it.

When you pay online, Pheaks sets an httpOnly cookie named paymongo_cs_<booking id> for one hour, SameSite=Lax, so we can match PayMongo's checkout session when you return. It is not used for tracking.

You can delete cookies in the browser. You will be signed out, and an unfinished PayMongo checkout may not resume. For personal data beyond cookies, see the Privacy Policy.