Cookie Policy

Pheaks sets cookies so you can stay signed in and so an online payment can finish, and keeps two small entries in your browser's local storage for its own usage statistics. We do not use advertising or social-media cookies, and no analytics company receives your data.

Local storage holds a random device id phk_vid and a visit id phk_sid that renews after 30 minutes away. With them, Pheaks counts which pages are read, where people stop, and what breaks, so we can fix it. Form contents are never recorded. Turn on Do Not Track or Global Privacy Control in your browser and nothing is sent. Details are in the Privacy Policy.

Supabase Auth stores a session on your device (httpOnly, refreshed while you use the app). Without it, every screen would ask you to log in again. Signing out clears it.

When you pay online, Pheaks sets an httpOnly cookie named paymongo_cs_<booking id> for one hour, SameSite=Lax, so we can match PayMongo's checkout session when you return. It is not used for tracking.

You can delete cookies in the browser. You will be signed out, and an unfinished PayMongo checkout may not resume. For personal data beyond cookies, see the Privacy Policy.