Cookies & Tracking

Strictly necessary cookies

sc_session — the session cookie for signing in to the Marketplace (set by the server, "httpOnly", never readable by JavaScript). Its lifetime is now a rolling 90 days from last use, and at most 1 year from signing in: you stay signed in until you sign out or do not use the account for 90 days. Signing out deletes the cookie and invalidates the session on our server as well.

sc_pro_refresh — the session cookie for signing in to Stylingcorner PRO, the area for salons (set by the server, "httpOnly", never readable by JavaScript, and in production additionally "Secure" and limited to stylingcorner.ch). Strictly necessary: without it salons would have to sign in again every 15 minutes. Same lifetime as sc_session — a rolling 90 days from last use, at most 1 year. It is replaced with a new value on every use, and deleted and revoked on our server when you sign out.

sc_customer_trusted_device — only set if you explicitly choose "Remember this device" after confirming an email code (also "httpOnly", lifetime 30 days). On its own this cookie grants no access to your account; it only saves you the extra confirmation code.

sc_cookie_consent — stores your choice in this cookie notice (lifetime 180 days): yes/no per category, the version of this notice your choice refers to, and the time of the choice according to your device clock. This cookie is only stored in your browser and is not sent to our database.

A cookie named NEXT_LOCALE is read for the language preference if present; Stylingcorner does not currently set it itself.

Your favourites are stored server-side with your account, not in cookies.

First-party usage statistics ("Analytics" category)

Purpose: to understand how the website is used — for example whether searches are started and completed, which categories and salon cards are clicked, and whether the app or Stylingcorner PRO prompts are used — in order to improve search and presentation. There is no advertising, no profiling of individuals and no disclosure to third parties for advertising.

Events recorded (closed allow-list, enforced by the server): homepage_view (home page viewed), not_found_view (a page-not-found view, with page variant and language), search_started (search started, with origin "home page" or "search bar"), search_submitted (search submitted, with yes/no flags for whether a service, location and date were filled in — not their content), category_clicked (category clicked, with the category key), business_card_clicked (salon card clicked, with the public salon key and whether the card was sponsored or bookable online), app_cta_clicked (link to the App Store or Google Play), business_cta_clicked (Stylingcorner PRO prompt clicked). The additionally allowed event deal_clicked is not currently triggered.

Stored per event: event name, the details listed above, a per-tab identifier and the time. Not stored: name, email address, phone number, account ID, IP address or browser user agent; the server also discards any detail whose key suggests personal data (e.g. "email", "phone", "name", "account", "customer").

Per-tab identifier: with the first event after your consent, your browser creates a random identifier and keeps it in session storage (sessionStorage) under sc_analytics_session_id. It applies only to that browser tab, is discarded by the browser when the tab is closed, and is not linked to your account. It is only used to group events from the same visit.

Transmission: events are sent to our own server and from there to our database at our hosting provider. No external analytics service is involved. To limit requests per minute, your IP address is processed briefly but is not stored with the events.

Retention: there is currently no automatic deletion of the stored events; a retention period has not been decided yet (see the note below and the "Data Retention" page).

Withdrawal: you can withdraw consent at any time in the settings below ("Reject optional" or switch off "Analytics"). From then on no events are sent and the per-tab identifier is deleted immediately. Events already recorded are not linked to a person and therefore cannot be singled out and deleted for the person withdrawing.

The mobile app contains no usage statistics and no analytics or advertising SDK.

The four categories

Necessary — required for login, staying signed in, security, language preference and storing your cookie choice. This category cannot be turned off.

Preferences — no feature in this category is currently in use; the setting has no effect today.

Analytics — the first-party usage statistics described above. Off by default.

Marketing — no marketing or advertising tracking is currently in use; the setting has no effect today.

Version of this notice and renewed prompt

Your choice is stored together with the version of this cookie notice. If the notice changes in a way that affects your decision, it gets a new version. A choice that refers to an older version — or that was stored without a version before this versioning was introduced — then no longer applies: all optional categories, including the usage statistics, stay off until you choose again in the banner. Using the website is not affected.

Should another optional tool ever be added, it will only be activated after such a new version and only for visitors who have agreed to it — never automatically for everyone.

Local storage in the mobile app

The app stores the session token (same lifetime as sc_session — a rolling 90 days from last use, at most 1 year) and — if you choose "Remember this device" — a device token (lifetime 30 days) in the secure system storage (Keychain/Keystore). Regular app storage holds up to ten recent searches (search term and place name, no coordinates) and, while you are not signed in, up to twenty recently viewed salons. This data serves only the app's functionality, not tracking.