Cookie Policy.

This policy explains how BookAppointment uses cookies and similar technologies on our website and in the app, in line with the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR.

What are cookies?

Cookies are small text files stored on your device by a website. They let a site remember your preferences, keep you signed in, and understand how the site is used. Similar technologies (local storage, pixels) are used the same way.

Categories of cookies we use

1. Strictly necessary

Required for the site to function. Can't be disabled and don't need consent.

• sb-* — authentication session (Supabase Auth).
• ba:cookie-choices-v2 — local storage remembers separate analytics and advertising choices.
• ba_ad_visitor — first-party HTTP-only cookie links choices to consent evidence for up to one year; never sent to Meta.
• srb_cookie_consent — legacy tenant analytics choice.
• __cf_bm — Cloudflare bot management (bot detection, 30 min).

2. Functional

Remember choices you make — e.g. theme, language, calendar sync preferences, and whether you've already added your rota to Apple Calendar. Stored in local storage. Set only if you accept.

3. Analytics (optional)

Analytics help understand feature usage and improve the product. Analytics and advertising are separate choices.

Advertising (optional)

With explicit advertising acceptance, the Meta Pixel and Conversions API share page visits, completed business sign-ups and submitted marketing enquiries with Meta Platforms (Facebook and Instagram) for ad measurement and optimisation. This includes event time, page address, IP address, browser details and _fbp / _fbc advertising cookie identifiers (typically retained by Meta cookies for up to three months). Names, emails, phone numbers, form text and tenant customer bookings are excluded. Meta may combine events with its own platform data.

I retain the visitor reference, choice, time, region and notice version as consent evidence. Withdrawal records a refusal without erasing previous acceptance evidence. Blocked conversions are never replayed after later acceptance.

4. Third-party payment cookies

When you visit a page that loads Stripe (checkout, billing portal, Connect onboarding), Stripe may set its own cookies for fraud prevention. See Stripe's cookie policy.

Managing your choice

You can change or withdraw advertising consent in Cookie settings. Opening settings changes nothing; saving a refusal stops new browser and server reports, including other open tabs.

Cookie settings

You can also block or delete cookies through your browser settings, but parts of the site may not work as expected (e.g. staying signed in).

More information

See our Privacy Policy for how we handle personal data more generally, or contact privacy@bookappointment.co.uk.