Cookie Policy
Last updated: October 19, 2026
What this policy covers
This Cookie Policy explains how Ink Booking uses cookies and similar browser-storage
technologies (such as localStorage and the browser cache) when you
use inkbooking.app. It sits alongside our Privacy Policy, which describes how we handle
personal data more generally.
Cookies are small files a website stores in your browser. Some are essential to make the service work; others are optional and only used with your consent.
Your choices
When you first visit, we ask for your consent to non-essential cookies. Strictly necessary cookies do not require consent because the site cannot function without them, but we still disclose them below. You can change your mind at any time.
Categories we use
We group cookies into the following categories. Ink Booking does not currently use functional, analytics, or marketing cookies, and does not sell personal data; those categories are listed for transparency and future use, and stay off unless you opt in.
- Strictly necessary (always on): Required for the site to work — signing in, keeping you signed in, and protecting forms and connections against fraud. These cannot be switched off.
- Functional: Remember optional choices you make to give you a more personal experience. Ink Booking does not use functional cookies today; this control is reserved for the future.
- Analytics: Help us understand how the product is used so we can improve it. Ink Booking does not use analytics cookies today; this control is reserved for the future.
- Marketing: Used to deliver or measure advertising. Ink Booking does not use marketing cookies and has no plans to; this control is reserved for the future.
Strictly necessary (always on)
| Name | Provider | Storage | Purpose | Retention |
|---|---|---|---|---|
sb-<project>-auth-token | Ink Booking (Supabase Auth) | Cookie | Keeps you signed in by storing your authenticated session. Without it you would have to log in on every page. | Session / refresh window |
google_calendar_oauth_state | Ink Booking | Cookie | A short-lived, HttpOnly anti-forgery (CSRF) token used only while you connect Google Calendar. Deleted as soon as the connection completes. | A few minutes (transient) |
ink_cookie_consent | Ink Booking | Local storage | Remembers your cookie choices so we do not ask again on every visit. Storing your consent is itself a necessary function. | 6 months |
storybook_access | Ink Booking | Cookie | A signed, HttpOnly pass that lets approved Ink Booking staff open the internal component library at /storybook. Only set when an approved staff account asks for access; customers and artists never receive it. | 12 hours |
tattoo-booking-<version> | Ink Booking (service worker) | Browser cache | Stores copies of the app's own files (scripts, styles, icons) so pages load quickly and a basic offline page can be shown. It holds no personal data: your bookings and other account data are never cached. | Until the next app update (older copies are deleted) |
Managing cookies in your browser
Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies will stop you from signing in and using core features. Clearing your browser storage will also reset your cookie choices, and we will ask for your consent again on your next visit.
Contact
For questions about this Cookie Policy, contact support@inkbooking.app.