Cookie policy

Cookies are small text files a website stores in your browser. Below is what this site uses, what each one is for, and how long it lasts.

We ask for consent to statistical and marketing cookies the first time you visit. None of them is set before you accept, and you can withdraw your consent at any time under “Cookie settings” in the site footer.

Strictly necessary cookies

These are set without consent, because the site does not work without them.

NEXT_LOCALE — remembers which language you are viewing the site in. Lasts until you close the browser.

We also keep your basket contents and your answer to the cookie prompt in the browser’s local storage. Those are not cookies and are never sent with requests to us, but they stay on your device until you clear your browsing data.

Statistics — Google Analytics

Set only after consent. We use Google Analytics 4 to see which pages are viewed and how the site is used. Google Ireland Limited is the processor, and the data may be processed outside the EEA under Google’s terms.

_ga — tells visitors apart. Up to 2 years (browsers may shorten this; Chrome caps cookies at 400 days).
_ga_<measurement id> — keeps track of the current visit. Same lifetime.

Marketing — Klaviyo

Set only after consent. Klaviyo runs our mailing list, and this cookie links the visit to the subscriber so we do not send irrelevant email.

__kla_id — identifies the visitor for email marketing. Up to 2 years (same browser limits).

Third parties

On the booking page we embed Noona’s booking system in an iframe. Noona sets its own cookies inside that frame and is responsible for them under its own privacy policy; we can neither see nor control them. They are set when you open the booking page, independently of the consent choice above, because the booking form is part of the service you navigated to rather than marketing.

__Host-next-auth.csrf-token — Noona’s protection against forged requests. 180 days.
__Secure-next-auth.callback-url — remembers where Noona should return you after signing in. 180 days.

Managing cookies