Cookie and Device Storage Policy

Last updated

This page lists the cookies and similar device storage RefinedOS uses. RefinedOS does not use analytics, advertising or tracking cookies, so there is no cookie banner: the storage below is either needed to keep you signed in and secure, or only remembers a setting you chose.

Customers booking on a business’s public booking page do not have any RefinedOS cookie or storage set on their device by that page. A customer who chooses to sign in to a business’s appointments portal (My Appointments) gets only the strictly necessary sign-in items listed below.

What this covers

Cookies are small files a website stores on your device. “Device storage” means similar technology such as your browser’s local storage and service workers. Under the UK Privacy and Electronic Communications Regulations (PECR), we need your consent before using storage that is not strictly necessary. Storage that is strictly necessary to provide something you asked for does not need consent.

What we use

CategoryUsed by RefinedOS?
CategoryStrictly necessaryUsed by RefinedOS?Yes. Listed below.
CategoryFunctional / preferenceUsed by RefinedOS?Yes. Settings you chose in the dashboard. Listed below.
CategoryAnalyticsUsed by RefinedOS?No.
CategoryMarketingUsed by RefinedOS?No.

Strictly necessary

These keep you signed in, keep the service secure and deliver features you turned on. They do not need consent.

NameType and sourceWhat it is forLastsWho it applies to
Namesb-<project>-auth-tokenType and sourceCookie · Supabase (on behalf of RefinedOS)What it is forKeeps you signed in to RefinedOS. May be split into numbered parts (.0, .1) when it is long.LastsPersistent; stays until you sign out or the sign-in session endsWho it applies toOnly after you sign in
Namerefinedos_recoveryType and sourceCookie · RefinedOSWhat it is forMarks a session created from a password-reset link so that only the password-change step is allowed.Lasts15 minutes (HTTP-only)Who it applies toOnly after you sign in
Namerefinedos_admin_business_idType and sourceCookie · RefinedOSWhat it is forRemembers which business a RefinedOS platform administrator is working in while giving support. Re-checked on every request.LastsUp to 7 days (HTTP-only)Who it applies toRefinedOS administrators only
Namerefinedos_admin_plan_previewType and sourceCookie · RefinedOSWhat it is forLets a RefinedOS platform administrator preview what a plan looks like. Ends when admin access ends.LastsUp to 8 hours (HTTP-only)Who it applies toRefinedOS administrators only
Namerp_portal_<business>Type and sourceCookie · RefinedOSWhat it is forKeeps a customer signed in to one business’s appointments portal (My Appointments) after they entered the code emailed to them. One per business; it holds a random value only, never an email address or any booking details.LastsUntil the browser closes and at most 12 hours, or 30 days (ending after 14 days unused) when “Keep me signed in” is ticked; ends on sign out (HTTP-only)Who it applies toOnly customers who sign in to a business’s appointments portal
Namerp_portal_signin:<business>Type and sourceSession storage · RefinedOSWhat it is forWhile a customer is signing in to an appointments portal: remembers the email address they typed, the sign-in step and when another code can be requested, so a page refresh does not lose their place. Removed when they sign in.LastsUntil sign-in completes or the browser tab is closedWho it applies toOnly customers who sign in to a business’s appointments portal
Name/sw.js (service worker)Type and sourceService worker · RefinedOSWhat it is forReceives booking notifications on your device when you have turned notifications on. It does not cache pages or intercept requests.LastsUntil notifications are turned off or the browser data is clearedWho it applies toOnly after you sign in

Functional and preference

These remember a choice you made while using the dashboard, such as light or dark appearance or the calendar view you last used. They are set only after you sign in and as a result of you using that feature, hold only that setting, belong to RefinedOS, and are never used to track you or build a profile. We treat them as exempt user-interface customisation that does not need consent. You can clear them at any time from your browser settings; RefinedOS will then use its defaults.

NameType and sourceWhat it is forLastsWho it applies to
Namerefinedos_calendar_viewType and sourceCookie · RefinedOSWhat it is forRemembers whether you last used the Day, Week or Month calendar, so the page opens the way you left it.Lasts1 yearWho it applies toOnly after you sign in
Namerefinedos-themeType and sourceLocal storage · RefinedOSWhat it is forRemembers your light, dark or system appearance choice.LastsUntil you clear itWho it applies toOnly after you sign in
Namerefinedos-accentType and sourceLocal storage · RefinedOSWhat it is forRemembers the accent colour you chose for the RefinedOS app.LastsUntil you clear itWho it applies toOnly after you sign in
Namerefinedos-appearance-ownerType and sourceLocal storage · RefinedOSWhat it is forKeeps one person's appearance choice from carrying over to the next person who signs in on a shared device.LastsUntil you clear itWho it applies toOnly after you sign in
Namerefinedos.calendar.viewType and sourceLocal storage · RefinedOSWhat it is forRemembers your last calendar view on this device (paired with refinedos_calendar_view).LastsUntil you clear itWho it applies toOnly after you sign in
Namerefinedos.settings.sectionType and sourceLocal storage · RefinedOSWhat it is forRemembers which settings section you last opened.LastsUntil you clear itWho it applies toOnly after you sign in
Namerefinedos_mobile_nav_items_<user id>Type and sourceLocal storage · RefinedOSWhat it is forA copy of the bottom-navigation shortcuts you chose, so they appear instantly. The choice itself is saved to your account.LastsUntil you clear itWho it applies toOnly after you sign in
Namerefinedos-push-cta-dismissedType and sourceLocal storage · RefinedOSWhat it is forRemembers that you dismissed the prompt to turn on booking notifications.LastsUntil you clear itWho it applies toOnly after you sign in
Namerefinedos:billing-dialog:<business id>:<situation>Type and sourceSession storage · RefinedOSWhat it is forRemembers that the subscription reminder has already been shown in this browser session, so it does not open again.LastsUntil you close the browser tabWho it applies toOnly after you sign in
Namerefinedos-install-promptType and sourceLocal storage · RefinedOSWhat it is forRemembers whether you have been offered, dismissed or completed adding RefinedOS to your Home Screen.LastsUntil you clear itWho it applies toOnly after you sign in
NameMeta Facebook JavaScript SDK (third party, run by Meta)Type and sourceThird-party script · MetaWhat it is forLoaded only when a signed-in business administrator presses “Connect WhatsApp”, to run Meta’s WhatsApp sign-up window. RefinedOS switches off the script’s session cookie on RefinedOS’s own site and does not turn on Meta’s analytics options. Meta runs the script, may still use cookies or storage on its own domains, and its policies apply to that.LastsSet by MetaWho it applies toOnly after you sign in

Analytics and marketing

RefinedOS does not use analytics, advertising, social-media tracking pixels or behavioural tracking, and does not load third-party scripts on public booking pages or on the sign-in page. If that ever changes we will ask for your consent before setting anything, offer Accept and Reject with equal prominence, let you change your mind later, and update this page first.

The one third-party script RefinedOS can load is Meta’s sign-up window, and only when a signed-in business administrator presses “Connect WhatsApp”. RefinedOS tells that script not to create a cookie on RefinedOS’s own site and does not switch on Meta’s analytics options. Meta runs the script and may use cookies or storage on its own domains, and Meta’s policies apply to that.

Managing storage

  • You can delete cookies and site data in your browser’s settings. Deleting the sign-in cookie signs you out.
  • You can turn off notifications in your device or browser settings, or in RefinedOS, which removes the notification service worker.
  • Blocking strictly necessary cookies will stop sign-in from working.

More information

How we handle personal data generally is in the Privacy Notice. For questions about this page:

RefinedOS Ltd

116 Ashley Road, St Albans, AL1 5US

Company number: 17520238

Email: info@refinedsites.co.uk