Cookies and local storage

Your choice

You can choose “Necessary only”, “Accept all”, or make separate choices for statistics and marketing. Optional categories are initially off. Closing the first banner without consent activates only necessary features. You can still use the website, contact us and request a consultation without statistics or advertising.

You can change your choice at any time through the cookie settings in the footer. On withdrawal, we stop further measurement in the relevant category and remove accessible analytics/advertising cookies on our domain and stored advertising click identifiers. We cannot directly delete previously transmitted data or cookies on other domains from your browser. Withdrawal applies to the future.

Legal bases and storage types

§ 165(3) TKG 2021 also applies to Local and Session Storage. Storage strictly necessary for expressly requested features does not require cookie consent; processing of personal data is based on Article 6(1)(b), (c) or (f) GDPR, depending on its purpose. Optional statistics and advertising processing takes place with your consent under Article 6(1)(a) GDPR and § 165(3) TKG 2021. Cookie consent is not consent to processing health data, newsletters or WhatsApp messages.

Inventory of storage used

The following overview describes the storage provided for in the app. What is actually present depends on the features used, your choices, provider configuration and your browser. Service cookie lifetimes are not retention periods for your customer record.

bl_consent (cookie and Local Storage); cookieConsent (compatibility mirror)

Necessary: stores your choice, categories, text version and decision timestamp without a random visitor identifier.

Lifetime: 365 days; the compatibility mirror is evaluated together with the valid choice. A new choice is requested when the content version changes.

rima_session (HttpOnly cookie)

Necessary: login and permissions in the studio area.

Lifetime: 24 hours; removed on logout.

bl_anamnesis_verified / bl_anamnesis_receipt (HttpOnly cookies)

Necessary: verified form access and access to your own medical history copy.

Lifetime: No more than 1 hour / 30 minutes. This does not delete the submitted medical history.

beautylaser_cart (Session Storage)

Keeps your selected services/enquiry choices available across the steps.

Lifetime: For the browser tab session or until the selection is cleared.

promo_popup_closed, vacation_popup_closed (Local Storage)

Remembers your explicit decision to close a notice so that it does not appear repeatedly.

Lifetime: Until you clear local storage; no automatic expiry in the app.

laser_check_v2 / laser_check_v2_shown

Only with marketing consent: display frequency and closed/completed status of the consultation offer. Without consent, only the current document’s temporary memory is used for this purpose. No questionnaire answers are held in these storage locations.

Lifetime: Evaluation window: 30 days; pause after closing: 14 days, partial completion: 7 days, completion: 180 days. Session identifier in Session Storage; local values remain until cleared.

blogVotedSlugs (Local Storage)

Remembers an article rating you initiated in the browser and prevents duplicate ratings.

Lifetime: Until local storage is cleared.

bl_click_ids (Local Storage)

Only with marketing consent: advertising click identifier with timestamp to attribute your enquiry.

Lifetime: No more than 90 days; removed after withdrawal of marketing consent.

_ga, _ga_* (Google Analytics)

Only with statistics consent: analyses usage, sessions, pages and interactions. Pseudonymous identifiers are not anonymous.

Lifetime: Provider default of up to 2 years, depending on configuration and browser; accessible cookies on our domain are removed on withdrawal.

_gcl_* (Google Ads); _fbp, _fbc (Meta)

Only with marketing consent: ad attribution, conversion measurement and recognition. Google/Meta may use further cookies for their own services.

Lifetime: Typical lifetime of up to 90 days; actual provider and browser settings may differ. Accessible first-party cookies are removed on withdrawal.

Studio settings (Local Storage) and Firebase authentication storage

Only in the studio area: navigation, calendar display, payment draft and login at the respective workstation.

Lifetime: Display values until deletion; payment draft until completion/discarding; authentication according to session and provider rules.

Statistics and advertising

Google Analytics is activated only with statistics consent, and Google Ads and Meta Pixel only with marketing consent. Without either consent, we do not load Google measurement code. This consent-dependent integration is called Basic Consent Mode. Tracking is excluded on protected studio, medical history, appointment confirmation and receipt pages, and where personal access parameters are present.

With marketing consent, contact data you provide may be hashed in your browser by the Google tag or our Meta integration for matching. These hash values remain personal data. Google and Meta may also process data outside the EEA. Purposes, providers, transfer bases and your rights are explained in the Privacy Policy.

Clearing storage yourself

You can delete cookies, local website data and website permissions in your browser settings. This may remove your choice, in which case we ask again. Session Storage is tied to the tab session; restoring a browser may restore sessions. Local deletion does not remove records already stored by the studio or a service provider. To request access or deletion, email info@beauty-laser.at.