We store things on your device, but not with cookies

This app does not set cookies of its own. Instead it uses your browser's local storage and session storage, which are areas of your own device that this website can read and write. The law treats that in the same way as a cookie: it is storage on your terminal equipment, so the same rules about consent apply, and we describe it here in the same way we would describe cookies.

Your sign-in session is held in local storage by our authentication provider so that you stay signed in between visits. Clearing your browser storage for this site will sign you out.

Strictly necessary storage

These are needed to provide the app you asked for, so they are always in use and are not a choice. They stay on your device until you clear them or, for session storage, until you close the tab.

Sign-in session: keeps you signed in and the app secure.

as_cookie_consent_v1: records the storage choice you made here, when you made it, and whether a Global Privacy Control signal was present at the time. This one exists so that we do not have to ask you again.

arctic_basket_v1 and pls_basket_ followed by a studio reference: the shop basket and per-studio treatment baskets you have added items to.

pls_pending_plan: the subscription plan a business chose before signing up, so it is still selected after sign-up.

arctic_nav_theme, arctic_nav_theme_accent, arctic_page_accent, arctic_lang: your theme, accent colour and language preferences.

arctic_bell_pos, arctic_biz_balance_hidden, arctic_story_seen, arctic_acctswitch_hint_seen, arctic_social_done_ followed by your account reference: small interface preferences, such as where you dragged the notifications bell, whether you chose to hide your balance, and whether you have already been shown a one-time tip.

arctic_hero_ followed by a page reference: a cached copy of a page's banner image address so the page does not flash while loading.

pa_ followed by a business reference: a business user's chosen settings for their assistant briefings.

pending_join and ipseen (session storage): carry an invitation link through sign-in, and make sure a security check runs only once per visit.

Storage that depends on your consent

pls_attribution_v1 is written only if you turn on Marketing. It records which advertising campaign brought you to us. Nothing is written to your device for this purpose unless and until you consent, and if you withdraw consent the stored record is deleted from your device. See Campaign measurement in our Data Protection Policy for what is kept and why.

There is currently nothing stored on your device under the Analytics category. See Analytics and advertising below.

Your choices, and changing them

There are three categories: Strictly necessary, which is always on; Analytics; and Marketing. Everything other than Strictly necessary starts switched off and stays switched off until you actively turn it on. Not answering the banner is never treated as agreement.

You can accept all, reject all, or choose each category separately, and rejecting is offered as prominently as accepting. You can change or withdraw your choice at any time, and withdrawing is as easy as giving it.

Global Privacy Control

If your browser or an extension sends a Global Privacy Control signal, we detect it and treat it as a standing opt-out: Analytics and Marketing are switched off, and nothing can turn them on except a deliberate choice by you. We tell you on the banner when we have seen the signal, so that you can confirm it worked. If you then choose to switch a category on yourself, that deliberate choice is respected and we record that the signal was present when you made it.

Analytics and advertising

We currently use no third-party analytics service and no advertising or tracking tags. There is no Google Analytics, no tag manager and no advertising pixel in this app, and nothing on this site shares your browsing with an advertising network.

If that ever changes, this section will name the provider, say what it does and what it stores, before it is switched on, and it will run only under the Analytics or Marketing category you have consented to.

More

Our Data Protection Policy and Privacy Policy explain how we handle the data described here. Questions: hello@arcticstudios.uk.