Cookie Policy
Last updated: June 25, 2026
1. What cookies and similar technologies are
Cookies are small text files that a website can store in your browser when you visit a page. Besides cookies, we also use similar technologies that serve comparable purposes without being, technically, cookies — in particular your browser's storage (localStorage and sessionStorage), where identifiers or preferences can be saved on your device.
Legally, all of these technologies — cookies and any information read from or written to your terminal device through localStorage/sessionStorage — fall under the same rule: they may be used without consent only if they are strictly necessary to deliver the service you asked for. Anything else (traffic analytics, marketing, conversion measurement) requires your prior consent.
This policy explains exactly what we use on SALON TRANSILVANIA's booking site, for what purpose, for how long, and what requires consent.
2. The categories of cookies and technologies we use
| Name | Provider | Category | Purpose | Storage duration | Consent required |
|---|---|---|---|---|---|
| __Secure-next-auth.session-token | SALON TRANSILVANIA (first-party) | Strictly necessary | Keeps your sign-in session active (account/booking) | Session / up to 30 days | No |
| __Host-next-auth.csrf-token | SALON TRANSILVANIA (first-party) | Strictly necessary | Anti-CSRF protection when submitting forms and signing in | Session | No |
| cookie-consent-cmj2w4mlb0004fti9apf9cftw (in localStorage) | SALON TRANSILVANIA (first-party) | Strictly necessary | Remembers your consent choice so we don't ask on every visit | Persistent (until cleared) | No |
| _pst (in sessionStorage) | SALON TRANSILVANIA (first-party) | Analytics | Session identifier for anonymous navigation and booking-funnel analytics | Session (cleared when the tab closes) | Yes |
| _pvid (in localStorage) | SALON TRANSILVANIA (first-party) | Analytics | Anonymous device identifier to detect returning visitors | Persistent (until cleared) | Yes |
| _putm (in sessionStorage) | SALON TRANSILVANIA (first-party) | Analytics | Stores the campaign source (UTM / click ID) for the session, for traffic attribution | Session | Yes |
| Google Analytics 4 (_ga, _ga_*) | Analytics | Aggregate audience statistics (pages viewed, duration, conversions) | Up to 24 months | Yes | |
| Google Tag Manager | Analytics / Marketing | Container that loads the configured analytics and marketing tags | As per loaded tags | Yes | |
| Google Ads (gtag.js, conversions) | Marketing | Advertising conversion measurement and remarketing | Up to 24 months | Yes | |
| Meta / Facebook Pixel (_fbp) | Meta Platforms | Marketing | Conversion measurement and custom audiences for Facebook/Instagram ads | Up to 3 months | Yes |
| TikTok Pixel | TikTok | Marketing | Conversion measurement and TikTok ad optimization | Up to 13 months | Yes |
| Pinterest Tag | Marketing | Conversion measurement and Pinterest ad optimization | Up to 12 months | Yes |
Note: the third-party cookies and tags (Google, Meta, TikTok, Pinterest) are configured per salon. Not all of them may be active on this site — only those enabled by SALON TRANSILVANIA appear.
3. The _pvid and _pst device identifiers are non-essential
We want to be explicit: the anonymous identifiers _pvid (in localStorage) and _pst (in sessionStorage), together with _putm, are NOT strictly necessary for the site to function. They are used solely for traffic and navigation analytics.
Therefore, the script that creates and writes these identifiers to your device loads ONLY after you have given consent. Before consent, no _pvid, _pst, or _putm is written to your browser.
4. Strictly necessary cookies (no consent needed)
The following technologies are indispensable for the site to work and for you to complete a booking securely. For these, the law does not require consent, and disabling them would prevent the service from functioning:
- Session cookie (__Secure-next-auth.session-token) — keeps you signed in while you use your account or complete a booking;
- Anti-CSRF cookie (__Host-next-auth.csrf-token) — protects forms against cross-site request forgery;
- Consent storage (cookie-consent-cmj2w4mlb0004fti9apf9cftw in localStorage) — remembers your own cookie choice so we don't ask again on every visit.
5. No non-essential cookie or tracker runs before consent
On this site, non-essential cookies and technologies (analytics and marketing) are NOT activated before you give consent. Until you accept, the analytics and marketing scripts (Google, Meta, TikTok, Pinterest) and the device identifiers (_pvid, _pst, _putm) are not loaded and write nothing to your device. For Google services, the default consent state is set to “denied” (consent mode) until you accept.
6. How consent works
On your first visit, we show a consent banner at the bottom of the page. From there you can:
- Accept — enables the analytics and marketing cookies and technologies described above;
- Reject / dismiss — the site remains fully functional using only the strictly necessary technologies; no non-essential tracker is loaded.
Your choice is stored locally on your device so you don't have to repeat it on every visit.
7. How to withdraw or change your consent at any time
You can change your mind at any time. You have the right to withdraw your consent as easily as you gave it:
- Use the “Cookie settings” link available on the site — it reopens the consent banner, where you can re-enable or disable the non-essential categories;
- Alternatively, you can clear the site's cookies and storage from your browser settings; on your next visit we will ask you again.
Withdrawing consent stops the loading of non-essential technologies going forward. It does not affect the lawfulness of processing carried out before withdrawal.
8. Who we are and how to contact us
This booking site is operated by:
- SALON TRANSILVANIA SRL
- Company ID: 37525956
- Strada Republicii 105
- România
- Email: [email protected]
- Phone: 0770976325