Cookie & Device Storage Policy

The supplied SalonePay web application uses browser session storage for signed-in session tokens and local storage or offline databases for limited application state such as installation preferences, encrypted/offline merchant catalogue data and private enrolment tracking stored on the user’s device. The supplied website does not require advertising or behavioural-tracking cookies.

Security, load balancing, fraud prevention, authentication continuity, language, accessibility, offline queue integrity and shopping-basket functions may use strictly necessary cookies or comparable device storage. These technologies are used only to deliver a service requested by the user and are documented in the production inventory.

Analytics, advertising, cross-site tracking or other non-essential technologies must remain disabled until the applicable country assessment is complete and, where required, the user gives freely chosen, specific and informed consent. Rejecting optional technologies must be as easy as accepting them and must not disable essential payment access.

NFC, camera, Bluetooth, notifications, biometrics, contacts, location and SMS capabilities are requested only when a feature requires them and the operating system permits user choice. Denying an optional permission may limit that feature but must not silently activate another collection method.

Session storage is cleared when the relevant browser session ends or the user signs out. Offline records follow configured reconciliation and legal-retention rules. Users can clear website data through browser or device settings, although deleting unresolved offline records may require recovery or reconciliation before further use.

A production cookie and SDK inventory must identify each technology, provider, purpose, data, duration and country legal basis. Material additions require an updated notice and renewed consent where law requires it. Questions may be sent to privacy@salonepay.sl.