GlamOps Cookie & Tracking Notice
Contents
Effective date: October 9, 2026 Last updated: October 17, 2026
1. About this notice
1.1. This notice explains how GlamOps LLC ("GlamOps," "we") uses cookies and similar technologies on glamops.net, the GlamOps web app, and Booking Sites and Client Portals that GlamOps hosts for Businesses (together, the "Sites").
1.2. It supplements our Privacy Policy at https://glamops.net/legal/privacy.
2. What cookies and similar technologies are
2.1. Cookies are small text files that a website saves in your browser. Local storage and session storage are similar ways a website can save small amounts of information in your browser. We call all of these "cookies" in this notice.
2.2. First-party cookies are set by the site you are visiting. Third-party cookies are set by a different company.
3. Our approach in short
- We use only the cookies we need to run the Sites, keep them secure and remember your preferences, plus first-party, cookieless analytics.
- We do not use advertising cookies or pixels, and we do not track you across other companies' websites or apps.
- We do not allow third-party advertising pixels, session-replay tools or similar trackers on Booking Sites or intake forms.
- We honor Global Privacy Control.
4. Cookies we use
4.1. Essential cookies
These are needed for the Sites to work. They cannot be turned off in our settings, because the Sites would not work without them.
| Purpose | Examples | Set by | Typical duration |
|---|---|---|---|
| Sign-in | Keep you signed in to your GlamOps account or Client Portal; refresh your session securely | GlamOps (via Supabase Auth) | Until you sign out or your session expires (Client Portal sign-in: up to 30 days) |
| Chosen business | Remember which business you are working in when you belong to more than one | GlamOps | Up to 1 year |
| Security | Protect against cross-site request forgery and session hijacking; detect suspicious sign-ins | GlamOps | Session or short-lived |
| Payments | Fraud prevention on payment pages | Stripe | Set by Stripe under its own policy |
| Team invitation | Remember a team invitation link while you create your login, so you return to it | GlamOps | Up to 7 days |
| App device | In the GlamOps app, link this device to your account for notifications you turned on | GlamOps | Up to 1 year |
| Bot check | On sign-up, sign-in, booking and other public forms, tell people from bots (Turnstile) | Cloudflare | Set by Cloudflare under its own policy |
4.2. Preference cookies
These remember choices you make so you don't have to make them again.
| Purpose | Examples | Set by | Typical duration |
|---|---|---|---|
| Appearance | Light or dark mode | GlamOps | Up to 1 year |
4.3. First-party analytics
We measure how the Sites are used, such as which pages are visited, where visitors came from, and whether a visit led to a sign-up or booking. On Booking Sites, these analytics are collected for the Business that owns the Booking Site and shown only to that Business.
- Analytics are collected and processed by GlamOps itself using our own system. We do not use third-party analytics.
- We use cookieless analytics that do not store an identifier in your browser, with two exceptions:
- when you open a link in an email a Business sent you through GlamOps and then book, a first-party cookie (up to 7 days) holds only that email's link reference, so the Business can see that the email led to a booking; and
- when you arrive at glamops.net from a link with a source tag (for example
?utm_source=instagramor?ref=), a first-party cookie namedglamops_src(up to 30 days) holds only that tag, so we know which link led to a sign-up or a waitlist request.
Neither is used for anything else, and neither is shared with advertisers.
- We do not share analytics with advertising networks, and we do not use them to build profiles about you or target ads.
- We collect only approximate location (city or region from your IP address), never precise location.
- We do not record your keystrokes, mouse movements or screen (no "session replay").
4.4. Cookies we do not use
We do not use:
- advertising or retargeting cookies or pixels (for example, Meta Pixel or Google Ads tags);
- cross-site tracking or data-broker cookies;
- third-party analytics that use your data for their own purposes; or
- session-replay tools.
Because we use only essential cookies and the limited first-party measurement described in section 4.3 (which doesn't track you across sites), we do not show a cookie banner.
5. Businesses' own content
Booking Sites belong to the Businesses that use GlamOps. GlamOps does not let Businesses add their own tracking scripts or pixels to Booking Sites, Client Portals, intake forms or payment pages.
6. Mobile apps
Our mobile apps (when available) do not use cookies for tracking. They store sign-in tokens and preferences securely on your device, and do not use advertising identifiers or track you across other companies' apps or websites.
7. Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale of your personal information and its use for targeted advertising. We do not do either, but we still detect and record the signal so that your choice applies if our practices ever change. You do not need to do anything else.
8. How to control cookies
- Browser settings. Most browsers let you see, block and delete cookies. Blocking essential cookies will stop sign-in and booking from working. Your browser's help pages explain how.
- Global Privacy Control. You can turn on GPC in browsers and extensions that support it.
- Mobile devices. You can manage app permissions (notifications, camera, photos) in your device settings.
- Analytics. Because our analytics are cookieless, there is nothing stored in your browser to delete.
9. Changes
We will update this notice if we change the cookies we use. The "Last updated" date shows when it last changed.
10. Contact
Questions? Email admin@glamops.net or write to GlamOps LLC, Attn: Privacy, 11918 SE Division Street #2046, Portland, OR 97266.