Legal
Cookie Policy
Last updated: 2 September 2026
This Cookie Policy explains how QBarber uses cookies and similar technologies on qbarber.co.uk and related apps. It should be read with our Privacy Statement and Terms of Service.
2. Types of cookies QBarber uses
We group cookies as follows:
- Essential — required for login, security, and core queue functions
- Functional — remember shop or interface preferences so the service is easier to use
- Analytics — not in active use today; described below in case we add them later
QBarber does not use advertising cookies and does not use cookies to track you across other companies’ websites for ads.
3. Essential cookies
These cookies are strictly necessary. They power authentication, sessions, and security. Without them you cannot sign in, stay signed in, or use the queue reliably.
Essential cookies cannot be switched off in QBarber because the platform would not work. You can still block them in your browser, but login, checkout, and ticket tracking may fail.
| Cookie / storage | Purpose | Typical duration |
|---|---|---|
| Session / authentication cookies | Keep shop-owner, admin, and staff users signed in and restore a valid session. | Session, or until the login expires |
| next-auth.session-token (and related NextAuth cookies) | Admin authentication and session management where NextAuth is used. | Session or limited persistent period |
| CSRF / security tokens | Protect login and forms against cross-site request forgery. | Session |
| Queue ticket / client identifiers | Remember your place in a shop queue on kiosk, mobile, or display flows. | While you are in the queue, then a short period after |
| Device pairing tokens | Keep kiosk, tablet, and display devices paired with the correct shop. These tokens ensure that in-shop hardware remains connected to the right configuration and cannot be switched accidentally. | While the device remains paired |
| Impersonation session markers | Maintain a secure impersonation session when authorised users (such as administrators or shop owners) temporarily act through another role for legitimate operational purposes. These are strictly necessary for security and audit logging. | Session |
4. Functional cookies
Functional cookies (and local storage) remember choices that make QBarber smoother to use. They are not used for advertising.
| Cookie / storage | Purpose | Typical duration |
|---|---|---|
| Selected shop | Remember which barbershop you last used so you do not have to reselect it every visit. | Until you change shop or clear site data |
| Interface preferences | Remember shop-owner or support UI choices, such as search, map visibility, or role display in admin tools. | Until you change them or clear site data |
| Barber / device pairing state | Help kiosk, tablet, and display devices stay paired with the correct shop. | While the device remains set up for that shop |
| Loyalty settings | Where a shop enables optional loyalty or reward features, functional storage may remember loyalty configuration or customer reward state for smoother operation. | Until cleared or changed |
| Shop status and interface state | Keep temporary shop-status indicators (such as suspension warnings or billing prompts) to ensure consistent behaviour across devices. | Short operational period |
5. Analytics cookies (not currently used)
We do not currently set analytics cookies to measure how people use QBarber.
If we add analytics later (for example to understand which pages fail or which features are used), we will:
- Update this Cookie Policy
- Use privacy-respecting settings where possible (such as IP masking or cookieless measurement)
- Ask for consent before setting non-essential analytics cookies, where PECR requires it
Analytics, if introduced, would be used to improve reliability and usability — not to sell your data or show you ads.
If we introduce analytics, some features may use automated or AI-assisted processing to understand reliability, queue accuracy, or feature usage. Any analytics cookies will be privacy-respecting and will require consent where PECR mandates it.
6. Third-party cookies
Some cookies are set by companies that help us run the service. They are not advertising partners.
Vercel
Our websites are hosted on Vercel. Vercel may set cookies that are needed to deliver pages, balance traffic, or protect the deployment. See Vercel’s own documentation for details of any cookies it sets.
Cloudflare
Cloudflare may set security cookies (for example to identify trusted traffic and help mitigate bots or attacks). These cookies support the security of the site and are treated as strictly necessary.
Stripe
When you start checkout or manage billing, Stripe may set cookies on its payment pages so that the payment can be completed securely. Those cookies are controlled by Stripe. QBarber does not store your full card number.
You can read Stripe’s cookie and privacy information on Stripe’s website. Checkout may not work if Stripe cookies are blocked.
Error and performance monitoring tools
If we introduce optional monitoring tools (for example to detect crashes or reliability issues), these may set strictly necessary cookies or local storage used only for diagnostics. These will not be used for advertising.
7. How you can manage cookies
Most browsers let you view, block, or delete cookies. Controls are usually under Settings, Privacy, or Cookies. You can also use private or incognito browsing.
If you block essential cookies, you will likely be signed out, lose your queue ticket, or be unable to complete checkout. That is a limitation of the technology, not a penalty.
You can also clear local storage for qbarber.co.uk and related QBarber domains if you want to reset shop selection or ticket state.
If impersonation tools are used, ending an impersonation session will clear any temporary impersonation markers. Clearing cookies or local storage may also end an impersonation session immediately.
Browser help is published by each vendor, including Chrome, Safari, Firefox, and Edge. For a general UK overview, see the ICO guidance on cookies at ico.org.uk/for-the-public/online/cookies.
8. Legal basis under UK GDPR and PECR
In the UK, cookies are regulated by the Privacy and Electronic Communications Regulations (PECR), alongside UK GDPR.
PECR allows cookies that are strictly necessary to provide a service you have requested — such as logging in, keeping a session, securing forms, or remembering your queue ticket — without consent. QBarber’s essential cookies fall into this category.
Under UK GDPR, we process the limited personal data in essential and functional cookies on the basis of:
- Contract — to provide the service you asked for (login, queue, billing); and/or
- Legitimate interests — to keep the platform secure and usable, where those interests are not overridden by your rights.
Essential cookies used for impersonation, device pairing, queue tracking, and security are processed under contract and legitimate interests, as they are required to provide the service safely and reliably.
If we later use non-essential analytics or similar cookies, we will rely on consent where PECR requires it, and you will be able to refuse them.
9. Contact
Questions about cookies or this policy can be sent to:
QBarber
United Kingdom
Email: hello@qbarber.co.uk
Privacy Statement: https://staging.qbarber.co.uk/privacy
Terms of Service: https://staging.qbarber.co.uk/terms
Data Processing Agreement: https://staging.qbarber.co.uk/dpa
We may update this Cookie Policy when our cookies or processors change. The “Last updated” date at the top of the page will change when we do.