Cookie policy

Cookie policy

Last updated 6 November 2026

In plain words: BukSalon uses only a few small cookies, to keep you logged in and to stop fake bookings. We also save a few simple choices (like your city) on your own phone. We use no advertising cookies, no analytics and no tracking, and we run no scripts from other companies on our pages.

1. What this policy covers

This policy covers the BukSalon website and the BukSalon app (the app shows the same website inside it). It explains the cookies and browser storage we use. Our Privacy policy explains all the personal data we handle.

2. What cookies and browser storage are

  • Cookies are small pieces of text a website saves in your browser. Your browser sends them back to that website, so it can remember you.
  • Browser storage ("local storage" and "session storage") is a small space on your device where a website can keep simple settings. It stays on your device. Local storage stays until you clear it. Session storage is deleted when you close the tab.

3. Cookies we set

All our cookies are essential. The website cannot log you in or protect bookings without them. Scripts on the page cannot read them.

bk_session (login)

  • Purpose: keeps you logged in. It holds a random code. We keep only a scrambled (hashed) copy of it on our server.
  • How long: 30 days from your last visit. It is deleted when you log out.
  • Type: essential.

bk_did (device ID)

  • Purpose: a random ID for this browser. It does not contain your name or number. We save it with your bookings and logins to stop fake bookings, spam and referral abuse, to limit guest tokens per phone, to find your guest token again, and to move tokens you took as a guest into your account when you log in.
  • How long: 2 years.
  • Type: essential.

bk_gstate (Google sign-in check)

  • Purpose: set only when you choose "Continue with Google". It checks that the reply from Google belongs to the sign-in you started. It is encrypted and is sent only to our Google sign-in address.
  • How long: 10 minutes. It is deleted once the sign-in finishes.
  • Type: essential (for Google sign-in).

bk_gpending (Google sign-in, new account)

  • Purpose: set only when your Google account is not linked to a BukSalon account yet. It holds your Google name, email and Google account ID, encrypted, while you add your mobile number.
  • How long: 10 minutes, or until you finish.
  • Type: essential (for Google sign-in).

When a salon has its own web page on our domain, these cookies can also work there, so one login works everywhere on BukSalon. They are never shared with other websites.

4. Things we save on your device

These are not cookies, so your browser does not send them to us by itself. They stay in your browser (or in the app) and make the service quicker to use. If you block them, BukSalon still works.

For everyone

  • bk_guest (local storage): the name and mobile number you typed for a QR token or login, so the form is filled in next time. Stays until you clear your browser data. If others use your phone, you may want to clear it.
  • bk_li (local storage): a simple "was logged in" mark so the Home screen loads faster. Removed when you log out.
  • bk_city (local storage): the city you picked on Home. It is sent with your salon search to show salons and passes from that city first. Stays until you change it or clear your browser data.
  • bk_near (session storage): your approximate location (slightly rounded) while "Near me" is on. It is sent with your salon search only to sort salons by distance; we don't save it to your account. Deleted when you turn "Near me" off or close the tab.

For salon owners and field agents

  • bk_reg_draft (local storage): your unfinished salon registration (salon details, owner name and number, address, hours and UPI ID), so you can continue later on the same device. Deleted when the salon is created or when you start again.
  • bk_agent_city (local storage): the city a field agent last used, to fill in the next registration.
  • bk_vendor_tour_seen_v1 (local storage): remembers that you have seen the quick tour of the salon dashboard.
  • bk_walkin_barber (local storage): the staff member you last picked for a walk-in, so it is picked for you next time.

In the BukSalon Android app

  • The app keeps the same cookies and storage as the website, inside the app. Cookies from other websites are turned off in the app.
  • When you use Google sign-in from the app, it opens in your phone's browser. The app saves a one-time security code until you come back (at most 15 minutes), then deletes it.
  • If you choose "Later" on an update message, the app remembers that for 24 hours so it doesn't ask again straight away.

5. No advertising, analytics or tracking

  • We do not use advertising cookies, analytics cookies or tracking pixels. There is no Google Analytics, Meta Pixel or anything like them on BukSalon.
  • Our website's security settings allow only our own scripts to run on our pages.
  • We do not use cookies to follow you on other websites, and we never sell your data.

Because we use only the cookies the service needs and simple settings on your device, we don't show a cookie pop-up.

6. Other companies

Google Fonts

Our text font is loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To download it, your browser connects to Google, so Google receives your IP address and basic browser details, as happens with any website you visit. We do not send Google your account details. Google's own privacy policy applies to this.

Google sign-in

If you choose "Continue with Google", you go to Google's own sign-in page. Google sets its own cookies on its own site, under Google's privacy policy. We don't load Google sign-in scripts on our pages. We ask Google only for your basic profile, and we use only your name, email address and Google account ID from it.

Links to other apps and websites

When you tap a link to WhatsApp, Google Maps, a UPI app or another website, you leave BukSalon. That service's own cookies and policies apply there.

7. How to clear or block cookies

  • Log out: this deletes the login cookie (bk_session) and the "was logged in" mark (bk_li).
  • In your browser: open your browser's settings, go to Privacy or Site settings, find buksalon.in and delete its cookies and site data. Menu names differ between browsers. You can also block cookies there.
  • In the app: open your phone's Settings, go to Apps, then BukSalon, then Storage, and clear the storage. This also logs you out. Menu names differ between phones.
  • Private or incognito mode: everything is deleted when you close the private window.

8. What stops working if you block cookies

  • You cannot log in or stay logged in. Pages that need a login will send you to the login page.
  • "Continue with Google" will not work.
  • As a guest, you must type your mobile number to get a QR token. We also cannot find your guest token again from this browser, and guest tokens may not move into your account when you log in.
  • If you block only browser storage, everything still works. You will just need to type your name, number and city again, the salon tour may show again, and unfinished salon registrations will not be saved.

9. Changes to this policy

If we add or change a cookie, we will update this page and the date at the top.

10. Questions

Questions about cookies or your data? Please email us at contact@buksalon.in. For complaints, see Grievance redressal.

Contact BukSalon