Cookie Policy & California Privacy Consent Notice
Last updated August 2026
This is a plain-language summary provided for transparency and is not legal advice. Final terms will be reviewed by counsel before public launch.
This policy explains how Salon Suite Hub, operated by Mendocino Software, uses cookies and similar technologies. It is written to align with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the California Automatic Renewal Law (ARL) as expanded by AB 2863.
Definitions
Business: Mendocino Software, the legal entity that operates Salon Suite Hub, collects personal information, and determines the purposes and means of processing.
Consumer: a natural person who is a California resident, including every individual in the State for other than a temporary or transitory purpose and every individual domiciled in the State but currently outside it for a temporary or transitory purpose.
Personal information: information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
Cookies: small technical files placed on your device by a website, used here to keep you signed in, secure the service, and protect forms from abuse.
Cookies we use
Essential session cookies: Salon Suite Hub sets Supabase authentication cookies (names beginning with “sb-”) so signed-in owners and staff stay authenticated. These are strictly necessary for the service to work.
Private-preview gate: during our invite-only preview we set a single cookie, “so_login_gate”, to remember that a visitor has passed the access gate.
We do NOT run any third-party advertising, marketing, or analytics trackers, and we do not use cookies for cross-context behavioral advertising.
Visitor measurement (no cookies)
We count page views on salon websites, salon listings, and the booking widget so that a salon can see how many people visited and which pages they looked at. This is first-party measurement: the data is only ever shown to that salon, and it is never sold, shared, or used for advertising.
It sets no cookies and stores no identifier on your device. We do not store your IP address or your browser’s user-agent string. To count “visitors” rather than “page views” we derive a one-way, salted code from your network address and browser, together with the current date. That code changes every day, which means it cannot be used to recognise you tomorrow, on another salon’s site, or anywhere else.
What is retained is limited to: the page visited, a coarse device type (mobile, tablet, or desktop), the referring website (for example “Google” or “Instagram”), and the time. Web addresses are stored without their query strings.
Bot protection
Public forms (such as the waitlist and booking forms) are protected by Cloudflare Turnstile, a privacy-preserving bot-detection service. Turnstile helps verify that a request comes from a person rather than an automated script and may set its own technical tokens for that purpose. It is not used to track you across sites or to serve advertising.
Why we collect this data
To provide and secure core functionality, including sign-in, session management, and prevention of fraudulent account use.
To manage subscription tiers and the users associated with each salon account.
To protect forms and the service from abuse and to keep hosting stable.
To facilitate secure payment processing through third-party providers in accordance with PCI-DSS standards. Card numbers never touch our servers.
California consumer rights
Right to opt out of selling or sharing: you may direct us not to “sell” or “share” your personal information for cross-context behavioral advertising. We do not sell or share your personal information, and we honor Global Privacy Control (GPC) signals; if your browser transmits a GPC signal, our systems process it as a valid opt-out request.
Right to know and access: you may request disclosure of the categories and specific pieces of personal information we have collected about you, including information collected back to January 1, 2022.
Right to correct: you may request the correction of inaccurate personal information we hold about you.
To exercise these rights, contact us using the details below.
Youth data
Personal information of consumers under age 16 is treated as sensitive personal information, and users may limit its use to only those purposes necessary to provide the service.
We do not sell or share the data of users under 16 without affirmative authorization. Users aged 13–16 may provide their own opt-in; users under 13 require authorization from a parent or legal guardian.
Subscription renewals (AB 2863)
For paid subscription plans, we comply with the California Automatic Renewal Law. We obtain express affirmative consent to the renewal terms before charging your payment method.
Subscribers receive an annual reminder by email outlining the renewal frequency, the amount to be charged, and clear cancellation instructions. You may cancel through the same channel used to sign up.
Managing cookies
You can set your browser to refuse cookies, but disabling essential cookies will prevent you from signing in and using the service.
On mobile devices you can adjust tracking preferences in your system settings (for example, “App Tracking Transparency” on iOS or “Opt out of Ads Personalization” on Android). Because we do not run advertising trackers, these settings have no ad-tracking to disable on Salon Suite Hub.
Accessibility
Mendocino Software is committed to digital accessibility. We strive to align our website and legal notices with WCAG 2.1 Level A and AA standards, following the perceivable, operable, understandable, and robust framework.
Contact & governing law
Email: Jason@MendocinoSoftware.com. Mailing address: Mendocino Software, P.O. Box 2141, Fort Bragg, CA 95437. Interactive web form: https://salonsuitehub.com/contact.
California residents may also contact the California Department of Consumer Affairs regarding unresolved complaints at 1625 North Market Blvd., Suite N-112, Sacramento, CA 95834, or by telephone at (800) 952-5210 or (916) 445-1254.
This policy and any disputes arising from the use of cookies or tracking technologies are governed by the laws of the State of California, and any legal action shall be instituted exclusively in the state or federal courts located in San Francisco, California.