Cookie Policy
Last updated: June 09, 2026
This Cookie Policy explains how StudioBase LLC ("Company," "we," "us," and "our") uses cookies and similar technologies to recognize you when you visit our website at https://www.studiobase.organd studio booking pages hosted on our subdomains (together, the "Website"). It explains what these technologies are, exactly which ones we use, and how you can control them.
In some cases cookies contain or are linked to personal information (for example, the email address you used to book a class).
What are cookies?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies set by the website owner (in this case, StudioBase LLC) are called "first-party cookies." Cookies set by parties other than the website owner are called "third-party cookies."
Almost everything we set is first-party. The only third-party cookies on the Website come from our payment processor (Stripe) and bot-protection provider (Google reCAPTCHA), both used strictly for security and fraud prevention — see the tables below.
Why do we use cookies?
We use cookies for four purposes: to keep you signed in and keep the Website secure ("essential" cookies), to remember preferences like your theme choice, to attribute referrals from our partners and from studios' own marketing campaigns, and to protect payments and forms from fraud and abuse. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies, and we do not sell information collected through cookies.
How can I control cookies?
Essential and security cookies cannot be switched off — without them you cannot sign in, book a class, or pay securely. Preference and attribution cookies are optional in the sense that the Website keeps working without them: you can delete or block them at any time using your browser settings (see the browser links below). Clearing the attribution cookies does not change how the Services work; a future click on a partner or campaign link will simply set a fresh token.
The complete list of cookies we set, with their purposes and lifetimes, is below.
Essential website cookies
These cookies are strictly necessary to provide you with services available through our Website, such as signing in, managing bookings, and keeping forms secure.
| Name | Purpose | Provider | Expires |
|---|---|---|---|
| sb-*-auth-token | Keeps you signed in to your StudioBase account (Supabase authentication session). | StudioBase (first-party) | Session / refreshed while signed in |
| csrf_token | Protects forms and API requests against cross-site request forgery. | StudioBase (first-party) | 24 hours |
| guest_session | Signed session that lets guests view and manage their class bookings without an account. | StudioBase (first-party) | 30 days |
| guest_email | Remembers the email you used to book so forms can be pre-filled on return visits. | StudioBase (first-party) | 30 days |
| verif_status | Caches your email-verification status so we don't have to re-check it on every page. | StudioBase (first-party) | 7 days |
| sb_onboarding_fp | Short-lived fingerprint used during studio onboarding to prevent abuse of subdomain reservation. | StudioBase (first-party) | 24 hours |
| admin_last_login_updated | Throttles internal bookkeeping writes for administrator sign-ins. | StudioBase (first-party) | 1 hour |
Payment & security cookies (third-party)
These are the only third-party cookies on the Website. They are set by our payment processor and bot-protection provider on the pages that use those services, solely for fraud prevention and security.
| Name | Purpose | Provider | Expires |
|---|---|---|---|
| __stripe_mid / __stripe_sid | Fraud prevention and payment security. Set by Stripe on pages that load the payment form. | Stripe | 1 year / 30 minutes |
| _GRECAPTCHA | Bot and abuse protection on signup and other sensitive forms (Google reCAPTCHA). | 6 months |
Preference cookies
These cookies remember choices you make so the Website looks the way you left it. They store only the preference itself (for example, the word "dark") and are never used for tracking.
| Name | Purpose | Provider | Expires |
|---|---|---|---|
| sb-theme | Remembers your light/dark theme choice for the StudioBase dashboard and site. | StudioBase (first-party) | 1 year |
| sb-booking-theme | Remembers the theme choice on a studio's public booking pages. | StudioBase (first-party) | 1 year |
Referral & campaign attribution cookies
These first-party cookies record how you arrived at StudioBase or at a studio's booking page. They are used to fulfill our revenue-share obligations to partners and to show studios which of their own marketing campaigns work. They are not shared with advertising networks and do not track you across other websites. Our Privacy Policy describes the partner attribution program in more detail.
| Name | Purpose | Provider | Expires |
|---|---|---|---|
| studiobase_attr | Records which StudioBase partner referred you (set only when you arrive via a partner link starting with /r/) so we can fulfill revenue-share obligations under that partnership. | StudioBase (first-party) | 90 days |
| studiobase_campaign | Records which studio marketing campaign link brought you to a booking page so the studio can see which campaigns work. | StudioBase (first-party) | 30 days |
| studiobase_ref | Remembers which guest referred you to a studio so both of you can receive reward credits after your first attended class. | StudioBase (first-party) | 90 days |
How can I control cookies on my browser?
As the means by which you can refuse cookies through your web browser controls vary from browser to browser, you should visit your browser's help menu for more information. The following is information about how to manage cookies on the most popular browsers:
What about other tracking technologies, like web beacons?
We do not use web beacons, tracking pixels, or similar technologies on the Website, and we do not use advertising cookies or third-party advertising networks anywhere in the Services. We also use browser localStorage for on-device interface state (such as your theme and sidebar preferences); localStorage never leaves your browser.
Do you serve targeted advertising?
No. We do not serve targeted advertising, we do not allow third parties to serve advertising through our Website, and no information collected through cookies is used for or shared with advertising networks. This matches the commitments in our Privacy Policy.
How often will you update this Cookie Policy?
We may update this Cookie Policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore revisit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.
The date at the top of this Cookie Policy indicates when it was last updated.
Where can I get further information?
If you have any questions about our use of cookies or other technologies, please contact us at:
Email: privacy@studiobase.org
StudioBase LLC
© 2026 StudioBase LLC. All rights reserved.