Skip to content
saunafridayBecause Friday is a feeling

Cookie policy

Updated 2026-08-11

This page explains in plain words which cookies SaunaFriday uses, what they are for and how you can manage them.

The data controller is Nerok Group ltd (the operator of SaunaFriday). How we handle personal data is described in the Privacy policy.

You can change or withdraw your consent at any time - just as easily as you gave it:

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site work, and some help understand how the site is used.

Necessary cookies (always on)

Without these the site simply would not work: they keep you signed in, protect forms from forgery and remember your cookie choice. They do not require consent.

  • authjs.session-token30 days

    Keeps your sign-in session so you do not have to log in on every page.

  • authjs.csrf-tokenUntil the browser closes

    Protects forms against forgery (a security token).

  • authjs.callback-urlUntil the browser closes

    Remembers which page to return you to after signing in.

  • authjs.challenge15 minutes

    Used to verify passkey sign-in.

  • sf_admin_totp12 hours

    Confirms an administrator's identity (set for administrators only).

  • sf_cookie_consent12 months

    Remembers your cookie choice so we do not ask every time.

Statistics cookies (only with your consent)

We use Google Analytics (provider - Google Ireland Limited), only with your consent. These cookies help us understand how visitors use the site (which pages are viewed, where visitors arrive from) so we can improve it. They are not set without your consent, and data may be transferred outside the EU (to the US) under Google's safeguards. You can withdraw consent at any time in cookie settings.

  • _ga2 years

    Tells visitors apart from one another (statistics).

  • _ga_ZF06K1H64N2 years

    Persists the Google Analytics session state.

Marketing cookies (only with your consent)

We currently use no marketing cookies. If we later add a tool such as Meta (Facebook) Pixel, it would help show more relevant ads. Such cookies would be set only with your consent, and their list would be published here.

Other technologies

  • Cookieless statistics - to measure site traffic we also use Vercel Analytics and Ahrefs Analytics (homepage only). These tools set no cookies and build no personal profiles, so they do not require consent.
  • Payments - payment happens on Stripe's secure page (not on our site). There Stripe may use its own cookies under its own privacy policy.
  • Device storage - we remember a few small choices (such as a dismissed reminder) in your browser's storage. That information stays on your device and is never sent anywhere.

Your choice and control

You can also control or delete cookies through your browser settings. Blocking essential cookies may prevent you from signing in or completing a booking.

Updates to this policy

If we start using new cookies, we will update this policy and, where consent is needed, ask you again. The update date is always shown at the top of the page.