Cookies and Local Storage
A complete list of what the LookFlex website and iPhone app store on your device, and why.
Last updated:
On this page
Summary
What cookies and local storage are
Cookies are small files a website stores in your browser and sends back with each request. Local storage and IndexedDB are similar storage areas that stay on your device and are not sent to our servers automatically. In the iPhone app the same kind of storage lives in the app's own private storage, and the Keychain is the iPhone's protected store for small secrets such as a sign-in token.
What we use
| Name | Type | Purpose | Category | Duration |
|---|---|---|---|---|
lf-theme | Local storage | Remembers whether you chose light or dark appearance. Not set if you keep the system setting. | Preference | Until you change it or clear the site data |
lookflex:state | IndexedDB | Your app data: profile, results, face geometry, plan, progress, coach chat, Lab credits, settings and consents. | Strictly necessary (the app's own storage) | Until you delete it in the app or delete the app |
img:scan:*, img:lab:* | IndexedDB | Your scan photos and Lab images. | Strictly necessary (the app's own storage) | Until you delete them in the app or delete the app |
| Session token | iPhone Keychain | Connects the app to your LookFlex account on our servers, anonymous or signed in, so that limits, purchases and backup work. The app sends it with each request to our servers as a header. It is not a cookie. | Strictly necessary | Replaced each time you sign in, sign out or delete your account. It stops working 180 days after it was last used. |
App data in IndexedDB leaves your device only when you use a feature that sends part of it to our servers: an AI feature, or backup if you keep it on. Both are explained in the Privacy Policy.
Accounts and Pro status: we use no cookies for accounts, sign-in or payments. You subscribe through Apple in the app. Our server checks Apple's signed transaction and records your subscription against your LookFlex account, and the app shows which account it is with the session token above.
Third-party cookies
Our pages do not load third-party cookies. Purchases are made in the app through Apple's App Store, which is covered by Apple's own privacy policy (opens in a new tab).
Analytics
We do not use analytics today. If we ever add analytics, it will be privacy-friendly and cookieless, with no cross-site tracking, and we will update this page before turning it on.
Why there is no cookie banner
Privacy laws such as the EU ePrivacy rules and the UK PECR allow storage that is strictly necessary for a service you asked for, and preferences you set yourself, without a consent banner. Everything we use falls into those categories, so we do not show one.
How to control and delete them
- In the app, Profile, then Delete account removes everything in IndexedDB and deletes your account on our servers. Signing out replaces the session token and keeps your app data.
- On our website, your browser settings let you block or delete cookies and site data for lookflex.app.
- On your iPhone, deleting the app removes the app data it stored. It does not delete your account on our servers, so use Delete account first if you want that gone too.
Changes
If we add or change any cookie or storage item, we will update this page and the date at the top before we do.