Scheduling privacy
Sealed, then removed.
This scheduling system is built so that the website holding your booking cannot read it.
What is requested
A name or alias is required, along with the appointment time and length. A mobile number and an address are optional. Confirmation appears on this website as soon as the booking is saved; no phone number is needed.
How it is stored
The moment you submit your request, any name, number, address, and message you provided are sealed with a lock that only the studio's own computer can open. The key that opens it is never kept on this website or with its hosting company. A copy of this site's database contains appointment times and sealed boxes, and nothing readable about who booked.
What this website can still see
The appointment time and length, so the same time is not offered twice. Your details pass through the website's memory for an instant while they are being sealed. They are not written to disk or to logs unsealed.
How long it is kept
Once the studio has collected a sealed booking, the sealed copy is erased from this website. The appointment time is removed 4 days after the session. Cancelling removes everything here immediately. The studio keeps its own private record of your appointment on its own computer.
Your private code
Because this website cannot look you up by name or number, you are given a private code when you book. It is the only way to view or cancel your appointment online. Only a scrambled fingerprint of the code is stored here.
What is not built into this site
No client account, client email or text messages, photo uploads, advertising pixels, analytics package, browser fingerprinting, public appointment history, or public client list.
Abuse protection
The booking form uses a honeypot and a short-lived keyed rate-limit token. The application does not store the visitor's raw network address for this purpose.
Mail order and delivery requests
The separate order form accepts as much or as little information as you choose. Request details are sealed for the studio, kept on the website until collected (up to 30 days), then erased here. The studio reads and keeps its copy in the Orders inbox on its own computer. Contact information lets the studio follow up; submitting a request does not confirm a price or date.
How the studio is notified
When a booking is made, the studio receives an alert containing the appointment date, time, and length. A cancellation sends a short alert. These alerts contain no name, phone number, address, private code, or link.
Hosting note
Like most websites, the hosting provider may maintain ordinary infrastructure or security logs outside this application's booking database. This site's own access log records no visitor address, page path, or browser details.