Cookies

BailaYa — operated by Infinity Curve LLC · Last updated 2026-07-16

Which cookies BailaYa sets, what each one is for, and how long it lasts. It supports the Privacy Policy and the choice you make in the cookie banner.

Nothing optional runs until you say yes. Analytics and advertising cookies are not set when you arrive, and they are not set if you decline or simply ignore the banner. Only the essential cookies below are set without asking — they are the ones the site cannot work without.

Essential — no consent asked

These do not need your permission because the service does not function without them: they sign you in, keep you signed in, and stop other sites acting on your behalf. If you block them, BailaYa will not work.

Cookie	Set by	What it does	How long
`next-auth.session-token` `__Secure-next-auth.session-token`	BailaYa	Keeps you signed in. The `__Secure-` version is the one used over HTTPS.	30 days
`next-auth.csrf-token`	BailaYa	Stops another site submitting forms as you (cross-site request forgery).	Session
`next-auth.callback-url`	BailaYa	Remembers where to send you after signing in.	Session
`_bailaya_active_studio`	BailaYa	Which of your studios you are currently looking at, if you belong to more than one.	Session
`_bailaya_consent`	BailaYa	Your cookie choice. Slightly ironic, and unavoidable: without it we would have to ask again on every page.	1 year
`_GRECAPTCHA`	Google	reCAPTCHA. Stops automated signups and abuse of our forms.	6 months
`__stripe_mid`, `__stripe_sid`	Stripe	Card payment fraud prevention. Set only on pages with a payment form.	1 day – 1 year

Analytics — only if you accept

These help us see how the site is used so we can improve it. They are not set unless you agree.

Stored item	Set by	What it does	How long
`_ga`, `_ga_<id>`	Google Analytics (Firebase)	Counts visits and pages so we know what people actually use.	2 years
`firebase-installations-store`	Google (Firebase)	An id for this browser, kept so repeat visits are counted as the same visitor rather than as new ones each time. Stored in your browser's database rather than as a cookie, and registered with Google when it is created.	Until you clear site data

The second one is not a cookie, and it is listed anyway. What matters is that something persistent is stored on your device and shared with a third party — the rules that govern that do not care which storage mechanism is used, and neither should a notice whose job is to tell you what is happening. Nothing in this section is stored unless you accept analytics, and clearing it happens when you withdraw.

Advertising — only if you accept

These measure our advertising. They are not set unless you agree.

Cookie	Set by	What it does	How long
`_fbp`	Meta	Measures whether our ads led anyone here, and lets us show BailaYa ads elsewhere.	3 months
`_gcl_au`	Google Ads	Measures whether our ads led anyone here.	3 months

Changing your mind

Withdrawing is as easy as accepting: reopen the cookie settings from the link in the footer and change your choice. It takes effect immediately — the tags stop receiving anything without a reload.

Your browser can also block or delete cookies. Blocking the essential ones will stop you signing in.

What we do not do

No cookies are set before you choose, other than the essential ones above.
Ignoring the banner counts as “no”. We do not treat silence as consent.
We do not sell your data, and we do not use analytics or advertising cookies inside the studio app — only on our public marketing pages.

Infinity Curve LLC · Cookie notice · Last updated 2026-07-16 · Data protection contact: data@infinitycurve.com · See also the sub-processor list.