Cookies and similar technologies
Version 2026-11-03, in force since 3 November 2026.
This page explains what [Aeva S.à r.l.] ("Aeva", "we") stores on your device when you use the website https://app.staging.luxapass.com and the Aeva app, as required by article 4(3)(e) of the Luxembourg law of 30 May 2005 on privacy in electronic communications and the guidelines of the Commission nationale pour la protection des données (CNPD).
The short version
We use no advertising, analytics or tracking cookies. The website sets only the cookies it needs to work, and the app sets none. That is why you do not see a cookie banner: nothing we store requires your consent.
Website
| Name | Purpose | Set by | Lifetime | Needs consent? |
|---|---|---|---|---|
adonis-session | Keeps you signed in and protects forms against cross-site request forgery | Aeva | Until you close the browser | No: strictly necessary |
sidebar_state | Remembers whether you collapsed the menu in the studio portal | Aeva | 7 days | No: strictly necessary for a feature you asked for |
Fonts and scripts are served from our own servers, so viewing the website sends no data to third-party content networks.
App
The app stores on your device, outside of any cookie, your sign-in token, your language choice, your crash-report preference and cached screens. None of this is read by anyone else and it is removed when you sign out or uninstall the app.
The app includes the following third-party software that may access or store information on your device:
- Stripe (payments): when you pay, Stripe's payment form runs on your device and may store an identifier to prevent fraud. See Stripe's privacy policy.
- Sentry (crash reports): if the app crashes, a technical report (device model, operating system, app version, the error) is sent to Sentry. Personal data is switched off and no screen recordings are made. You can switch crash reports off in Profile → Privacy & legal.
- Google Maps (map of studios): the map shows studios near you. The approximate location of your device is used only on your device to centre the map, and only if you allow it in the system permission dialog.
- Expo and Firebase Cloud Messaging (notifications): a device token is created so that booking confirmations and reminders can be delivered. Marketing notifications are sent only if you opted in.
Managing cookies
You can delete or block cookies in your browser settings. Blocking the session cookie prevents signing in to the website. App permissions (notifications, location, camera) can be changed at any time in your phone's settings.
Changes
If we ever add analytics or other non-essential cookies, we will ask for your consent first and update this page. Questions: support@example.lu. See also the Privacy Policy.