Cookie Policy

Cookies are small values a website asks your browser to store and send with later requests. Local storage and session storage are browser-managed stores that are not automatically sent to the server. In this policy, “storage” covers all of these technologies.

We use storage either because it is necessary to provide the service safely, or—only after your permission—to understand how customers use the public HOLO experience.

This Cookie Policy distinguishes browser storage and browser analytics from HOLO's limited server-side transaction measurement, which does not read or write information on your device.

Essential storage cannot be switched off through the HOLO consent controls because the platform cannot operate safely without it.

• Authentication session: keeps you signed in, protects account-only routes, and expires when you sign out or the authentication session expires.
• Language preference (`locale`): remembers Thai or English for up to one year.
• Privacy preference (`holo.cookie-consent` in local storage): records whether analytics is allowed, the policy version, and timestamps for up to 180 days.
• Temporary security and checkout state: preserves short-lived flows such as two-factor authentication and payment navigation for the current tab or transaction.

If you enable Analytics, the Amplitude Browser SDK may store a pseudonymous device identifier, session timing, and a small retry queue in this browser. HOLO sends pathname-only page views, session activity, and explicit Buy button events.

We do not enable Session Replay, form or element capture, network capture, URL query collection, remote capture overrides, or IP-address collection in the browser SDK.

The Amplitude Browser SDK is not initialized before you consent. If you later disable Analytics, HOLO opts the SDK out and removes its browser identifiers and queued-event storage. Analytics remains off until you enable it again.

On your first visit, choose Accept all, Reject optional, or Manage settings. Rejecting optional storage does not affect sign-in, purchases, or other core HOLO features.

Rejecting or withdrawing Analytics consent stops browser collection only. The preference is stored on this device and is not sent to the backend, so it does not control the server-side Purchase Completed event described below.

You can reopen Cookie settings from the site footer at any time. We ask again when the stored choice reaches 180 days or when the consent-policy version changes.

You may also clear website data in your browser. Clearing the privacy preference makes the consent notice appear again on your next visit.

Amplitude provides the optional browser analytics service. Analytics data may be processed outside Thailand subject to the safeguards described in our Privacy Policy. Amplitude does not receive your password, OTP, payment slip, bank details, phone number, shipping address, email, or username through this browser analytics contract.

Separately, after an order is fulfilled as paid, HOLO sends a server-to-server Purchase Completed event to Amplitude to measure completed purchases, product performance, and revenue. The event contains an internal user ID, order and product identifiers, product type, payment-method category, quantity, item count, amount in THB, and analytics environment. It does not read or write browser cookies, local storage, or session storage and continues when optional browser analytics is rejected or unset.

The server-side event does not contain your email, username, password, OTP, authentication tokens, payment slip, bank details, phone number, or shipping address. See our Privacy Policy for further information about data sharing, international transfers, and your privacy rights.

We update this policy when storage purposes, providers, or retention practices materially change. A material change also advances the consent-policy version so that you can make a fresh choice.

Questions or privacy-right requests: dpo@hologacha.com