
Cookie Policy
Last Updated: January 22, 2026
1. Introduction
2. What Are Cookies?
- Session Cookies: Temporary cookies that expire when you close your browser.
- Persistent Cookies: Stored on your device for a set period or until you delete them.
- First-Party Cookies: Set directly by the website you are visiting (YFace Clinic).
- Third-Party Cookies: Set by external services we use (e.g., Google, Facebook, Zoho).
3. How We Use Cookies
3.1. Strictly Essential Cookies
- System & Security: Cookies used to maintain user sessions, prevent fraud (e.g., reCAPTCHA), and ensure site security.
- Consent Management: Cookies that store your cookie preferences.
- Booking & CRM: Cookies required for our booking system (Zoho) to function correctly.
3.2. Performance & Analytics Cookies
- Google Analytics: We use Google Analytics to collect anonymous data about website usage.
- PixelYourSite: Used to analyze visitor interactions and traffic sources for internal reporting.
3.3. Functional Cookies
- Language Preferences: Used to remember your selected language (English or Arabic).
- Google Services: Used to store preferences for Google-integrated features.
3.4. Targeting & Advertising Cookies
- Meta (Facebook) & Google Ads: Used to measure the effectiveness of our advertising and show you relevant ads based on your interactions with our website.
- YouTube: Used to track views of embedded videos and store video preferences.
4. Specific Cookies We Use
Necessary (Strictly Essential)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| CookieConsent | Cookiebot | Stores the user’s cookie consent state for the current domain. | 1 year |
| PHPSESSID | yface.clinic | Preserves user session state across page requests. | Session |
| rc::a, rc::c | Google (Recaptcha) | Used to distinguish between humans and bots. | Persistent / Session |
| JSESSIONID | Zoho (Newsense) | Preserves users states across page requests for the booking portal. | Session |
| _zcsr_tmp | Zoho | Necessary for the login function on the website. | Session |
| crmcsr | Zoho | Ensures visitor browsing-security by preventing cross-site request forgery. | Session |
| zccpn | Zoho | Ensures visitor browsing-security by preventing cross-site request forgery. | Session |
| zalb_# | Zoho | Used for load balancing to ensure the visitor stays on the same server. | Session |
| hcdn | yface.clinic | Used for website performance and caching (LiteSpeed). | Session |
Preferences (Functional)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| pll_language | Polylang | Remembers your selected language (EN/AR) to display the site correctly. | 1 year |
| g_state | Stores Google login/preference state. | 180 days |
Statistics (Analytics)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Registers a unique ID to generate statistical data on how the visitor uses the website. | 2 years |
| _ga_# | Google Analytics | Used by Google Analytics to persist session state. | 2 years |
| pys_first_visit | PixelYourSite | Registers the date/time of the user’s first visit. | 7 days |
| pys_landing_page | PixelYourSite | Stores which landing page was presented to the user. | 7 days |
| pysTrafficSource | PixelYourSite | Registers the traffic source that brought the user to the website. | 7 days |
| pys_session_limit | PixelYourSite | Used to manage the user’s session duration. | 1 day |
| pys_start_session | PixelYourSite | Identifies the start of a new session. | Session |
| pys_bingid, pys_fbadid, pys_gadid | PixelYourSite | Internal analytics IDs for tracking ad performance across platforms. | Session |
| pys_utm_* | PixelYourSite | Stores UTM parameters (campaign, source, medium) for tracking marketing performance. | Session |
Marketing (Targeting & Advertising)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta (Facebook) | Used by Facebook to deliver advertisement products such as real-time bidding. | 3 months |
| lastExternalReferrer | Meta (Facebook) | Detects how the user reached the website by registering their last URL address. | Persistent |
| lastExternalReferrerTime | Meta (Facebook) | Detects how the user reached the website by registering their last URL address. | Persistent |
| _gcl_au | Google AdSense | Used to measure the efficiency of advertisements across websites. | 3 months |
| gclid | Google Ads | Used to send data to Google Analytics about the visitor’s device and behavior. | 30 days |
| test_cookie | DoubleClick | Used to check if the user’s browser supports cookies. | 1 day |
| VISITOR_INFO1_LIVE | YouTube | Tries to estimate the users’ bandwidth on pages with integrated YouTube videos. | 180 days |
| YSC | YouTube | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session |
| __Secure-ROLLOUT_TOKEN | YouTube | Stores the user’s video player preferences using embedded YouTube video. | 180 days |
| __Secure-YEC | YouTube | Stores the user’s video player preferences using embedded YouTube video. | Session |
5. Managing Your Cookie Preferences
- Google Chrome: Manage cookies in Chrome
- Safari: Manage cookies in Safari
- Firefox: Manage cookies in Firefox
- Microsoft Edge: Manage cookies in Edge
6. Updates to This Policy
7. Contact Us
- Address: Villa – 412 Al Wasl Rd – Jumeirah 2 – Dubai – UAE
- Email: support@yface.clinic
- Phone: +971507400021