Cookie Policy

This Cookie Policy explains the cookies, browser storage, and analytics technologies Writemetg.com actually uses across the marketing site, the Owner Dashboard, and the Telegram Mini App / public web booking pages.

The Owner Dashboard signs you in using two cookies — owner_access and owner_refresh — both set HttpOnly (never readable by page JavaScript), Secure, and scoped only to the API routes that need them. If you sign in with Google, a short-lived google_oauth_noncecookie exists for the few seconds of that redirect, purely to prevent forgery, then is deleted. None of these are optional, and there is nothing to switch off in the preferences below without breaking sign-in — that's why they aren't listed as a toggle there.

A third cookie, owner_session_hint, is a non-sensitive session-presence marker. Its value is always 1— it contains no token, account identifier, email address, or any other personal information, and it is not a sign-in credential: it cannot sign anyone in or grant access to anything. It is set when you sign in and removed when you sign out or your session ends, and it lasts no longer than your sign-in session (up to 30 days, renewed while the session is). Unlike the two sign-in cookies it is deliberately readable by page JavaScript, site-wide, so the public pages can tell that you may still be signed in and offer a "Dashboard" link instead of "Sign in" — the server still checks your real session before anything is shown or allowed. It is Secure and SameSite=Lax, and, like the others, is strictly necessary to how sign-in works, so it isn't a toggle in the preferences below.

The Super Admin control plane, the public web booking guest flow, and the Telegram Mini App each issue a signed access token that the browser stores in localStorage and sends back as an Authorization header instead of a cookie. These are required for the product to function and cannot be turned off without breaking sign-in:

• Super Admin session token — keeps a platform administrator logged in.
• Public web booking guest identity token — keeps a customer's in-progress booking session recognized.

• Your chosen interface language on the marketing site, Owner Dashboard, and web booking page. For the Owner Dashboard it is also mirrored into a first-party owner_lang cookie (limited to dashboard pages, kept for one year), so pages load directly in your language.
• Owner Dashboard theme (light/dark) preference.
• A few UI conveniences, such as your last-selected appointments calendar view.
• Within the Telegram Mini App booking wizard, your in-progress step (service, staff, time) is kept in sessionStorage only for the current browser tab session, so a reload doesn't lose your place.

None of this is used for advertising or shared with third parties.

Writemetg.com's network runs through Cloudflare, which provides aggregate, infrastructure-level traffic analytics (request volumes, response times, and similar operational metrics) to help us keep the service reliable. This operates at the network layer rather than through a tracking script embedded in the pages you visit, and is not used to build an advertising profile of you.

On the marketing site, we also use Google Analytics to understand how visitors find and use the site (pages viewed, general location, device type, and similar usage metrics). It runs in Google's Consent Mode: by default it operates in a denied, cookieless state that sets no tracking cookie and collects no data that identifies you. It only starts storing analytics cookies and associating activity with you once you choose "Accept all" or switch on "Analytics" in the cookie preferences below, and it never loads at all inside the Telegram Mini App. See Section 8 for how to change your choice at any time.

The Telegram Mini App runs inside Telegram's own client, which may use its own storage mechanisms governed by Telegram's policies, outside Writemetg.com's control. Cloudflare, as our network and security provider, may set a small number of technical cookies of its own if a security check (such as a bot-mitigation challenge) is ever triggered; Writemetg.com does not currently use Cloudflare Turnstile or any other CAPTCHA-style challenge by default. See our Subprocessors page for every provider that can set cookies or store data as part of running the Platform.

Writemetg.com does not use advertising cookies, marketing pixels, or cross-site tracking technologies.

The necessary cookies and local storage described above run regardless, since the product can't sign you in or remember an in-progress booking without them. Google Analytics (Section 5) is the one optional technology we currently use, and it launches disabled by default — it only turns on if you choose it. Writemetg.com shows a cookie preferences banner on first visit and a "Cookie settings" link in the footer at any time after, so you can accept, decline, or change that choice whenever you like; nothing optional silently starts running because a script shipped. You can also clear local storage at any time through your browser settings, which will sign you out and reset saved preferences.

Questions about this Cookie Policy can be sent to [email protected].