POTALONU Cookie Policy
Version 1.0 — draft for legal review (29 October 2026). Effective date: to be set on publication, together with the consent banner.
This Policy explains how POTALONU uses cookies and similar technologies on potalonu.com and in the POTALONU Telegram Mini App. It forms part of the Privacy Policy, which describes who we are and how to contact us.
1. What cookies and similar technologies are
Cookies are small files that a website stores in your browser. Local storage and session storage are browser features that store data in the same way without sending it with every request. We use both. "Necessary" items are required for the Platform to work and are used without consent; "analytics" and "marketing" items are used only with your consent.
2. Your choices
Consent banner. When you first visit potalonu.com or open the Mini App, a banner lets you accept or decline analytics and marketing cookies. Analytics and marketing items are not set until you accept. You can change your choice at any time through the cookie settings link in the footer of the website or in the Mini App settings. Declining does not affect the necessary items.
Browser settings. You can also block or delete cookies in your browser settings. Blocking necessary cookies will prevent you from signing in and buying Tickets.
Google Analytics. You can additionally opt out with Google's browser add-on (tools.google.com/dlpage/gaoptout).
3. Cookies and storage on potalonu.com
| Name | Type | Set by | Purpose | Duration | Category |
|---|---|---|---|---|---|
_potalonu_session |
cookie | POTALONU | session: sign-in, protection of forms against forged requests (CSRF), language, source of visit and UTM parameters | until the browser is closed | necessary |
remember_user_token |
cookie | POTALONU | "remember me" after sign-in | 2 weeks | necessary |
potalonu.lang |
local storage | POTALONU | language of the website | no expiry | necessary |
potalonu.theme |
local storage | POTALONU | light or dark theme | no expiry | necessary |
__cf_bm |
cookie | Cloudflare | bot protection | 30 minutes | necessary |
admin_menu_*, persist-form:*, smde_* |
local storage | POTALONU | organizer dashboard only: menu state and unsent text drafts | no expiry | necessary |
_ga, _ga_<ID> |
cookie | Google Analytics | visit statistics | 2 years | analytics |
_ym_uid, _ym_d, _ym_isad, _ym_visorc |
cookie | Yandex Metrica | visit statistics, click maps and session recordings (Webvisor); only where Yandex Metrica is enabled | up to 1 year | analytics |
_fbp, _fbc |
cookie | Meta Pixel | advertising measurement for the Organizer; only on Event pages where the Organizer uses its own pixel | 90 days | marketing |
fb_purchase_tracked_<order id> |
local storage | POTALONU | prevents a purchase from being reported to Meta Pixel twice | no expiry | marketing |
4. Cookies and storage in the Telegram Mini App
| Name | Type | Set by | Purpose | Duration | Category |
|---|---|---|---|---|---|
_potalonu_session |
cookie | POTALONU | session | until the Mini App is closed | necessary |
account_id |
cookie | POTALONU | sign-in in the Mini App | 30 days | necessary |
telegram_user_id |
cookie | POTALONU | sign-in in the Mini App | 30 days | necessary |
__telegram__* |
session storage | Telegram | Mini App launch parameters and theme | until the Mini App is closed | necessary |
__stripe_mid |
cookie | Stripe | fraud prevention; only on the Stripe payment page | 1 year | necessary |
__stripe_sid |
cookie | Stripe | fraud prevention; only on the Stripe payment page | 30 minutes | necessary |
_ga, _ga_<ID> |
cookie | Google Analytics | usage statistics | 2 years | analytics |
_ym_uid, _ym_d, _ym_isad, _ym_visorc |
cookie | Yandex Metrica | visit statistics, click maps and session recordings (Webvisor); only where Yandex Metrica is enabled | up to 1 year | analytics |
5. Third parties
Google Analytics (Google LLC, USA), Yandex Metrica (YANDEX LLC, Russia) and Meta Pixel (Meta Platforms, Inc., USA) receive the data collected by their cookies under their own privacy policies; the transfer safeguards are described in the Privacy Policy, section 6. Meta Pixel is used only on Event pages where the Organizer has entered its own pixel identifier; the Organizer is the controller for that advertising measurement, and POTALONU provides the technical integration. Stripe and Cloudflare cookies are necessary for payment security and bot protection and are governed by those providers' policies.
6. Changes
We update this Policy when the cookies we use change. The date of the current version is at the top.