Cookie Notice

1. What cookies and browser storage are

Cookies are small text files that a website stores in your browser. Browser storage (such as session storage) works in a similar way but stays on your device and is not sent to our servers automatically.

2. Cookies we use

All of these cookies are strictly necessary or remember a choice you made. They are set by HamNabz itself (first-party) and are not used to track you across websites.

• Session cookie (“better-auth.session_token”, or “__Secure-better-auth.session_token” on secure connections): keeps you signed in. It is HttpOnly (not readable by scripts), Secure on HTTPS, SameSite=Lax and expires when your session ends, at the latest after 24 hours. It is set only when you sign in.
• Language cookie (“darmanyar-lang”): remembers the interface language you chose (English, Persian or Tajik). It contains only the language code and expires after one year.
• Draft owner cookie (“darmanyar_draft_owner”): strictly necessary. It holds an opaque label for your signed-in account, so an unsaved draft is restored only into the same account and never shown to someone else using the browser. It is set when you sign in, removed when you sign out or your session expires, lasts no longer than your session, and is not used for tracking.

Our hosting and security provider, Cloudflare, may set strictly necessary security cookies (for example to distinguish people from automated traffic) [Cloudflare security cookies to be confirmed for the deployment].

3. Browser storage we use

• Unsaved drafts: while you are signed in and fill in a form, such as a message or medical document, a draft is kept in this browser tab’s session storage so that it is not lost if the page reloads. It is deleted when you save, discard or close the tab, after 12 hours, and in every open tab when you sign out; it is restored only into the account that wrote it and never leaves your device.
• Navigation position: a number in session storage helps the back button work correctly inside the application. It contains no personal information.

4. What we do not use

We do not use analytics, advertising, social media or other third-party tracking cookies, pixels or scripts. We do not load fonts or scripts from third-party servers on our pages. For this reason we do not show a cookie consent banner: the cookies above are needed for the service or store a choice you made.

5. How to control cookies

You can delete or block cookies in your browser settings. If you block the session cookie you will not be able to sign in. If you delete the language cookie, the site will choose a language again from your device settings or use English.

6. Changes and contact

If we start using other cookies, we will update this Notice before doing so and, where the law requires, ask for your consent. Questions: [Contact email].