Cookie Policy

1. Strictly necessary: room cookies

When you create or join a room, we set an http-only cookie storing a random token that proves you are the host or a participant of that specific room. The name carries the room code and a scope segment — cmp_h_<scope>_<room code> for the host, cmp_p_<scope>_<room code> for a participant.

The scope segment is "anon" when you are not signed in, and otherwise a short one-way digest of your account identifier, so two people signing in on the same device never share a room's tokens and the cookie name itself reveals no identity.

These cookies cannot be read by JavaScript, are scoped to the room they were issued for, expire automatically after 30 days, and are required for the room-answering and results features to work.

2. Strictly necessary: sign-in cookies

These are set only if you choose to sign in. cmp_auth holds your identity, cmp_auth_t holds the tokens used to call our API on your behalf, and cmp_auth_id holds the token that lets us end your session cleanly when you sign out. All three are http-only, encrypted before they are written, and expire after 30 days.

cmp_auth_tx exists only during a sign-in handshake — it carries the one-time values that prove the response came back from the same attempt you started — and is deleted the moment you return from your provider, or after 10 minutes if you never do.

3. Preference cookies

We also set cookies that remember display choices: NEXT_LOCALE stores your selected language, and cmp_tz / cmp_tz_<room code> store your detected or chosen time zone for viewing meeting times. Unlike the cookies above, these are not http-only, so the page can read them to render correctly on first load. The time zone cookies last a year; the language cookie lasts for your browser session.

These cookies only affect how information is displayed to you. They are never sent to a third party and are not used for tracking.

4. Cookies we don't use

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. There is no cross-site tracking of any kind.

5. Managing cookies

Because the strictly necessary cookies are required to prove which room you belong to, blocking them will prevent the room-answering and results features from working, and blocking the sign-in cookies will prevent you from staying signed in. Preference cookies can be blocked or cleared freely — you'll just be asked again for your language and time zone. You can manage any of these cookies at any time through your browser settings.

6. Contact

Questions about this policy can be sent to arthur.vafin.post@gmail.com.