Cookie Policy

1. What cookies are

Cookies are small text files that a website stores in your browser when you visit it. On later visits the browser sends them back, which is how a site "remembers" what you did: that you are signed in, which language you chose, which region you are browsing.

In this document, cookies also cover related technologies with a similar purpose: browser storage (localStorage and sessionStorage), session identifiers, and device identifiers in the mobile app.

Cookies differ by lifetime:

• session cookies are deleted as soon as you close the browser;
• persistent cookies stay for a set period or until you delete them.

They also differ by origin:

• first-party cookies are set by the meeti.me domain;
• third-party cookies are set by services we integrate, such as the payment provider.

This Policy forms part of the Meeti Me Privacy Policy and supplements it. The operator is DOKUMENT.PL sp. z o.o., Aleja Stanow Zjednoczonych 51 lok. 222, 04-028 Warszawa, Poland, NIP 5242982251, KRS 0001055336.

Current version: 2026-08-01. Effective date: 2026-08-01.

2. Cookie categories

Necessary. These make the basic site work: signing in, keeping your session, form security, load balancing, and storing your cookie choice. Without them the site will not work properly. They are set on the basis of performing the contract and do not require consent, but we still tell you about them.

Functional. These remember your settings: interface language, region, tips you already dismissed. They make the site more convenient, but the site still works without them.

Analytics. These help us understand how the platform is used: which pages people visit, where users run into difficulty, which features go unnoticed. We use the results only in aggregate to improve the product. They are set only after you consent.

Marketing. These would be used to show advertising and measure its effectiveness. We do not use marketing or advertising cookies. The platform has no third-party advertising or targeting trackers installed at all. We do not share data about your behaviour with ad networks. If this ever changes, we will update this document and ask for your consent before setting any such cookies.

3. The cookies we use

All the cookies listed below are first-party: they are set by the meeti.me domain.

| Name | Category | Purpose | Retention | | --- | --- | --- | --- | | `accessToken` | Necessary | Access token confirming that you are signed in and allowing actions on your behalf | 15 minutes | | `refreshToken` | Necessary | Refresh token: lets your session continue without re-entering the password | 30 days | | `auth-hint` | Necessary | A flag that an active session exists. Lets the interface show the right screen immediately without an extra server call. Contains no personal data | 30 days | | `user-lang` | Functional | Selected interface language | 12 months | | `mp_region` | Functional | Selected marketplace region: determines which salons and which legal documents you are shown | 12 months | | `cookie-consent` | Necessary | Stores your choice in the consent banner: which categories you allowed, the date of the choice and the banner version. Needed so we do not ask again and can demonstrate that consent exists | 12 months |

The `accessToken` and `refreshToken` cookies carry the `HttpOnly`, `Secure` and `SameSite` attributes, so they are not accessible to third-party scripts and are sent only over a secure connection.

If you sign out, session tokens are deleted immediately.

4. Analytics: PostHog

We use PostHog for product analytics. It gives us a pseudonymous picture: how many users reach the booking screen, where they stop, which features go unused.

• Category: analytics, set only after you consent.
• What is collected: a randomly generated visitor identifier, interface events (page view, click, form error), device and browser type, truncated IP address, referrer.
• What is not collected: the content of input fields, passwords, payment details, or the content of salon notes about a client.
• Hosting: PostHog infrastructure in the European Union. Data does not leave the EU within this integration.
• Retention: up to 24 months.
• Identifiers: stored in `ph_*` cookies and in browser storage, for up to 12 months.

If you did not consent or withdrew consent, the analytics script is not loaded and previously set identifiers are removed.

5. Payments: Stripe

Subscription payments from salons are processed by Stripe. Consumers do not pay through the platform, so these cookies are mainly encountered by salon representatives on payment pages.

• Category: necessary. They are required to complete the transaction and prevent fraud, so they are set on the basis of performing the contract rather than consent.
• Purpose: maintaining the payment session, verifying the authenticity of a payment, detecting suspicious activity and automated card testing.
• Type: third-party cookies on Stripe domains, in particular `__stripe_mid` (device identifier, up to 12 months) and `__stripe_sid` (session identifier, around 30 minutes).
• Important: you enter the full card number, expiry date and CVC directly in Stripe's form. We neither see nor store them.

These cookies cannot be disabled without losing the ability to pay for the subscription. Stripe's own processing is also governed by Stripe's privacy policy.

6. How we obtain your consent and how you change it

On your first visit to meeti.me a consent banner appears. Until you make a choice, only necessary cookies operate: analytics scripts are not loaded.

The banner offers three actions:

• Accept all - allow functional and analytics cookies;
• Reject optional - keep only the necessary ones;
• Settings - turn each category on or off individually.

Your choice is stored in the `cookie-consent` cookie together with the date and banner version, so that we can demonstrate that processing was lawful. Scrolling the page, closing the banner with the X, or continuing to use the site are not treated as consent.

You can change or withdraw consent at any time:

• through the "Cookie settings" link in the footer of every page;
• in the privacy settings section of your personal cabinet;
• by clearing cookies in your browser, after which the banner reappears.

Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out earlier.

You can also manage cookies through your browser: block all or specific cookies, delete stored ones, or use private browsing mode. The relevant settings are in the privacy sections of Chrome, Safari, Firefox and Edge. In the mobile app, analytics can be turned off in the app settings.

7. What happens if you refuse

You are free to refuse optional cookies, and doing so does not cut off your access to the platform.

• Refusing analytics - no effect on the service. You use the platform in full; we simply get less data to improve it.
• Refusing functional cookies - the site works, but it will not remember your language and region, so you will have to choose them each time.
• Blocking necessary cookies in your browser - signing in becomes impossible, your session will keep dropping, bookings will not be saved, and subscription payment will fail. We cannot provide the service without these cookies.

We do not degrade functionality or show repeated banners as a penalty for refusing. We will ask again only when the `cookie-consent` cookie expires, when you clear cookies, or when we add a new category or a new provider.

8. Changes to this Policy

The list of cookies may change as the platform changes: we add features, switch providers, and drop tools we no longer need.

The current version is always available at meeti.me with its version number and effective date. If we plan to add a new cookie category or a new provider requiring consent, the consent banner will appear again, and no such cookies will be set until new consent is given.

We will give notice of material changes at least 14 days before they take effect, through an in-product message or by email.

Cookie questions: meetime.company@gmail.com. Data protection questions: meetime.company@gmail.com. Technical support: meetime.company@gmail.com. You may complain to the supervisory authority: Уповноважений Верховної Ради України з прав людини, вул. Інститутська 21/8, Київ, 01008, Україна, ombudsman.gov.ua.

---

The Ukrainian version of this document is the legally binding one. This English text is provided for convenience only; in case of any discrepancy, the Ukrainian version prevails.