Summary
Huzra does not use advertising cookies, cross-site tracking or third-party analytics. The only third-party service is a security check during identity verification. We store a small amount of information in your browser only where it is needed to run the service or to remember a choice you made.
What cookies and similar technologies are
Cookies are small text files a website stores in your browser. "Similar technologies" means other browser storage, such as local storage, that works in the same way. In this policy, "cookies" covers both.
What we use
| Name or type | Where | Purpose | How long |
|---|---|---|---|
| Language preference | Mini app (local storage) | Remembers the language you chose | Until you clear it |
| Card edition preference | Mini app (local storage) | Remembers which card design you viewed | Until you clear it |
| Telegram session data | Inside Telegram | Telegram passes a signed session to the mini app so we can confirm it is really you | Managed by Telegram |
| Cloudflare Turnstile | Mini app, identity verification step only | Security check that tells people from bots; may store short-lived data needed for the check | Set by Cloudflare, short-lived |
The public website (huzra.com, the Blog and this Legal Center) does not set cookies.
Server logs
When you load any page, our web server records technical information such as your IP address, browser type, the page requested and the time. We use these logs to keep the service secure, for example to block repeated failed or abusive requests. Logs are not used for advertising or profiling.
Server logs are kept for 120 days, then deleted.
Website statistics without cookies
To know which pages are useful and where visitors come from, our own server counts page views, the referring website (for example Instagram or Google), the visitor's approximate country, and clicks on the buttons that open the mini app. We do this without cookies, without browser storage and without third-party analytics. Unique visitors are counted with a one-way code made from the IP address, the browser and a random value that changes every day and is never stored, so a visitor cannot be recognised from one day to the next. Only daily totals are kept.
Third parties
Pages may load content from Telegram when you open the mini app. During identity verification, the mini app loads Cloudflare Turnstile; Cloudflare's privacy policy applies to the data it processes for that check. Telegram's own policies apply to what Telegram collects. We do not embed social media trackers or advertising networks.
Your choices
You can clear or block browser storage in your browser or Telegram settings at any time. If you clear it, the mini app will simply forget your language and card preferences. Blocking Telegram's session data will stop the mini app from working, because we need it to confirm your identity.
Changes
If we start using any new cookie that is not strictly necessary, we will update this policy first and, where the law requires it, ask for your consent. See also our Privacy Policy and Data Protection Policy.