Cookie Policy
Last updated: October 2026
1. What this policy covers
This policy explains the cookies and similar browser storage used by Tatbiq.store ("we," "us"), including our website, the business dashboard, and the public booking pages that businesses publish using Tatbiq. It should be read together with our Privacy Policy.
Cookies are small text files a website stores in your browser. Similar technologies, such as localStorage, do the same job inside your browser and are never sent to our servers on every request.
2. Our approach
- Functional cookies only. The cookies we set are needed to sign you in, keep the site secure, and remember settings you chose (language, light/dark mode).
- No advertising or cross-site tracking cookies. We do not sell data or serve ads.
- Analytics without cookies. We use Vercel Web Analytics to count page views. It does not use cookies or follow you across sites.
3. Cookies we set
| Name | Purpose | Duration |
|---|---|---|
authjs.session-token (__Secure-authjs.session-token on HTTPS) | Keeps you signed in to the dashboard, staff portal, or admin area. Set only after you sign in. | Up to 30 days |
authjs.csrf-token, authjs.callback-url | Protect the sign-in form against forged requests and return you to the right page after signing in. | Session |
authjs.state, authjs.pkce.code_verifier, authjs.nonce | Short-lived security values used only while you sign in with Google. | Minutes |
tatbiq-customer.session-token, tatbiq-customer.csrf-token, tatbiq-customer.callback-url (with __Secure- in front on HTTPS) | Keep a booking customer signed in to "My bookings" on a business's booking page, separately from business accounts. | Up to 30 days |
NEXT_LOCALE | Remembers your language (English or Arabic). | 1 year |
nx-theme | Remembers your light, dark, or system appearance choice. | 1 year |
4. Browser storage we use
- Appearance on booking pages: if a visitor switches a business's booking page between light and dark, that choice is stored in the browser for that page only.
- Dashboard preferences: for signed-in users, display settings for the bookings screen and recently used items in the command palette.
- Demo pages: the currency you pick on our demo pages.
- Cookie notice: that you accepted the cookie notice on our website, so it isn't shown again.
None of this is used to identify you across other websites.
5. Third-party services that may set their own cookies
Some pages load content from other companies. They receive your IP address and browser details when they do, and may set their own cookies under their own policies:
- Google Maps: a business's booking page can show an embedded map of its address. Google may set its own cookies when the map loads.
- Google Fonts: some pages may load fonts from Google.
- Payment providers (Stripe, Tap Payments): their hosted checkout pages, if a business has enabled online payment, are operated by those providers.
- OpenStreetMap: the location map in the dashboard settings.
See Section 8 of our Privacy Policy for these providers' privacy policies.
6. Managing cookies
You can block or delete cookies in your browser settings. If you block the sign-in cookies you will not be able to sign in to the dashboard, and if you block the language or appearance cookies those preferences will not be remembered between visits. Clearing your browser's site data also removes the browser storage described above.
7. Changes and contact
If we add a cookie or tracking technology that is not listed here, we will update this policy before we use it. Questions? Email support@tatbiq.store.