Cookie Policy

This Cookie Policy (the "Policy") governs the use of cookies and similar technologies by Codepower OÜ on the MyBookSlot website and service. It supplements the Privacy Policy and applies together with it.

1. What cookies are

Cookies are small text files stored on the user's end device when visiting a website. By "similar technologies" we also mean other means of storing information on the device (for example localStorage) when used for the same purpose.

2. Legal framework and consent

Essential cookies that are strictly necessary to provide a service requested by the user, or for the security of the service, may be used without prior consent. All other cookie categories are set only after prior, freely given, specific, informed and unambiguous consent where required by applicable EU/EEA law. Consent may be withdrawn at any time with the same ease with which it was given.

3. Cookie categories

• Essential (strictly necessary) — enable account login, session protection, abuse prevention (CSRF), language preferences, holding a selected booking slot, and storing the consent choice itself.
• Analytics — help us understand how the product is used and improve the service. Loaded only after consent.
• Marketing / affiliate — used for attribution of visits via an affiliate referral. Set only after consent.

4. Cookie inventory

As of the date of this Policy, the following first-party cookies are used:

• next-auth.session-token / __Secure-next-auth.session-token — session authentication; essential; HttpOnly.
• NextAuth CSRF / callback / PKCE cookies — login security; essential.
• calcom.csrf_token — CSRF protection for APIs; essential.
• calcom-locale / calNewLocale — UI language preference; essential preference; up to about 365 days.
• uid — temporarily holds a selected booking slot; essential for the booking function.
• mbs_cc — records the cookie consent choice; essential; up to about one year.
• mbs_ref — affiliate referral code; marketing; up to 30 days; HttpOnly; only after consent.
• return-to — temporary return URL after connecting an external application; essential; about 1 hour.

5. Managing consent

On a first visit we display a banner allowing you to accept essential cookies only or to consent also to analytics and marketing categories. To change your choice later, you may delete the mbs_cc cookie in your browser settings or contact us at support@mybookslot.com. You may also restrict or delete cookies via your browser settings; blocking essential cookies may make parts of the service unavailable.

6. Third-party cookies

If analytics or error-monitoring tools are enabled (for example PostHog or Sentry), the relevant provider may set its own cookies or similar identifiers only after analytics consent, unless the processing is strictly necessary for security. Payments via Paddle take place on Paddle's platform and are governed by Paddle's privacy and cookie policies.

7. Changes

We may update this Policy when the technologies used or applicable law change. The date of the latest update appears at the beginning of the document.