Cookie and SimilarTechnologies Policy

Cookie Policy

Last updated: 26 August 2026

Version: 2.3

Effective date: upon publication on toybayram.az

TOYBAYRAM - event search platform

Email: [email protected]

Website: toybayram.az

This Cookie Policy governs TOYBAYRAM's use of Cookies and similar technologies in line with the current Platform model and privacy-by-design best practices. It defines Cookie categories, prior-consent rules for optional technologies, Cookie banner and Settings standards, third-party integrations, the actual Cookie register, retention and technical security measures.

Core principles

Optional Cookies do not run before an explicit User choice where consent is required.

Reject All is presented as clearly and easily as Accept All; dark patterns and pre-ticked optional categories are not used.

Cookie Settings remain accessible after the initial choice and consent can be withdrawn at any time.

TOYBAYRAM maintains an actual Cookie register stating name, provider, purpose, category and retention for technologies actually used.

Strictly Necessary Cookies are limited to what is objectively required for the requested function, security and site operation.

TOYBAYRAM does not store plain-text passwords, CVV, PIN or full bank-card data in Cookies and does not sell Cookie data.

Contents

General Provisions and TOYBAYRAM Standard1-7

Categories of Cookies and Similar Technologies8-16

Purposes of Use17-24

Third-party Services and Actual Cookie Register25-30

Consent and User Interface31-44

Retention and Technical Security45-50

Additional Provisions51-56

I. GENERAL PROVISIONS AND TOYBAYRAM STANDARD

1.Purpose of this Policy

This Cookie and Similar Technologies Policy governs the use of Cookies, local storage, session storage, pixels, SDKs, device identifiers, server-side identifiers and other technologies that store or access information on a User's device when toybayram.az and its mobile web experience are used.

2.Standard applied by TOYBAYRAM

For optional technologies, TOYBAYRAM applies a privacy-by-design approach focused on clear User choice, prior consent where required, avoidance of dark patterns, an easy refusal mechanism and the ability to change choices later.

3.Relationship with the Privacy Policy

Where a Cookie or similar technology can directly or indirectly identify a User or is linked to a User account, the related processing is also governed by the Privacy Policy and applicable personal-data law.

4.Scope

This Policy applies to registration, login, Search, profiles, Requests, Messages, Booking workflow, Reviews, Verification, Notifications, Support, analytics, security and site settings.

5.What is a Cookie

A Cookie is a small file or identifier that a website may store on or read from a User's device to support sessions, security, preferences, analytics or other functions.

6.Similar technologies

Similar technologies include local storage, session storage, pixels, SDKs, browser storage, device identifiers and other technical mechanisms that perform comparable functions. The substance of this Policy applies to them even where they are not technically Cookies.

7.Current no-payment model

Under the current model TOYBAYRAM does not process payments between Customers and Performers and does not store bank-card data, CVV, PIN, plain-text passwords or full payment credentials in Cookies.

II. CATEGORIES OF COOKIES AND SIMILAR TECHNOLOGIES

8.Strictly Necessary Cookies

Strictly Necessary Cookies are used only for functions without which the website or a particular function expressly requested by the User cannot operate properly and securely. They may include session, authentication, security, consent-choice, load-balancing and anti-fraud Cookies.

9.Session Cookies

Session Cookies generally operate during the current browser session and may cease when the session ends.

10.Persistent Cookies

Persistent Cookies may remain for longer than one session to remember settings, consent choices, language, device recognition or other permitted purposes.

11.Security Cookies

Security Cookies and similar identifiers may be used to protect accounts and prevent CSRF, fraud, impersonation, repeated failed login attempts, automated abuse and evasion of restrictions.

12.Preference / Functionality Cookies

Preference / Functionality Cookies may remember language, interface settings and other preferences that are not strictly necessary but improve convenience.

13.Analytics / Performance Cookies

Analytics / Performance Cookies may be used to measure visits, User journeys, Search usage, errors, loading time, reliability and feature demand.

14.Marketing / Advertising Cookies

Marketing / Advertising Cookies are not part of TOYBAYRAM's current core model. If introduced, they will be separately disclosed and, where required, activated only after the relevant User consent.

15.First-party Cookies

First-party Cookies are set or controlled directly by TOYBAYRAM and are used for Platform functions.

16.Third-party Cookies

Third-party Cookies may be set by an external provider where TOYBAYRAM uses services such as Google sign-in, analytics, security, media or other integrations. Such providers may independently determine part of their data processing under their own documents.

III. PURPOSES OF USE

17.Authentication and session management

Cookies may support login, authenticated sessions, logout, account protection, preservation of state between pages and secure management of the User session.

18.Google sign-in

When a User independently chooses Google sign-in, Google may use its own Cookies or similar technologies required for authentication and security. TOYBAYRAM does not receive the User's Google password.

19.Security and fraud prevention

Technical identifiers may be combined with security logs and account signals to detect unauthorized access, abuse, fraud, impersonation, bots and other threats.

20.Language and settings

Cookies and local storage may remember selected language, interface preferences and the User's choice regarding optional Cookies.

21.Analytics and product development

Where consent is required, analytics technologies may be used after consent to understand how Users find Performers, apply filters, open profiles and move through other User journeys, in order to improve Search and interface.

22.Performance and diagnostics

TOYBAYRAM may use technical data to diagnose errors, measure stability, page load and responsiveness, and resolve technical issues.

23.Support

When a User contacts Support, session, device and technical-error information may be used to reproduce the problem and provide assistance.

24.Consent management

A dedicated Cookie or local-storage record may be used to save a User's Cookie choices so the same choice does not have to be requested on every page or visit.

IV. THIRD-PARTY SERVICES AND ACTUAL COOKIE REGISTER

25.External providers

TOYBAYRAM may use external services for authentication, hosting, security, analytics, notifications, media and other technical functions. Each provider integration must be consistent with the Privacy Policy and this Policy.

26.Google and other authentication providers

An external authentication provider may set its own technologies when the User chooses the relevant login function. The User also interacts with that provider under the provider's own privacy/cookie documents.

27.Analytics providers

Optional third-party analytics should not load before User consent where TOYBAYRAM uses a consent-based model for that technology or consent is required by applicable law.

28.Embedded media

Video, maps and other embedded content may use technologies of an external provider. Where such content creates optional tracking, TOYBAYRAM may block it until the User makes the relevant choice.

29.Advertising and remarketing

TOYBAYRAM must not describe advertising or remarketing technologies as active before they are actually implemented. If introduced, Cookie Settings, the Privacy Policy and this Policy must be updated before activation.

30.Actual Cookie register

Before commercial launch, TOYBAYRAM must maintain an up-to-date Cookie register in Cookie Settings or another accessible interface. For each technology actually in use, the register should state at least its name, provider, first-party or third-party status, category, specific purpose and retention period.

V. CONSENT AND USER INTERFACE

31.No optional Cookies before consent

Optional Cookies and similar technologies that require consent must not be set, read or activated before the User takes an explicit affirmative action.

32.Continued browsing is not consent

Scrolling, continued browsing, closing a banner or taking no action are not treated by TOYBAYRAM as consent to optional Cookies.

33.Accept All and Reject All

If the first layer of the Cookie banner includes an Accept All button, the same layer must provide a clear Reject All option for optional categories, together with a Manage Settings option.

34.Rejecting must be as easy as accepting

Rejecting must be as easy as accepting: TOYBAYRAM must not use an interface where rejection requires materially more steps, is hidden in body text or is visually unjustifiably less prominent.

35.No dark patterns

The Cookie interface must not use misleading design, artificial pressure, countdowns, false urgency, a hidden Reject option, pre-selected optional categories or other dark patterns that could distort a User's free choice.

36.No pre-ticked optional categories

Optional Analytics, Marketing and other consent-based categories must not be enabled by default before the User makes a choice.

37.Granular choice

Where several optional purposes are used, TOYBAYRAM should allow Users to manage them by reasonably separate categories, such as Analytics and Marketing, rather than bundling all purposes into one indivisible consent where that is not justified.

38.Clear information before choice

Before making a decision, the User must receive concise and understandable information about Cookie categories and purposes, and the detailed Cookie register must be accessible without first accepting optional Cookies.

39.Cookie walls

Cookie walls should not block basic access to TOYBAYRAM merely because a User refuses optional Cookies, except where a specific technology is objectively necessary for a function separately requested by the User and such a model is permitted by applicable law.

40.Withdrawal of consent

A User may withdraw or change consent to optional Cookies at any time through Cookie Settings, Privacy Settings or another persistently accessible mechanism. Withdrawal should be practically no more difficult than the original consent.

41.Accessibility of Settings

A link or other clear control for managing Cookies should remain available through the footer, privacy center or another stable location so the User does not need to find the original banner.

42.Remembering the choice

TOYBAYRAM may remember acceptance or refusal for a reasonable period to avoid repeated prompts. As a privacy best-practice benchmark, a period of around six months may be used unless a shorter or longer period is justified by the feature or a change in circumstances.

43.Refreshing consent

TOYBAYRAM requests a new choice earlier where purposes, categories, providers or the scope of tracking materially change from what the User previously accepted.

44.Consent records

TOYBAYRAM may retain a minimal record of the consent choice, time, banner/policy version and selected categories in order to demonstrate which choice was made.

VI. RETENTION AND TECHNICAL SECURITY

45.Cookie lifespan

The lifespan of each Cookie should correspond to its purpose. A Session Cookie should be used only for as long as necessary for the session, and a Persistent Cookie no longer than reasonably necessary for its stated purpose.

46.Deleting Cookies

A User may delete Cookies through browser settings. This may end a session, reset language and preferences, remove a stored consent choice and cause the Cookie banner to appear again.

47.Security attributes

For sensitive authentication and security Cookies, TOYBAYRAM uses, where technically appropriate, controls such as Secure, HttpOnly, SameSite and domain/path restrictions.

48.No sensitive secrets in Cookies

TOYBAYRAM does not store plain-text passwords, CVV, PIN, secret authentication credentials or full bank-card details in Cookies.

49.Server-side retention

Where data collected through a Cookie is later retained in TOYBAYRAM systems, retention of that server-side data is governed by the Privacy Policy and the relevant purpose, not only by the lifetime of the Cookie itself.

50.Data minimization

TOYBAYRAM seeks to limit the number, scope and lifetime of Cookies to what is reasonably necessary for each specific purpose.

VII. ADDITIONAL PROVISIONS

51.Users under 18

TOYBAYRAM is not intended for independent creation of Customer or Performer accounts by persons under 18. Under the current model the Platform does not knowingly use Cookies for advertising profiling of children.

52.Cross-border processing

Where Cookie data constitutes personal data and is processed by a provider outside Azerbaijan, the cross-border transfer rules in the Privacy Policy and the laws of the Republic of Azerbaijan apply.

53.Applicable law and best practice

This Policy applies subject to the laws of the Republic of Azerbaijan. For optional tracking, TOYBAYRAM additionally uses stricter privacy-by-design practices where they improve transparency and User control.

54.Changes to this Policy

TOYBAYRAM may update this Policy when technologies, providers, purposes, Cookie categories or legal requirements change. Material changes are reflected in an updated version and, where necessary, require a new consent choice.

55.Language Versions

This Policy is published in Azerbaijani, Russian and English. In the event of any discrepancy between language versions, the Azerbaijani version has prevailing legal force.

This provision does not restrict User or consumer rights that cannot lawfully be limited by agreement under mandatory law.

56.Contact and Pre-action Claims

Questions about Cookies, consent and privacy settings: [email protected]. Website: toybayram.az.

Where a claim concerns TOYBAYRAM's own use of Cookies or consent management, the User may send a written pre-action claim to the stated address; TOYBAYRAM aims to respond within 15 business days. Any right to contact a competent authority or court remains unaffected.