This Cookie Policy describes which cookies and similar technologies AlmaStars Group, a sole proprietorship (the Onim platform, the “Platform”), uses on onim.app, in the my.onim.app workspace (including when it is opened inside Telegram), on the engine address api.onim.app and on Sellers’ sites and stores that run on the Platform, including on a Seller’s own domain. It supplements the Privacy Policy (section 17) and the Terms of Service. The list below reflects the Platform’s code as of the date of this version.
1. What cookies and similar technologies are
- A cookie is a small file that a site saves in the browser and receives back with later requests to the same address.
- The browser’s local storage (localStorage) keeps data on the device until the site or the user deletes it. Unlike a cookie, this data is not sent to the server by itself: only a page of the same address can read it.
- Tab storage (sessionStorage) works the same way but is cleared when the tab is closed.
Below, “cookies” means all of these technologies unless stated otherwise.
2. In short
- The my.onim.app workspace sets no cookies of its own. The onim.app website sets one technical cookie, the chosen page language
onim_lang(section 4). Sign-in, language, appearance and drafts are kept in the browser’s local storage and are needed for the service to work. - onim.app and my.onim.app use no analytics or advertising cookies and no third-party trackers (Google Analytics, Meta Pixel, Yandex Metrica, TikTok Pixel or similar). If any are added, they will only turn on with your consent, and this page will be updated.
- Sellers’ sites and stores set technical cookies: cart, checkout, buyer workspace sign-in, language, webinar registration, a visit counter for the seller’s statistics (section 5).
- The only Platform cookie related to advertising is the click tag
onim_ckfor a Seller’s ad link (section 6). - You can change your choice in the workspace at any time: Profile → “Cookie Settings” (section 9).
3. The my.onim.app workspace
The workspace sets no cookies of its own. Everything listed below is kept in the browser’s local storage or tab storage on my.onim.app, is needed for the workspace to work and is not shared with third parties. These entries cannot be switched off in the banner: sign-in and settings do not work without them. They are removed when you sign out (the session key) or together with site data in your browser settings.
| Entry | Purpose | Duration |
|---|---|---|
Sign-inonim_token, onim_auth_gen |
The workspace session key and a mark that lets tabs notice a sign-in or sign-out in another tab | Until sign-out or the end of the session |
Sign-in methodonim_login_mode, onim_login_email |
Show the right screen next time (email code or password) and prefill the email | Until site data is deleted |
Sign-in with Google and Telegramonim_google_started, onim_tg_widget_state, onim_tg_link, onim_tg_bot_login, onim_tg_nudge |
Temporary “sign-in started in this tab” marks that protect against a sign-in being swapped through someone else’s link. Inside Telegram, Telegram’s script saves the workspace launch parameters (__telegram__initParams) |
Tab storage: up to 15 minutes or until the tab is closed |
Language and appearanceonim_lang, onim_lang_choice, onim_lang_auto, onim_kk_preview, onim_theme |
Workspace language and light or dark appearance on this device | Until site data is deleted |
Working settingsonim_business, onim_biz_opened, onim_supplier_country, onim_kaspi_token_phone |
The open business and the order of businesses in the list, the country in supplier search, the phone number the Seller entered for a Kaspi invoice when topping up tokens | Until site data is deleted |
Drafts and exampleonim_content_editor_draft, onim_series_offer_draft, onim_research_hits_v1, onim_supplier_queue_v1, onim_demo |
Unsaved post and offer text, found products, the supplier queue, the session of the example workspace opened from the onim.app home page | Tab storage: until the tab is closed (supplier drafts up to 12 hours) |
Partner invitationonim_partner_ref |
The partner’s handle from an invitation link: kept until sign-in to credit the invitation under the partner program, then removed | Until sign-in |
Cookie choiceonim_cookie_consent |
Your choice in the banner: essential always on, performance and advertising allowed or not, date of the choice | Until you change the choice or delete site data |
For Platform staff who sign in to the internal admin panel, the browser keeps that panel’s session cookie onai_studio_session (domain onim.app and its subdomains, HttpOnly, limited duration). It is not set for other users.
4. The onim.app website
onim.app sets one technical cookie of its own, onim_lang: the language (Russian or English) a person chose with the language switch on the page or by opening a link with the lang parameter. It is needed so that onim.app pages keep opening in the chosen language, is not shared with third parties and is kept for 1 year or until deleted in the browser settings. Until a language is chosen, no cookie is set and the page language is determined by the browser language and the country. In the browser’s local storage and tab storage the website keeps:
| Entry | Purpose | Duration |
|---|---|---|
Referral source tagonai_ref, onai_ref_at, onai_ref_sent_<tag> |
The tag from the link (parameters r, ref, from, utm_source) to credit an invitation and the visit at sign-up; a mark that the visit has already been counted today. The server receives the tag, page and device type, without an IP address or personal identifier (Privacy Policy, section 17) | Until site data is deleted |
“Try before signing up” exampleonim_demo_visitor |
A random visitor code to keep one conversation with the example and to limit the number of requests | Until site data is deleted |
Seller catalogonim_country |
The country selected in the catalog | Until site data is deleted |
Sign-in with Telegramonim_tg_login_state |
A sign-in mark on the onim.app/login-tg page until the return from Telegram | Tab storage: until sign-in ends or the tab is closed |
5. Sellers’ sites and stores
Sellers’ sites and stores on the Platform set their own technical cookies on the address where the page is open (for example, api.onim.app or the Seller’s domain). They are needed for purchases and the buyer workspace to work:
| Cookie | Purpose | Duration |
|---|---|---|
Cartcart_<store code> |
Items in the store cart | 30 days |
Checkoutco_<store code> |
A draft of the order form (email, delivery address), signed with the Platform’s key, so it does not have to be entered again on the next step. HttpOnly | 24 hours |
Buyer workspacebsid, blang |
The buyer’s sign-in to this business’s buyer workspace (HttpOnly) and the selected workspace language | Sign-in 90 days, language 1 year |
Webinarroom_<webinar address> |
Links the browser to a webinar registration so the reminder link opens the room without registering again | 30 days |
Seller site statisticsonim_site, onim_vid |
Only for the seller’s “What the site sells” summary: count a visitor once per day (onim_vid, a random code) and credit a “Buy” tap and a payment to the site if the person came from it (onim_site: site number and where the person came from, such as Telegram or search). No name, email or other visitor details, not shared with third parties, the seller sees only totals. HttpOnly, secure connections only. Set on the seller’s site, including onim.app/<seller address>; not set for bots and link previews |
Up to 2 days |
A Seller who adds their own scripts, pixels or links to third-party services to their site is the operator of the data obtained this way and is responsible for informing visitors and obtaining their consent where the law of the visitor’s country requires it (Privacy Policy, section 1).
6. Click tag for a Seller’s ad link
A Seller can create an ad link of the form …/l/<code> in the workspace and use it in their ad. When a visitor follows such a link, a first-party cookie onim_ck is set on the address where the link opened (api.onim.app or the Seller’s site, including the Seller’s own domain):
- value: a random click code, with no name, email or other information about the visitor; HttpOnly, sent only over a secure connection;
- duration: 28 days;
- purpose: to attribute a purchase on the Seller’s site to the Seller’s ad and, if the Seller has connected the “Meta Pixel” app, to send a “Purchase” event to the Seller’s ad account from the Platform’s server (Privacy Policy, section 6). No Meta script is loaded in the visitor’s browser.
The click itself (the ad system’s fbclid tag, IP address, browser data) is recorded on the Platform’s server and deleted from working storage after 90 days. This cookie is set only when someone follows a Seller’s ad link; it is not set on onim.app or in the my.onim.app workspace, and the choice in the workspace banner does not affect it. Deleting the onim_ck cookie in your browser stops a later purchase on the site from being linked to the click; the click record can be deleted on request (Privacy Policy, section 12). The Platform may show a consent notice or switch this cookie off for particular Sellers or countries.
7. Third-party services
These services follow their own rules and may set their own cookies on their own addresses. The Platform does not control them:
- Google: when you sign in with Google, you go to a Google page that uses Google cookies (Google’s rules). YouTube video previews in the workspace link editor are loaded from YouTube servers. Sellers’ sites may load fonts from Google Fonts; Google then receives the IP address and browser data.
- Telegram: the sign-in widget on onim.app/login-tg is loaded from telegram.org, and the workspace inside Telegram runs in the Telegram app (Telegram’s rules).
- Videos on Sellers’ sites: the YouTube player (youtube-nocookie.com address), Vimeo or Rutube is loaded only after the video preview is tapped.
- Cloudflare, the Platform’s infrastructure provider, may set its own technical cookies to protect against bots and attacks, for example during a browser check. As of the date of this version, responses from onim.app, my.onim.app and api.onim.app contain no such cookies.
8. Analytics and advertising
onim.app and the my.onim.app workspace currently use no analytics or advertising cookies and no third-party trackers. That is why the “Performance” and “Advertising” switches in the workspace banner do not turn anything on yet: they record your choice in advance. If the Platform adds such tools, they will only work after your consent (“Accept All Cookies” or a switch turned on in “Cookie Settings”), and they will be listed on this page before they are added.
9. How to change your choice
- In the my.onim.app workspace. On your first visit a banner appears at the bottom of the screen: “Reject All” and the close button keep only essential cookies, “Accept All Cookies” allows everything, “Cookie Settings” lets you choose. You can change your choice at any time: Profile → “Cookie Settings” (on a phone, under “Account and other businesses”). The choice is kept on this device and in this browser.
- In your browser. In your browser settings you can delete or block cookies and site data. The workspace will then sign you out, language, appearance and drafts will reset, the cart on Sellers’ sites will be cleared and you will be signed out of the buyer workspace, and the banner will ask again.
- Ad link tag. To delete
onim_ck, delete the cookies of the address where the ad link opened (usually api.onim.app).
10. Changes to this policy
The Platform updates this page when the list of cookies and similar technologies changes. A new version is published here with its date in the manner set out in the Privacy Policy (section 19). The Russian version prevails over the English one.
11. Contacts
For questions about cookies and data processing:
| Operator | AlmaStars Group (sole proprietorship), IIN 930309351177 |
| Registered address | 79 Nurkent, Almaty, Republic of Kazakhstan |
| support@onim.app | |
| Telegram support | @onimsupport |
Requests are accepted at any time and handled within the time limits set by the law of the Republic of Kazakhstan.