Cookie Policy
AwrAiter uses the cookies it needs to keep you signed in, plus product analytics that run only if you agree to them. No advertising, no profiling, no trackers.
Last updated: 2026-08-19
1. What cookies are
A cookie is a small text file a site stores in your browser and reads back on the next request. Cookies strictly necessary to deliver a service the user asked for require information but not consent; cookies used for analytics or profiling require prior consent. Section 2 lists the first kind, which we always set. Section 3 covers the second kind: the panel asks before any of it starts, and declining changes nothing about how the service works.
2. Cookies we set without asking (strictly necessary)
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| awr_at | keeps your session authenticated between requests; httpOnly, Secure, SameSite=Lax, so it is not readable by scripts and is not sent from other sites | 15 minutes | first-party, strictly necessary |
| awr_rt | renews the session without asking you to sign in again; sent only to the refresh endpoint | 30 days, or until you sign out | first-party, strictly necessary |
| tgcms_oauth_session | holds the consent step when you connect an external AI assistant over MCP | the length of the authorisation flow | first-party, strictly necessary |
The panel also stores a few preferences in your browser's local storage — interface language, table layout, and the analytics answer you gave in section 3 — which never leave your device and are not cookies.
3. Analytics, only if you agree
We measure how the panel is used so we can see which features earn their keep. The tool is PostHog, self-hosted by us on ph.awraiter.ai: the data stays on our own servers in the EU and is not shared with an analytics vendor. It records product events — pages opened, posts published, analyses run — together with an account identifier, never the content of your posts or your Telegram audience.
None of it starts until you press Accept in the banner. Until then nothing is written to your browser and no request is sent. If you decline, the panel works exactly the same.
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| ph_…_posthog | recognises the same browser between visits so events are not counted as a new person each time | 12 months | first-party, analytics, consent required |
The same identifier is mirrored in local storage. Both are created only after consent and removed when you withdraw it.
4. Third parties
We run no advertising or social-network scripts, and our analytics is self-hosted rather than sent to a third party. Two third-party surfaces are nevertheless involved when you use the corresponding function:
- Telegram login widget — loaded from telegram.org on the sign-in screen so you can log in with Telegram. Its processing is described at https://telegram.org/privacy.
- Stripe Checkout — payment pages hosted by Stripe on their own domain, where their cookies (including fraud-prevention ones) apply: https://stripe.com/privacy.
5. Controlling cookies and withdrawing consent
You can delete or block cookies in your browser settings — Chrome, Firefox, Safari and Edge all offer this. Blocking the cookies listed in section 2 will prevent you from signing in: they are what a session is made of.
Your analytics answer can be changed at any moment in the panel under Settings → General → Analytics. Withdrawing takes effect immediately, is as easy as giving consent, and does not affect the lawfulness of what was collected beforehand.
6. Data protection and contact
The controller is Mediazione Italia S.r.l., Largo Guido Donegani 2, 20121 Milano (MI), Italia, VAT 14278510962, email privacy.mediazioneitalia@gmail.com, PEC mediazioneitaliasrl@legalmail.it. Any personal data read through the cookies above is processed as described in our Privacy Policy, including your rights under Articles 15 to 22 GDPR and your right to complain to the Garante per la protezione dei dati personali.