Appointo Appointo
Features How it works Pricing FAQ
UA EN PL DE IT FR
Start free
Home Try for free

Cookie Policy

Effective: May 2026  ·  Version 1.0

1. What are cookies

Cookies are small text files that a website stores in your browser when you visit it. They allow the site to "remember" certain information between requests — for example, that you are already logged in. In addition to cookies themselves, we also use the browser's localStorage mechanism — it works on a similar principle, but data is stored only locally on your device and is not automatically sent to the server with every request.

2. What cookies Appointo uses

Appointo uses a very limited number of cookies and local storage items — exclusively those necessary for the correct operation of the service. We do not use analytical, advertising, or tracking cookies.

Table of cookies and local storage items

Name Category Purpose Retention period Legal basis (GDPR)
session_id Essential Administrator authentication in the personal account. The cookie is set by the server with the httpOnly and Secure flags — JavaScript has no access to it, which protects against XSS attacks. Until end of session (deleted when the browser is closed or the user logs out) Art. 6(1)(b) GDPR — contractual necessity
csrf_token Essential Protection of forms against cross-site request forgery (CSRF). The token is submitted with each data-modification request to confirm the action was initiated from a legitimate page. Until end of session Art. 6(1)(f) GDPR — legitimate interests (ensuring service security and protecting user data)
cookie_consent (localStorage) Functional Stores your choice regarding the cookie banner so it is not shown again. Stored in the browser's localStorage, not in a cookie file, and is not transmitted to our server. 1 year (or until browser data is cleared) Art. 6(1)(a) GDPR — your consent
booking_draft (localStorage) Functional Temporarily stores the state of an incomplete appointment booking in the booking widget (e.g., the selected service or time slot). Data is stored only in your browser and is automatically deleted after the booking is completed or the tab is closed. Until the booking is completed or the tab is closed Art. 6(1)(b) GDPR — contractual necessity (provision of a functional booking service)

Note regarding Google Calendar: when connecting Google Calendar, the OAuth refresh token is stored in encrypted form exclusively on our servers and never reaches your browser. The short-lived access token is stored only in browser memory (not in a cookie or in localStorage) and is deleted when the tab is closed.

3. Cookie categories

Essential Essential

These cookies are mandatory for the operation of the website. Without them, secure authentication and protection of your actions against malicious actors are not possible. Because they provide basic security, they cannot be disabled without disrupting the operation of the service. Consent is not required for them pursuant to Art. 5(3) of Directive 2002/58/EC (the ePrivacy Directive) and regulatory guidance.

Functional Functional / Preference

These storage items improve your experience: they save your choices (e.g., cookie consent) or the temporary state of the booking form. You may opt out of them or clear them at any time through your browser settings — however, in that case the consent banner will be displayed again, and incomplete booking form data will not be retained between sessions.

4. Third-party cookies

Appointo does not use third-party cookies or scripts for analytics, advertising, retargeting, or tracking visitor behaviour on third-party websites.

Google Fonts: Fonts on our website may be loaded from Google's CDN (fonts.googleapis.com). This is a standard HTTP request from the browser to a publicly available CDN; Google Fonts does not set cookies in this mode. If this concerns you, you can block requests to Google domains in your browser settings or using a DNS filter — the appearance of the site may differ slightly (the system font will be used instead).

Messenger integrations (Telegram, Viber, WhatsApp, Facebook Messenger): these features are processed exclusively on the server side via the respective platforms' API. No cookies or scripts from these platforms are placed on our website.

5. How to manage cookies

Deleting and blocking via the browser

You have the right to delete or block cookies and clear localStorage in your browser at any time. Instructions for popular browsers:

  • Google Chrome: Settings → Privacy and security → Cookies and other site data
  • Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Microsoft Edge: Settings → Cookies and site permissions
  • Safari: Settings → Privacy → Manage Website Data
  • Opera: Settings → Advanced → Privacy and security → Cookies

Up-to-date step-by-step instructions are also available at www.aboutcookies.org and www.allaboutcookies.org.

Please note: blocking the essential cookies (session_id, csrf_token) will prevent you from logging into the Appointo administration panel.

Withdrawing consent

If you previously gave consent to functional storage items and wish to withdraw it, simply clear localStorage for the appointo.xyz domain in your browser. The next time you visit the site, the consent banner will appear again.

Contact us

For any questions regarding cookies or data processing, please contact us at: v.fedorov@appointo.xyz

6. Changes to this policy

We may update this Policy in connection with changes to the service's functionality, legal requirements, or regulatory guidance. In the event of material changes, we will notify you no less than 14 calendar days before they take effect — by means of a prominent banner on the website or (for registered administrators) by email. The date of the current revision is always shown at the top of this document.

Minor changes (clarification of wording, correction of errors, updating of links) may take effect immediately.

7. Contact details

Appointo
Email for privacy and cookie enquiries: v.fedorov@appointo.xyz
Website: https://appointo.xyz

For questions regarding personal data protection in general (data subject rights, legal bases for processing, retention periods) — please refer to our Privacy Policy, which is the primary document on data protection matters.

Changelog Roadmap Status Legal notice Terms of service Privacy policy Cookie policy
Ми у соцмережах

© 2026 Appointo

Appointo

Features How it works Pricing FAQ Start free

We use essential cookies to run the service and functional cookies to remember your settings. No analytics or advertising cookies. Learn more