Cookie Policy

A cookie is a small text file that a website asks your browser to store on your device. When you return, the browser sends the cookie back, which lets the site recognise your device, remember your settings and keep certain features working. Cookies cannot run programs or deliver viruses to your device.

Alongside cookies, we and our providers use a number of similar technologies that serve comparable purposes. In this policy, references to "cookies" include these technologies where the context allows:

• Local storage and session storage — data your browser keeps on your device (for example, to remember your chosen language or interface preferences) that is not automatically sent back to the server with every request.
• Software Development Kit (SDK) and device storage in our mobile apps — our iOS and Android apps do not use browser cookies in the same way a website does, but they store small amounts of data on your device (such as your login session and preferences) to make the app work.
• Pixels, tags and similar identifiers — small snippets used, where applicable, to understand how a page or message is used.

Because our apps and website perform similar functions, this policy describes both together and notes where the behaviour differs.

We keep our use of cookies deliberately minimal. In particular:

• We use a cookie (or equivalent local storage) to remember the language you choose — Uzbek, Russian or English — so you do not have to select it again on each visit.
• We store a small number of other preferences so the interface behaves the way you left it.
• We use strictly necessary cookies to keep you signed in, to route your requests securely, and to protect the service against fraud and abuse.
• Where analytics are enabled, we use them to understand, in aggregate, how the service is used so we can improve it.

We do not use cookies to build detailed advertising profiles of you, and there is no advertising pixel on dona.uz. Our mobile apps are now different. They run advertising measurement, which uses no cookies at all — it uses the operating system's own advertising identifier — and which shares a limited set of events with Meta so we can tell whether the advertising we pay for works. It has its own category below, it is refusable, and refusing it costs you nothing on Dona. This policy was updated before that started, as this paragraph previously promised it would be.

We group cookies by the purpose they serve. The categories below explain what each is for and why it is used.

Strictly necessary cookies

These are essential for the website and apps to function and cannot be switched off in our systems. They are usually set only in response to actions you take, such as signing in, verifying your phone number with a one-time code (OTP), placing an item in a cart, or moving through the checkout. They also support security, load-balancing and fraud prevention. One of them is a device and app-installation identifier — a random value stored in a first-party cookie and in your browser's local storage so that we can recognise the same installation when you sign in, and detect a single device being used to run a large number of accounts. It is not derived from your phone number, your account or any manufacturer hardware identifier, and it is not used to profile you or to track you across other websites; it is separate from the analytics identifier described below. It is, however, now also sent to Meta as part of advertising measurement in our mobile apps — a separate and refusable purpose, described under Advertising and measurement below and in the Privacy Policy. The identifier's own security role is not something you can switch off; that use of it is. See the Privacy Policy for how it is used in fraud prevention and how long it is kept. Because the service cannot work without them, we rely on our legitimate need to deliver the service you request rather than on consent for this category. If you block them, parts of the service will not work.

Preference cookies

These remember choices you make to give you a better, more personal experience — most importantly your chosen language (Uzbek, Russian or English), and other minimal interface settings. Losing these will not break the service, but you may have to set your preferences again.

Analytics and performance cookies

Where enabled, these help us understand how visitors interact with Dona — for example which pages and live streams are viewed, and where errors occur — so we can measure and improve performance. We aim to use this information in aggregate. These cookies are not strictly necessary, and where the law requires we will set them only with your consent.

Advertising and measurement

This is a separate category, and you can refuse it without losing access to any part of Dona.

Dona uses no advertising cookies on dona.uz and does not profile you across other websites. In our mobile apps we now run advertising measurement: the app includes Meta's SDK, reads your device's advertising identifier where you have allowed it, and — together with our servers — reports a limited set of events (install, sign-up, product view, add to cart, and a paid order with its value) to Meta, so we can tell whether the advertising we pay for actually works. No cookies are involved: it uses the operating system's own advertising identifier and the app's own storage.

Because this category is not needed to deliver the service, it is refusable: on iOS by choosing Ask App Not to Track, on Android through Settings → Google → Ads, and on both platforms through Settings → Ad measurement in the Dona app, which is its own switch and independent of Settings → Usage analytics. Turning it off takes effect straight away and does not restrict your account, your orders or any feature. One part is not covered by that switch yet: the record of a paid order that our servers send to Meta, which carries no advertising identifier and is described in the Privacy Policy under Advertising measurement. Where the law requires consent, we obtain it before this category starts.

What exactly is sent, in what form, and what Meta does with it, is set out in the Privacy Policy under Advertising measurement.

First-party cookies are set by Dona itself (the dona.uz domain and our apps). Most of the cookies and storage we use are first-party — for example your language preference and your signed-in session.

Third-party cookies are set by other organisations whose services we use to operate Dona. These may include:

• Payment providers — when you pay, you are handled by licensed third-party payment providers (Payme, Click, ATMOS, UzCard, Humo). These providers may set their own cookies to process the payment securely and prevent fraud. Full card details are handled by the licensed payment providers and are not stored by Dona.
• Cloudflare — we use Cloudflare and similar infrastructure providers to deliver content quickly and to protect the service against attacks; these may set cookies that are necessary for security and performance.
• Analytics — for measuring how the service is used we do not use a third-party analytics provider. Website analytics are first-party: measured by our own software on our own infrastructure, using a random identifier in your browser's local storage rather than a cookie, with no IP address stored and no cross-site tracking. We honour the browser "Do Not Track" signal. See the Privacy Policy for the full description. Advertising measurement in the apps is a separate matter — see the next entry.
• Meta (Facebook, Instagram) — in our mobile apps only, Meta's SDK and our own servers report advertising-measurement events to Meta Platforms, Inc. This is not a browser cookie and it does not run on dona.uz, but it is genuinely a third party receiving data about you, so it belongs on this list. See Advertising and measurement above and the Privacy Policy.

Third parties set and read their own cookies under their own privacy and cookie policies, over which we have limited control. We encourage you to review the notices of any payment provider you use.

The main preference we store is your chosen display language — Uzbek (state language), Russian or English. We keep this in a cookie or in your browser's local storage so that the interface loads in your language on your next visit.

We may also store other minimal preferences, such as small display or session settings, so the service behaves consistently. These items contain no more information than is needed for the feature to work, and we do not use them to identify you across unrelated services.

Our iOS and Android apps (application id im.dona.app) do not use browser cookies in the traditional sense. Instead, they use on-device storage provided by the operating system and app SDKs to perform equivalent tasks — for example, keeping you signed in, remembering your language and preferences, caching content so the app is fast, and supporting security.

Analytics storage in the app — our own first-party analytics keeps a random identifier in the app's storage on your device so we can count devices and sessions without identifying you. That identifier is not an advertising identifier, and it is never sent to Meta or to anyone else. What the app records, and how long it is kept, is set out in the Privacy Policy.

Advertising storage in the app — advertising measurement is separate and works differently. Where you have allowed it, Meta's SDK reads the operating system's own advertising identifier (Apple's IDFA on iOS, Google's advertising ID on Android) and keeps a small store of its own on your device. On iOS the identifier is read only if you answer Allow to Apple's tracking prompt; on Android you can delete it or opt out in Settings → Google → Ads. In the Dona app, Settings → Ad measurement turns the SDK off on both platforms, straight away.

You can manage this data through your device and operating-system settings — for example by clearing the app's data or cache, adjusting app permissions, or uninstalling the app. Note that clearing this data may sign you out and reset your preferences. To switch app analytics off specifically, use Settings → Usage analytics in the app: that stops collection and deletes the random identifier from your device. Advertising measurement has its own switch, Settings → Ad measurement; the two are independent of each other. What that switch does not yet reach is set out in the Privacy Policy.

For strictly necessary cookies, we rely on the need to deliver the service you have asked for, and these cannot be switched off within the service.

For non-essential cookies and similar technologies (such as analytics, and advertising measurement in the apps), where the applicable law requires consent, we will ask for it and will not start them until you agree. Where we present a cookie notice or settings control, you can accept or refuse categories and change your choice later.

You can also withdraw consent or change your mind at any time by adjusting your browser or device settings as described below. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

Most web browsers let you see what cookies are stored, delete them, and block some or all of them. You are always free to refuse cookies, though this may affect how the website works.

You will usually find these controls in your browser's settings or preferences menu, under a heading such as "Privacy", "Cookies" or "Site data". Typical options include:

• Viewing and deleting cookies already stored on your device.
• Blocking third-party cookies, or all cookies, either generally or for specific sites.
• Clearing local storage and cached data for a site.
• Turning on a "Do Not Track" or private-browsing mode.

Because each browser is different, please refer to the help pages for your particular browser (for example Chrome, Safari, Firefox, or Edge) for exact steps. For our mobile apps, use your device's settings as described in the section on apps above.

Cookies last for different periods depending on their purpose:

• Session cookies are temporary and are deleted when you close your browser or the app session ends. They are typically used for things like keeping you signed in during a single visit.
• Persistent cookies stay on your device for a set period, or until you delete them, so that the site can remember you and your preferences (such as language) on future visits.

We aim to keep the lifetime of each cookie no longer than is needed for its purpose. Third-party cookies expire according to the settings chosen by the third party that set them. You can delete cookies at any time using your browser or device controls.

You are free to block or delete cookies, but please be aware that some parts of Dona rely on them. If you block or remove certain cookies:

• You may not be able to sign in or stay signed in, and features such as the cart, checkout and live shopping may not work correctly.
• Your language and other preferences may not be remembered, so you may need to set them again on each visit.
• Some content may load more slowly or fail to load, and certain security protections may be affected.

Strictly necessary cookies in particular cannot be turned off without breaking core functionality.

Some cookies and similar technologies process information that may be linked to you and therefore constitute personal data. Where that is the case, our handling is governed by our Privacy Policy and by the Law of the Republic of Uzbekistan "On Personal Data".

As explained in the Privacy Policy, Dona runs on cloud infrastructure that may be located outside Uzbekistan (for example in the EU), with security safeguards in place; such use is treated as an international transfer of data with appropriate protections, and your rights over your data continue to apply. Payment providers process card data separately under their own licences and policies. Please read the Privacy Policy for the full picture, including your rights and how to exercise them.

We may update this Cookie Policy from time to time — for example if we add new features, change our providers, or if the law changes. When we make material changes, we will update the "effective from" date shown above and, where appropriate, notify you within the app or on the website. Your continued use of Dona after an update means you accept the revised policy, except where your consent is separately required for certain cookies. Please check this page from time to time.

Our corporate terms may state Singapore governing law, but the mandatory personal-data and consumer-protection provisions of the Republic of Uzbekistan apply to users in Uzbekistan and prevail over any conflicting term. Nothing in this policy limits those rights.

If you have concerns about how cookies or your personal data are handled, you may contact us first (see below), and you may also approach the competent authorities and courts of the Republic of Uzbekistan, including the authority responsible for personal-data protection and the consumer-protection body.

If you have any questions about this Cookie Policy or about how we use cookies and similar technologies, please contact us with a clear subject line:

• Email: hello@dona.uz
• Post: GreenApps Private Limited, 20 Collyer Quay #09-01, Singapore 049319

For related information, see our Privacy Policy and Terms & Conditions.