Cookies

Effective Date: August 28, 2026
Document Version: 1.0

Section 1. General Provisions

1.1. Document Purpose

This Cookie Policy (hereinafter referred to as the "Policy") explains the procedure for using cookies and similar tracking technologies on the official ValQayum project website available at the address specified in the project's official communication channels (hereinafter referred to as the "Website").

This Policy is an integral part of the ValQayum project Privacy Policy and should be considered together with it.

1.2. What Are Cookies

Cookies are small text files placed on user's device (computer, smartphone, tablet) when visiting a website. Cookies allow the website to recognize user's device on subsequent visits and save certain settings or information about user's session.

Cookies can be:

• Session cookies: automatically deleted after browser is closed.

• Persistent cookies: saved on user's device for specified period or until manual deletion by user.

1.3. Legal Basis for Cookie Usage

Cookie usage on the Website is carried out in accordance with:

• General Data Protection Regulation of the European Union (GDPR), Regulation (EU) 2016/679;

• Privacy and Electronic Communications Directive (ePrivacy Directive), Directive 2002/58/EC as amended by Directive 2009/136/EC;

• Law of the Republic of Kazakhstan "On Personal Data and Their Protection" dated May 21, 2013 No. 94-V;

• Federal Law of the Russian Federation "On Personal Data" dated July 27, 2006 No. 152-FZ.

By using the Website, user agrees to this Cookie Policy.

1.4. Why ValQayum Website Has No Cookie Banner

The official ValQayum project website does not use advertising, analytical or marketing cookies requiring explicit user consent in accordance with EU legislation (GDPR and ePrivacy Directive).

The Website uses only strictly necessary technical cookies that ensure basic website functionality and security mechanisms operation. In accordance with Art. 5(3) of Directive 2002/58/EC (as amended by Directive 2009/136/EC) and Recital 66 GDPR, strictly necessary cookies do not require prior user consent if their sole purpose is:

• ensuring message transmission over electronic communications network;

• providing service explicitly requested by user.

Since the Website does not use cookies requiring user consent, cookie banner (cookie notice) is not displayed when visiting the Website.

Section 2. Strictly Necessary Cookies

2.1. Definition of Strictly Necessary Cookies

Strictly necessary cookies are cookies that are absolutely necessary for Website functioning and providing services requested by user. Without these cookies the Website cannot work correctly.

In accordance with European data protection legislation, strictly necessary cookies do not require prior user consent as they ensure basic website security and accessibility functions.

2.2. Administrator Authentication Cookie

The Website uses one session cookie for administrator authentication (tournament organizers) when accessing administrative panel for tournament management, application moderation and content management.

Authentication Cookie Parameters:

• Cookie name: auth-token (or similar technical name used by Next.js / Supabase framework)

• Purpose: storing session token for administrator authentication when accessing protected Website sections

• Type: session cookie

• Validity period: 12 hours from last administrator activity or until logout

• Domain: official ValQayum project Website domain

• Security: cookie is set with Secure flags (transmission only via HTTPS), HttpOnly (not accessible to client-side JavaScript), SameSite=Lax or SameSite=Strict (CSRF attack protection)

Legal Justification: This cookie is strictly necessary to ensure Website administrative panel functionality. Without this cookie administrators cannot log into system and manage tournaments. Use of this cookie does not require user (Website visitor) consent as cookie is set only for administrators who explicitly requested authentication.

2.3. Absence of Other First-party Cookies

Except for administrator authentication cookie described in clause 2.2, the Website does not set any other first-party cookies.

In particular, the Website does not use:

• cookies for tracking user preferences (language cookie, theme cookie, etc.);

• cookies for storing cart content or user session (as tournament registration does not require saving intermediate state between pages);

• cookies for analytics or visit statistics.

Section 3. Protection Systems (Cloudflare Turnstile) and CDN Caching (Vercel/Cloudflare)

3.1. Cloudflare Turnstile (Bot Protection)

To protect registration forms on the Website from automatic spam applications and bot attacks, Cloudflare Turnstile service is used — a modern CAPTCHA alternative that verifies request authenticity without requiring user to solve puzzles.

Cloudflare Turnstile Operating Principle: Cloudflare Turnstile analyzes user behavior when interacting with page (mouse movements, key presses, time on page, etc.) and determines whether user is human or bot based on machine learning algorithms.

Processed Data:

• user IP address;

• User-Agent (browser and operating system information);

• browser technical parameters (screen resolution, time zone, language settings);

• behavioral data (cursor movements, clicks, page scrolling).

Cookies Set by Cloudflare Turnstile: Cloudflare may set its own cookies to perform request authenticity verification. These cookies are temporary and used exclusively for security purposes.

Legal Justification: Use of Cloudflare Turnstile is based on Controllers' legitimate interests (Art. 6(1)(f) GDPR) to ensure Website security, protect against fraud and abuse, prevent spam registrations. User interests or fundamental rights and freedoms do not override these legitimate interests as data processing is minimal and does not create significant risks for users.

Cloudflare Privacy Policy: Detailed information about Cloudflare data processing procedure is available at: https://www.cloudflare.com/privacypolicy/

3.2. CDN Caching (Vercel Edge Network and Cloudflare CDN)

To accelerate Website loading and ensure its availability to users from various geographic regions, content delivery networks (CDN) are used:

• Vercel Edge Network (for Website hosting);

• Cloudflare CDN (for static resource caching and DDoS attack protection).

CDN Operating Principle: CDN caches Website static resources (HTML pages, images, CSS, JavaScript) on servers located at various points worldwide. When visiting the Website, user receives content from nearest CDN server, ensuring fast page loading.

Processed Data:

• user IP address (to determine geographic location and select nearest server);

• User-Agent;

• requested URLs;

• request time and date.

Cookies Set by CDN: Vercel and Cloudflare may set technical cookies for caching management and request routing. These cookies are not used to track user behavior for marketing or advertising purposes.

Legal Justification: CDN usage is based on Controllers' legitimate interests (Art. 6(1)(f) GDPR) to ensure high performance, availability and Website security.

Privacy Policies:

• Vercel: https://vercel.com/legal/privacy-policy

• Cloudflare: https://www.cloudflare.com/privacypolicy/

3.3. Absence of Third-party Trackers and Analytical Systems

ValQayum project Website does not use following categories of third-party services and trackers:

• Web analytics systems (Google Analytics, Yandex.Metrica, Adobe Analytics, etc.);

• Advertising networks and platforms (Google Ads, Facebook Pixel, advertising banners);

• Remarketing and retargeting systems;

• Social plugins ("Share" buttons from Facebook, Twitter, VK, etc., setting cookies);

• Conversion tracking systems;

• Third-party chats and messengers (Intercom, Tawk.to, etc.).

Thus, the Website does not place third-party cookies that could track user behavior for purposes not related to Website functioning.

Section 4. Instructions for Cookie Management and Browser Cache Clearing

4.1. User Right to Cookie Management

User has right to control cookie usage on their device and delete saved cookies at any time.

Since the Website uses only strictly necessary technical cookies and third-party security service cookies (Cloudflare Turnstile), blocking all cookies may lead to Website functionality disruption. In particular:

• administrators will not be able to log into system;

• registration forms may not work correctly due to inability to verify Cloudflare Turnstile.

Nevertheless, user has right to block or delete cookies if it corresponds to their preferences.

4.2. Cookie Management in Browser Settings

Most modern browsers allow user to manage cookies through browser settings. Below are instructions for most common browsers:

Google Chrome:

1. 01

   Open browser menu (three dots in upper right corner).

2. 02

   Select "Settings" → "Privacy and security" → "Cookies and other site data".

3. 03

   Select desired cookie blocking level or manage exceptions for specific sites.

4. 04

   To delete all cookies select "Clear browsing data" and check "Cookies and other site data".

Mozilla Firefox:

1. 01

   Open browser menu (three horizontal lines in upper right corner).

2. 02

   Select "Settings" → "Privacy & Security" → "Cookies and Site Data".

3. 03

   Configure cookie blocking parameters or click "Clear Data" to clear saved cookies.

Safari (macOS):

1. 01

   Open Safari menu → "Preferences" → "Privacy".

2. 02

   Configure cookie blocking parameters ("Block all cookies" or selective blocking).

3. 03

   To delete cookies select "Manage Website Data" → "Remove All".

Microsoft Edge:

1. 01

   Open browser menu (three dots in upper right corner).

2. 02

   Select "Settings" → "Cookies and site permissions" → "Cookies and site data".

3. 03

   Configure blocking parameters or delete saved cookies through "Manage and delete cookies and site data".

Opera:

1. 01

   Open browser menu → "Settings" → "Advanced" → "Security".

2. 02

   In "Cookies" section configure blocking parameters.

3. 03

   To delete cookies select "Clear browsing data" and check "Cookies and other site data".

Mobile Browsers (iOS / Android): Cookie management settings in mobile browsers are usually found in "Settings" → "Privacy" or "Security" section. For detailed information refer to your mobile browser help.

4.3. Third-party Cookie Blocking

For additional privacy protection, users can block third-party cookies in browser settings. This will prevent cookie setting by third-party services (for example, Cloudflare) but will not affect first-party cookies set by the Website itself.

Third-party cookie blocking option is usually found in browser privacy settings and called:

• "Block third-party cookies";

• "Allow only cookies from sites you visit".

4.4. Browser Cache Clearing

Besides deleting cookies, users are recommended to periodically clear browser cache — temporary files saved by browser to accelerate webpage loading.

Cache Clearing Instructions (for most browsers):

1. 01

   Open browser menu → "Settings" → "Privacy and security".

2. 02

   Select "Clear browsing data" or "Clear history".

3. 03

   Check "Cached images and files" item (not to be confused with "Cookies").

4. 04

   Select time range (for example, "All time") and click "Clear data".

Cache clearing does not affect saved passwords and login data but may require reloading website resources on next visit.

4.5. Using Incognito Mode (Private Browsing)

For temporary Website visit without saving cookies and browsing history, users can use incognito mode (private browsing):

• Google Chrome: Ctrl+Shift+N (Windows/Linux) or Cmd+Shift+N (macOS)

• Mozilla Firefox: Ctrl+Shift+P (Windows/Linux) or Cmd+Shift+P (macOS)

• Safari: Cmd+Shift+N (macOS)

• Microsoft Edge: Ctrl+Shift+N (Windows/Linux)

In incognito mode browser does not save cookies, browsing history and form data after window closes.

Note: incognito mode does not make you anonymous on Internet. Your internet provider, network administrators and visited websites can still see your IP address and track your activity.

4.6. JavaScript Disabling (Advanced Measure)

Some cookies are set using JavaScript. Users wishing to completely prevent cookie setting can disable JavaScript in browser settings. However this will significantly limit functionality of most modern websites, including ValQayum project Website.

Controllers do not recommend disabling JavaScript without extreme necessity.

4.7. Using Browser Extensions for Cookie Management

Users can install browser extensions providing advanced cookie and tracker management capabilities:

• uBlock Origin (ad and tracker blocker);

• Privacy Badger (automatic tracker blocking);

• Cookie AutoDelete (automatic cookie deletion on tab close);

• Ghostery (tracker blocking and privacy management).

Using these extensions is user's personal choice. Controllers are not responsible for Website compatibility with browser extensions.

Section 5. Policy Amendment and Final Provisions

5.1. Controllers' Right to Amend Policy

Controllers reserve right to unilaterally amend and supplement this Cookie Policy at any time.

Amendments enter into force from moment of publishing new Policy version on official ValQayum project website, unless otherwise specified in amendment text.

Material Policy changes (implementing new cookie categories, using analytical systems, etc.) will be brought to users' attention by publishing notification on Website at least 7 calendar days before amendments enter into force.

5.2. User Obligation to Monitor Changes

User is obliged to independently monitor changes to this Cookie Policy by regularly checking current version on official ValQayum project website.

Continued Website use after publishing Policy amendments means user agreement with new Policy version.

5.3. Contact Information

All questions related to cookie usage on Website may be submitted to Controllers:

• Official Email Address: (published on ValQayum project website)

• ValQayum Project Discord Server

• ValQayum Project Telegram Channel

Controllers undertake to review all user appeals within reasonable time and provide clarifications on cookie usage matters.

5.4. Connection with Privacy Policy

This Cookie Policy is an integral part of ValQayum Project Privacy Policy and should be considered together with it.

Issues of processing personal data collected using cookies (IP addresses, User-Agent, etc.) are governed by Privacy Policy.

All data subject rights provided by Privacy Policy (right of access, rectification, data erasure, right to lodge complaint with supervisory authority) apply to data collected using cookies.

5.5. Applicable Law

This Cookie Policy and all relations related to cookie usage on Website are governed by legislation of Republic of Kazakhstan, as well as applicable norms of European Union legislation (GDPR, ePrivacy Directive) in part concerning users located in EU territory.

5.6. Final Provisions

By using official ValQayum project website, user confirms that:

• familiarized with this Cookie Policy in full;

• understands which cookies are used on Website, for what purposes and on what legal grounds;

• is aware of their right to cookie management and knows how to exercise this right;

• agrees to use of strictly necessary technical cookies and third-party security service cookies (Cloudflare Turnstile) in accordance with this Policy.

ValQayum Project Organizers:
Ken, AVS

Publication Date: August 28, 2026
Document Version: 1.0

*This Cookie Policy is compiled in accordance with General Data Protection Regulation of European Union (GDPR, Regulation (EU) 2016/679), Privacy and Electronic Communications Directive (Directive 2002/58/EC as amended 2009/136/EC), Law of Republic of Kazakhstan "On Personal Data and Their Protection" dated May 21, 2013 No. 94-V.*

*ValQayum project Website uses only strictly necessary technical cookies and does not place advertising, analytical or marketing cookies requiring user consent.*