Cookie Policy
Version 1.2Effective date: [Effective date]
1. What we use
1.1. We use only cookies and browser storage that are strictly necessary to provide the Service you ask for: to keep you signed in, to protect sign-in and your account, to finish an action you started, and to remember choices you make yourself (language and theme). We do not use analytics cookies, advertising cookies or tracking pixels, and we do not use cookies or storage to build a profile of you or to track you across other websites.
1.2. "Cookies" are small text files stored by your browser. "Local storage" and "session storage" are similar browser features that keep data on your device.
1.3. All cookies and storage listed below are first-party: they belong to our own websites, Mini Apps, API and browser extension. Because we use only strictly necessary cookies and storage, we do not show a cookie consent banner.
Note for the lawyer: the absence of a banner relies on the "strictly necessary" exemption from consent (for example, Article 5(3) of the EU ePrivacy Directive 2002/58/EC and the national laws implementing it; Article 29 Working Party Opinion 04/2012 on Cookie Consent Exemption treats authentication, user-centric security and user-interface customisation cookies set at the user's request as exempt). Confirm this for each target market, in particular for the one-year language and theme cookies, and the device identifier.
2. Cookies on the websites (oddsnipe.com, memegun.trade)
| Name | Set by | Purpose | Type | Expires |
|---|---|---|---|---|
| mg_rt | API of the website (api.oddsnipe.com or api.memegun.trade) | Keeps you signed in (refresh token). Set only when you sign in. HttpOnly, Secure, SameSite=Strict, only for the /auth path | Strictly necessary (sign-in) | 30 days |
| mg_lang | Website | Remembers the language you chose (the EN/RU switch or a link with ?lang=). Not set until you choose. SameSite=Lax | Strictly necessary (your interface choice) | 1 year |
| mg_theme | Website | Remembers the theme you chose (dark or light). Not set until you choose. SameSite=Lax | Strictly necessary (your interface choice) | 1 year |
3. Browser storage
| Name | Where | Purpose | Type | Kept until |
|---|---|---|---|---|
| mg_dev | Local storage (websites and Mini App) | Random device identifier, created when you sign in and sent with your sign-in to detect account takeover and abuse such as multiple accounts. Our servers store only its salted hash | Strictly necessary (security) | You clear site data |
| mg_tg_state | Session storage (websites) | Protects the Telegram login against forged requests | Strictly necessary (sign-in) | You close the tab |
| mg_slot_pending | Session storage (memegun.trade) | Remembers the token address you entered before signing in, so the check continues after sign-in | Strictly necessary (your request) | The check runs or you close the tab |
| mg_tma_lang | Local storage (Mini App) | Remembers the language you chose in the Mini App | Strictly necessary (your interface choice) | You clear site data |
| ton-connect-storage_bridge-connection, ton-connect-storage_http-bridge-gateway, ton-connect-ui_wallet-info, ton-connect-ui_last-selected-wallet-info, ton-connect-ui_preferred-wallet | Local storage (Mini App) | Keep the TON wallet you connected (set by the TON Connect library when you connect a wallet) | Strictly necessary (wallet connection) | You disconnect the wallet or clear site data |
| Keys starting with __telegram__ | Session storage (Mini App) | Launch parameters and theme of the Mini App (set by the Telegram Mini App script) | Strictly necessary (Mini App) | You close the Mini App |
4. Browser extension
The extension does not set cookies on websites. It keeps your session tokens under the key "t" in the browser's session storage (cleared when the browser closes) and your language choice under the key "lang" in its local storage. Both are strictly necessary.
5. Admin panel (staff only)
| Name | Purpose | Type | Expires |
|---|---|---|---|
| mg_art | Admin session (refresh token), HttpOnly, Secure, SameSite=Strict, only for the /auth/admin path | Strictly necessary (sign-in) | 1 hour |
| mg_adev | Binds the admin session to a device, HttpOnly, Secure, SameSite=Strict, only for the /auth/admin path | Strictly necessary (security) | 180 days |
| mg_admin_theme | Remembers the admin panel theme you chose. SameSite=Strict | Strictly necessary (your interface choice) | 1 year |
6. Third parties
6.1. The Telegram login widget and the Telegram Mini App script are loaded from Telegram. Telegram may set its own cookies on its own domains under Telegram's privacy policy; we do not control them.
6.2. Our network provider Cloudflare may set strictly necessary security cookies when the corresponding protection is switched on for a site: __cf_bm (bot protection; expires after 30 minutes of inactivity), cf_clearance (proof that a browser check was passed) and _cfuvid (request rate limiting). They are not used for advertising or analytics.
6.3. In the Mini App, the TON Connect library (developed by the TON Connect project, ton.org) is used only to connect your TON wallet. Its telemetry is switched off: the library does not send usage or error events, including your wallet address, to analytics.ton.org or anywhere else, and the Mini App's security policy (Content Security Policy) does not allow connections to that address. The library connects only to the list of wallets (config.ton.org) and to the bridge of the wallet you choose, which is needed to deliver the connection request to your wallet.
7. Your choices
You can block or delete cookies and site data in your browser settings. If you block strictly necessary cookies or storage, you will not be able to stay signed in, and some features will not work.
8. Changes and contact
We publish each new version of this Policy on the websites with a new version number and date. Questions: [email protected]. See also the Privacy Policy.