Cookies Policy
Bilingual document. English version first; the Arabic version follows below. In case of any conflict or difference in interpretation, the Arabic version prevails.
Website: https://mehani.work Last updated: 28 October 2026
1. Introduction
1.1 This Cookies Policy explains how Mehani.work (the "Platform") uses cookies and similar technologies such as local storage. It forms part of the Platform's Terms of Use and should be read together with the Privacy Policy.
1.2 The Platform is owned and operated by an individual, Fadi Alghamdi, residing in Riyadh, Kingdom of Saudi Arabia (the "Operator", "we", "us"). The Platform is not operated by a registered company.
1.3 By using the Platform, you acknowledge the use of cookies and similar technologies as described in this Policy.
2. What Are Cookies?
Cookies are small text files that a website stores on your browser or device when you visit it. Similar technologies, such as local storage, work in a comparable way: they let the website remember information on your device so that it can function properly and remember your choices.
3. Summary
- We use only essential (strictly necessary) cookies. They are needed to sign you in, keep your account secure, manage your signed-in devices, and remember your language.
- We do not use advertising cookies, marketing or tracking cookies, or analytics tools.
- We do not sell cookie data or share it with third parties for advertising.
4. First-Party Cookies We Set
| Name | Purpose | Type | Duration |
|---|---|---|---|
sb-phpisdrzjdxucvriedzb-auth-token (and numbered parts such as .0 and .1 where the value is split) | Keeps you signed in. Stores your secure authentication session (session and refresh tokens) provided by our authentication provider, Supabase. | Essential | About 400 days if you choose "Remember me"; otherwise until you close your browser |
sb-*-auth-token-code-verifier | A short-lived security value used during sign-in and password-reset flows to protect them against interception. | Essential | Short; lasts only for the duration of the sign-in flow |
mehani_remember | Remembers whether you chose "Remember me", so that we can set the correct lifetime for your sign-in. | Essential | About 400 days if "Remember me" is on; otherwise until you close your browser |
mehani_device | An anonymous device identifier that lets you see and manage the devices and sessions signed in to your account. | Essential | About 400 days |
NEXT_LOCALE | Remembers your language preference (Arabic or English). | Essential (preference) | Persistent; set by our language framework (next-intl), up to about one year |
Notes:
- Authentication cookies are refreshed automatically as you navigate the Platform.
mehani_rememberandmehani_deviceare set with security flags (HttpOnly and Secure) so that they cannot be read by scripts on the page and are sent only over encrypted connections.- "About 400 days" is the maximum lifetime that modern browsers allow for a cookie.
5. Local Storage and Similar Technologies
The Platform also stores a small amount of information in your browser's local storage. This is not a cookie, stays on your device, and is not used to track you.
| Key | Purpose | Duration |
|---|---|---|
mehani_cookie_consent | Records that you have dismissed ("Got it") the cookie notice, so that we do not show it again. | Until you clear your browser data |
mehani:recent-searches | Saves your recent search queries on your device to make searching faster. It is not sent to us. | Until you clear your browser data or the list is cleared |
6. Third-Party Services
We do not use third-party analytics, advertising, or social media tracking tools. The following providers are involved in operating the Platform:
6.1 Cloudflare Turnstile (bot protection). To protect the Platform from automated abuse, we use Cloudflare Turnstile on the sign-in, sign-up, password reset, contact, company request, and write-review forms. When you use these forms, a script is loaded from challenges.cloudflare.com, and a one-time verification token is generated and checked by our server with Cloudflare. Cloudflare may process technical information such as your IP address and browser characteristics to tell humans from bots, under its own privacy policy. According to Cloudflare, the widget is not designed as a tracking product.
6.2 Cloudflare (hosting, network, and security). The Platform is delivered through Cloudflare's network. Depending on our security settings, Cloudflare may set security or performance cookies (for example, cf_clearance) on our domain to protect the Platform against attacks and abuse. These are used for security purposes only, not for advertising.
6.3 Supabase (authentication and database). Supabase provides our authentication and data services. Your sign-in session is stored in the first-party cookies listed in Section 4. Supabase is not used on the Platform as an analytics tool.
These providers process data under their own terms and privacy policies, which we do not control. See also our Privacy Policy for details on how data is shared with service providers and transferred outside the Kingdom.
7. Cookies and Tools We Do Not Use
The Platform does not currently use: Google Analytics or Google Tag Manager; Meta (Facebook) or other advertising pixels; session-recording or behavior-analytics tools; or any marketing or "statistics" cookie categories.
If we decide to add any non-essential cookie or tracking tool in the future, we will update this Policy first and obtain your consent where the law requires it.
8. Legal Basis and Cookie Notice
8.1 All cookies listed above are strictly necessary to provide the service you request (signing in, security, device management, and language). They are used on that basis and do not require your separate consent under the Saudi Personal Data Protection Law and its Implementing Regulations.
8.2 The cookie notice on the Platform is informational. When you select "Got it", we store only the mehani_cookie_consent entry in your browser's local storage to remember that you saw the notice. Essential cookies operate whether or not you select it.
8.3 Where a cookie or similar technology involves personal data (for example, your sign-in session or device identifier), that data is handled as described in our Privacy Policy.
9. Retention
Cookie lifetimes are shown in Sections 4 and 5. Sign-in cookies last only until you close your browser unless you choose "Remember me". Device and "Remember me" cookies last up to about 400 days. Signing out ends your session and removes the authentication cookies. Turnstile verification tokens are one-time and short-lived.
10. How to Control and Delete Cookies
10.1 Sign out: signing out ends your session and clears your sign-in cookies.
10.2 Manage devices: you can review the devices and sessions signed in to your account and revoke them in your account settings.
10.3 Browser settings: you can view, block, or delete cookies and clear local storage through your browser's settings. Please refer to your browser's help section for instructions.
10.4 Please note that if you block or delete essential cookies, parts of the Platform will not work properly. For example, you may not be able to sign in, stay signed in, use the contact or review forms, or keep your language preference.
11. Changes to This Policy
We may update this Policy from time to time. The updated version will be published on the Platform with a new "Last updated" date. Continued use of the Platform after publication means you accept the updated Policy.
12. Governing Law
This Policy is governed by the laws of the Kingdom of Saudi Arabia. Any dispute is subject to the competent courts in Riyadh, as set out in the Terms of Use.
13. Language
This Policy is available in Arabic and English. If there is any conflict or difference in interpretation, the Arabic version prevails.
14. Contact Us
For any question about this Policy, please use the contact form:
- English: https://mehani.work/en/contact
- العربية: https://mehani.work/ar/contact