Why doesn't the telegram bot send ?start=hash parameters. Sends only /start without hash?

Question

Bots

I write a bot on Laravel and https://github.com/irazasyed/telegram-bot-sdk
I make a connection from the main site via window.open

window.open('https://t.me/{{ config('telegram.bots.mybot.username') }}?start={{ $hash }}', 'telegram', 'left=0,top=0,height=500,width=600');

It works fine for me, everything is correct. And with my colleague, firstly, an empty window opens with a message that the page is not secure (although the main site is on https), after a minute a secure connection appears and the connection window with telegram opens.
Secondly, when he clicks "Run" in the window with the bot, the text "/start" comes to my server, without the hash.

What could be the problem?