This page explains which cookies and similar storage mechanisms INNOVESH uses and how you can control them.
1. What Are Cookies
Cookies are small text files stored in your browser. We also use localStorage and sessionStorage to keep you signed in and remember your preferences.
2. Strictly Necessary (cannot be disabled)
Auth token (JWT) — keeps you signed in. Refresh token — issues a new auth token when the current one expires. CSRF guard — prevents cross-site request forgery on state-changing API calls.
3. Functional
Theme preference (dark/light). Cookie banner consent state. Last-used role / dashboard tab. These improve your experience but the site works without them.
4. Analytics
We do not currently use third-party analytics or advertising trackers. If we add them in future, we will update this policy and re-prompt consent for users in jurisdictions that require it (EU, UK, India under DPDP Act 2023).
5. Third-Party Cookies
Razorpay sets cookies on its own checkout domain during payment. Google sets cookies during Google Sign-In if you use it. These are subject to those companies' own cookie policies.
6. How to Control Cookies
You can clear cookies and localStorage at any time from your browser settings. Note: clearing the auth token will sign you out. You can also decline non-essential cookies from the banner shown on your first visit.
7. Do Not Track
We honour the browser-level Global Privacy Control (GPC) signal where applicable: when GPC is enabled, we treat your visit as a request to opt out of any future analytics/advertising cookies.