Skip to main content

    Legal

    Cookie Policy

    A complete inventory of the cookies and similar technologies this site uses, why each one exists, and how to turn the optional ones off.

    Effective
    [YYYY-MM-DD the policies go live]
    Last updated
    [YYYY-MM-DD]
    Governing law
    India

    What cookies are

    Cookies are small text files a website stores on your device. Related technologies — local storage and session storage — do a similar job but are read only by your browser rather than sent back with every request. We use all three and have listed them together below, because the distinction rarely matters to the person deciding whether to allow them.

    Under section 6 of the Digital Personal Data Protection Act, 2023, consent must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action. In practice that means:

    • Nothing optional is pre-ticked. Analytics and marketing start switched off and stay off until you turn them on.
    • Dismissing the notice is not consent. There is no close button that quietly counts as acceptance, and continuing to scroll does not accept anything.
    • Rejecting is as easy as accepting. Both buttons are the same size, in the same place, with the same prominence.
    • You can choose per purpose. Accepting analytics does not opt you into marketing.
    • Withdrawal is as easy as consent. One switch in Your Privacy Choices, at any time. Turning analytics off also deletes the analytics cookies already on your device.
    • Declining costs you nothing. Every part of this site works identically whether you accept or refuse.

    We record your decision so we don’t have to keep asking. That record — the categories you chose, when, and a receipt reference — is itself stored in the strictly necessary category, because we are required to be able to demonstrate that consent was given.

    The full list

    Strictly necessary (always on)

    Required for the site to function — remembering your consent choices, keeping you signed in, and protecting forms from abuse. These cannot be switched off.

    NameSet byPurposeLastsType
    tnr:consentThe Nilgiri RootStores your cookie and consent preferences so we don't ask again12 monthsLocal storage
    tnr:intro-seenThe Nilgiri RootSuppresses the brand intro animation after the first page of a visitSessionSession storage
    sb-*-auth-tokenSupabaseKeeps you signed in on authenticated pagesSession / 7 daysLocal storage

    Analytics (optional)

    Help us understand which pages are useful and where people get stuck, so we can improve the site. Aggregated and pseudonymous — we don't use these to identify you.

    NameSet byPurposeLastsType
    _gaGoogle AnalyticsDistinguishes returning visitors24 monthsCookie
    _ga_<container>Google AnalyticsMaintains session state24 monthsCookie

    Marketing (optional)

    Would let us measure which campaigns bring buyers to the site and show relevant follow-ups. We do not currently set any marketing cookies — this control is here so that if we ever do, your existing choice is already on record.

    We do not currently set any cookies in this category.

    Third-party cookies

    Where a cookie is set by another company, that company also acts on your data under its own terms. The one we currently use is Google Analytics, and only where you have accepted analytics.

    We run Google Consent Mode, which means Google is told your choice before any measurement happens — not merely blocked after the fact. With analytics declined, no analytics identifiers are written at all.

    Analytics data may be processed outside India. See Storage and transfers in our Privacy Policy.

    Controlling cookies

    On this site

    Use Your Privacy Choices. Changes apply immediately, and switching a category off clears the cookies it had already set.

    In your browser

    Every major browser lets you block or delete cookies. Blocking strictly necessary cookies will stop us remembering your privacy choices — which means you’ll be asked again on every visit — but nothing else will break.

    Do Not Track and Global Privacy Control

    There is no settled standard for how sites should respond to Do Not Track, and we do not currently act on it. We are watching the Global Privacy Control signal and will honour it once its treatment under Indian law is clear. In the meantime our default is already the privacy-protective one: optional cookies are off until you switch them on.

    Changes to this policy

    If we add a cookie in a new category, or change what an existing one does, we will update this page and ask for your consent again before the new processing starts. Your previous choice is never silently extended to a new purpose.

    Questions about anything here go to contact@thenilgiriroot.com.

    🍟

    RootBot

    The Nilgiri Root Assistant

    Hi! I'm RootBot 🍟 — your guide to The Nilgiri Root. Ask me about our products, process, or how to partner with us!