Legal
Cookie Policy
A complete inventory of the cookies and similar technologies this site uses, why each one exists, and how to turn the optional ones off.
- Effective
- [YYYY-MM-DD the policies go live]
- Last updated
- [YYYY-MM-DD]
- Governing law
- India
What cookies are
Cookies are small text files a website stores on your device. Related technologies — local storage and session storage — do a similar job but are read only by your browser rather than sent back with every request. We use all three and have listed them together below, because the distinction rarely matters to the person deciding whether to allow them.
How we ask for your consent
Under section 6 of the Digital Personal Data Protection Act, 2023, consent must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action. In practice that means:
- Nothing optional is pre-ticked. Analytics and marketing start switched off and stay off until you turn them on.
- Dismissing the notice is not consent. There is no close button that quietly counts as acceptance, and continuing to scroll does not accept anything.
- Rejecting is as easy as accepting. Both buttons are the same size, in the same place, with the same prominence.
- You can choose per purpose. Accepting analytics does not opt you into marketing.
- Withdrawal is as easy as consent. One switch in Your Privacy Choices, at any time. Turning analytics off also deletes the analytics cookies already on your device.
- Declining costs you nothing. Every part of this site works identically whether you accept or refuse.
We record your decision so we don’t have to keep asking. That record — the categories you chose, when, and a receipt reference — is itself stored in the strictly necessary category, because we are required to be able to demonstrate that consent was given.
The full list
Strictly necessary (always on)
Required for the site to function — remembering your consent choices, keeping you signed in, and protecting forms from abuse. These cannot be switched off.
| Name | Set by | Purpose | Lasts | Type |
|---|---|---|---|---|
| tnr:consent | The Nilgiri Root | Stores your cookie and consent preferences so we don't ask again | 12 months | Local storage |
| tnr:intro-seen | The Nilgiri Root | Suppresses the brand intro animation after the first page of a visit | Session | Session storage |
| sb-*-auth-token | Supabase | Keeps you signed in on authenticated pages | Session / 7 days | Local storage |
Analytics (optional)
Help us understand which pages are useful and where people get stuck, so we can improve the site. Aggregated and pseudonymous — we don't use these to identify you.
| Name | Set by | Purpose | Lasts | Type |
|---|---|---|---|---|
| _ga | Google Analytics | Distinguishes returning visitors | 24 months | Cookie |
| _ga_<container> | Google Analytics | Maintains session state | 24 months | Cookie |
Marketing (optional)
Would let us measure which campaigns bring buyers to the site and show relevant follow-ups. We do not currently set any marketing cookies — this control is here so that if we ever do, your existing choice is already on record.
We do not currently set any cookies in this category.
Third-party cookies
Where a cookie is set by another company, that company also acts on your data under its own terms. The one we currently use is Google Analytics, and only where you have accepted analytics.
We run Google Consent Mode, which means Google is told your choice before any measurement happens — not merely blocked after the fact. With analytics declined, no analytics identifiers are written at all.
Analytics data may be processed outside India. See Storage and transfers in our Privacy Policy.
Controlling cookies
On this site
Use Your Privacy Choices. Changes apply immediately, and switching a category off clears the cookies it had already set.
In your browser
Every major browser lets you block or delete cookies. Blocking strictly necessary cookies will stop us remembering your privacy choices — which means you’ll be asked again on every visit — but nothing else will break.
Do Not Track and Global Privacy Control
There is no settled standard for how sites should respond to Do Not Track, and we do not currently act on it. We are watching the Global Privacy Control signal and will honour it once its treatment under Indian law is clear. In the meantime our default is already the privacy-protective one: optional cookies are off until you switch them on.
Changes to this policy
If we add a cookie in a new category, or change what an existing one does, we will update this page and ask for your consent again before the new processing starts. Your previous choice is never silently extended to a new purpose.
Questions about anything here go to contact@thenilgiriroot.com.