This policy explains how Kapda Stock (a Codemites product) uses cookies and similar browser-storage technologies. Short version: we use a small number of functional cookies to run the service, plus Google Analytics to understand how our website is used and the Meta Pixel on our public pages to measure and retarget our own ads. Nothing is sold, and the business app itself carries no advertising tracker.
1. What cookies are
Cookies are small text files a website stores in your browser. Related technologies include localStorage (persistent browser storage) and service workers (which let the app work as an installable PWA). We use all three, only for the purposes below.
2. What we store and why
- Refresh token cookie — an HttpOnly, Secure, SameSite=Strict cookie that keeps you signed in safely. It cannot be read by JavaScript and is deleted when you log out. Lifetime: 7 days.
- Theme preference (localStorage: tp-theme) — remembers whether you chose light or dark mode on this site.
- Language preference — remembers your chosen interface language (English, Hindi, Urdu or Kashmiri).
- Session state — in-memory only; your access token is never written to cookies or localStorage.
- PWA cache — the service worker caches app assets so pages load fast and the app can be installed on your device.
- Analytics cookies (_ga and _ga_*) — set by Google Analytics to count visits and see which pages are used, so we can improve the website. They use a random identifier rather than your name or email. Lifetime: up to 2 years.
- Advertising cookie (_fbp) — set by the Meta Pixel on our public pages (home, pricing, blog, contact, signup) so we can measure our Facebook and Instagram ads and show them again to people who visited. It is not set inside the business app. Lifetime: 90 days.
3. What we do NOT use
- No advertising trackers inside the business app — your shop’s customers, invoices and stock are never sent to Meta or any ad network.
- No selling or sharing of browsing data with data brokers.
4. Third-party cookies
When you pay for a subscription, Razorpay’s checkout may set its own cookies for fraud prevention. If you sign in with Google, Google sets cookies per its own policy. These appear only when you use those features.
Google Analytics runs on every page of this website. Google processes the data under its own privacy policy. You can block it with your browser’s cookie settings or with Google’s Analytics opt-out browser add-on. The website keeps working normally either way.
The Meta Pixel runs on our public pages only. Meta processes the data under its own privacy policy. You can control the ads you see in your Meta ad preferences or block third-party cookies in your browser; the website keeps working either way.
5. Managing cookies
You can clear or block cookies in your browser settings. Note that blocking the refresh-token cookie will sign you out on every page reload, and clearing localStorage resets your theme and language choices. The marketing site works fully with all optional storage disabled.
6. Changes
If we ever add new categories of cookies, we will update this page and — where required by law — ask for your consent first.