1. What this notice covers
“Cookies” is often used as shorthand for several browser technologies. Cubora uses secure cookies for login, session storage for short-lived workflow continuity, local storage for your privacy choice and Cache Storage for public PWA assets. Some of these are necessary to provide a service you request.
India does not currently have a separate cookie statute identical to the EU ePrivacy rules. If a cookie or identifier contains or links to personal data, the applicable Indian privacy notice, consent and security requirements apply. Consumer-law rules also prohibit manipulative consent interfaces.
2. Current storage inventory
| Name | Technology | Category | Purpose | Duration |
|---|---|---|---|---|
| cubora_customer_session | Secure, HttpOnly cookie | Essential | Keeps a verified customer signed in; JavaScript cannot read it. | Up to 30 days, subject to logout or server revocation |
| cubora_team_session | Secure, HttpOnly cookie | Essential / staff only | Authenticates authorised Cubora team members. | Up to 12 hours, subject to logout or server revocation |
| cubora_privacy_choices_v1 | Local storage | Essential preference record | Stores the optional categories you accepted or rejected and the policy version. | Until cleared, superseded or reset by a new policy version |
| cubora-project-brief | Session storage | Essential user-requested continuity | Temporarily preserves an assessment on the device when submission cannot reach Cubora. | Until the browser tab/session ends or the saved brief is cleared |
| cubora-site-assessment | Session storage | Essential user-requested continuity | Temporarily preserves a submitted project reference for the current browser session. | Until the browser tab/session ends |
| cubora_desk_csrf | Session storage | Essential / staff only | Helps protect authenticated staff actions against cross-site request forgery. | Until the staff browser session ends |
| cubora-v13 | Service worker Cache Storage | Essential performance/offline | Caches public application files and selected public pages for speed and limited offline use; private workspaces are excluded. | Until replaced by a newer cache or cleared in browser settings |
3. Optional technologies
Cubora currently deploys no web analytics, advertising pixel or behavioural marketing tracker. The consent layer nevertheless blocks any future non-essential script until its category has been allowed.
- Preferences: optional convenience or presentation choices.
- Analytics: tools that measure visits and product journeys.
- Marketing: advertising, retargeting or campaign-measurement technologies.
Allowing the “marketing” browser category does not subscribe you to promotional SMS, WhatsApp or email. Those channels require a separate opt-in.
4. Change or withdraw your choice
Rejecting optional storage does not block the public website, assessment or account-security features. You can reopen the panel below at any time. You can also delete site data in browser settings, although this may sign you out, remove a locally saved brief or clear offline files.
5. External services
When you follow a link to WhatsApp, Instagram, a map, government source or another website, that service may place its own cookies or collect device information. Cubora’s panel cannot control storage on another operator’s website or app; review the destination’s settings and notice.