DukaanRaabta

1. What we use

We use only cookies and browser storage that are strictly necessary to provide the service. We do not use advertising cookies, cross-site tracking or third-party behavioural analytics.

2. Session cookie

dr_session — an HttpOnly, Secure (on HTTPS), SameSite=Lax cookie that keeps an invited owner or administrator signed in for up to 24 hours. It is set only after you sign in and is deleted when you sign out or when it expires. The dashboard cannot work without it.

3. Sign-in and anti-spam storage

Firebase Authentication uses temporary browser storage during sign-in; we sign the browser out of Firebase immediately after creating the server session. Cloudflare Turnstile may set a strictly necessary token or read browser signals on the contact form to tell people from bots. The legacy demo pages may keep unsaved drafts in your browser's localStorage on your own device.

4. Public visitors

Customers who view a published store profile do not receive any cookie from us. Embedded links to WhatsApp, Google Maps, social networks or UPI apps only load those services when you tap them.

5. Your choices and changes

You can delete or block cookies in your browser settings; doing so will sign you out and you will not be able to use the dashboard. If we ever add optional analytics, we will update this policy and ask for your consent before setting them.

Operator & grievance contact