Cookie Policy
This policy lists every cookie that Nabha sets, on which host, and why. It supplements the Privacy Policy, Section 10.
1. nabha.cloud (the website)
The website at nabha.cloud sets no cookies. It carries no analytics, advertising or tracking scripts, which is why it shows no cookie banner: there is nothing to consent to.
2. app.nabha.cloud (the Service)
The application sets only strictly necessary cookies. They are needed to keep you signed in and to render the app securely, so no consent is required for them and the Service cannot work without them.
| Cookie | Purpose | Lifetime | Flags |
|---|---|---|---|
refresh_token |
Keeps you signed in between visits | 7 days from sign-in, renewed on use | HttpOnly, Secure, SameSite=Lax |
nabha-identity |
Signed identity token the server reads to render your workspace | Same as refresh_token |
HttpOnly, Secure, SameSite=Lax |
nabha-theme |
Remembers your appearance settings (theme and accent) on this device | 1 year | Secure connection, SameSite=Lax |
Signing out clears the sign-in cookies. None of these cookies is used to track you across other websites.
3. Analytics and marketing cookies
We set none. There are no analytics, advertising, retargeting or social-media cookies on either host. If that ever changes, we will update this policy first and ask for your consent where the law requires it before any such cookie is set.
4. Third parties during checkout
When you open the billing page and start a paid plan, the checkout of our payment provider loads: Razorpay for customers in India, Paddle for customers elsewhere. Those providers may set their own cookies under their own policies while the checkout is open. They are listed, with locations, on the sub-processors page.
5. Your choices
You can block or delete cookies in your browser at any time. Blocking the strictly necessary cookies above will prevent you from signing in to app.nabha.cloud; deleting nabha-theme only resets your appearance settings.
6. Contact
Questions about cookies: founder@nabha.cloud. Your rights over personal data, and how to exercise them, are in Section 9 of the Privacy Policy.