Legal

Cookie Policy

Effective from 2026-04-01

What this policy covers

This policy explains how CampusPlugin 360 uses cookies and similar technologies (local storage, session storage, web beacons, pixel tags) on the platform. It applies to every CampusPlugin 360 surface accessible via a browser — the marketing site, student app PWA, employer dashboard, institution console, and admin tools.

For how we handle personal data more broadly, see our Privacy Policy. For accessibility, see our Accessibility Statement.

What are cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They allow the site to remember your actions and preferences (login state, language, dashboard layout) so you don’t have to re-enter them every time.

Cookies we set

Cookie	Purpose	Type	Duration
`cp.session`	Authentication session ID. HttpOnly + Secure + SameSite=Lax.	Strictly necessary	Session
`cp.csrf`	Cross-site request forgery token.	Strictly necessary	Session
`cp.lang`	Selected language (EN, HI, or one of 6 other Indian languages).	Functional	180 days
`cp.tenant`	Active tenant context for multi-tenant users.	Functional	30 days
`cp.analytics`	Anonymous usage analytics (page views, feature usage).	Analytics (consent required)	1 year
`cp.consent`	Records your cookie consent choices.	Strictly necessary	1 year

What we do NOT set

Third-party advertising or tracking cookies. CampusPlugin 360 does not run retargeting, behavioural advertising, or third-party advertising pixels.
Cross-site tracking.Cookies set on one institution’s tenant are scoped to that tenant and do not leak across tenants.
Social-media tracking pixels. We do not embed Facebook Pixel, Twitter pixel, LinkedIn Insight, etc. on authenticated pages.

Third-party services

Some authenticated workflows rely on third-party services. When these are loaded, they may set their own cookies under their own privacy policy:

Razorpay— for payment processing. Loaded only on payment-step pages.
Supabase Auth— for federated identity. Standard session cookie.
Bhashini— for translation. No cookies; API-only.

Managing your preferences

You can manage your cookie preferences in three ways:

Our cookie banner— on first visit, you’ll be asked to accept, reject, or customise. Your choice is stored in cp.consent.
Browser settings— every modern browser lets you block or delete cookies. Note: blocking strictly-necessary cookies will break authentication.
Your profile— signed-in users can update their cookie consent under Settings → Privacy.

Local storage and session storage

In addition to cookies, we use the browser’s local-storage and session-storage to cache view state (composed-view layouts, action-card dismissals, saved filters). These are not transmitted with HTTP requests and are bounded by a 7-day TTL.

Changes to this policy

We may update this policy when we add or remove cookies. Material changes will be flagged in our commit history with the cookies-policy label. The effective date at the top of this page is updated on every revision.

Contact

Questions about cookies or this policy? Write to dpo@campusplugin360.com.