Cookie Policy

1. What cookies are

A cookie is a small piece of text a website asks your browser to store and send back on the next request. It is how a site can tell that the person loading this page is the same person who signed in a moment ago, since the web itself has no memory.

2. The cookies we set

INDclipping sets only strictly necessary cookies. There are three, and all of them come from the authentication library that signs you in:

• Session token — proves you are signed in, so every page you open knows who you are. Without it you would have to enter your password on every click. It is HttpOnly (JavaScript cannot read it) and, in production, Secure (it only travels over HTTPS). It lasts until it expires or you sign out.
• CSRF token — a per-session value that lets us confirm a form submission came from our own site and not from a page somewhere else trying to act as you. It is a security measure, and it expires with the session.
• Callback URL — remembers the page you were trying to reach when we asked you to sign in, so we can send you there afterwards instead of dumping you on the homepage. Cleared as soon as it has been used.

Signing out removes the session. Clearing cookies in your browser removes all three.

3. What we do not set

• No advertising or retargeting cookies. We do not run ads and we do not sell audiences.
• No analytics or tag manager. There is no Google Analytics, no tag manager and no product-analytics script on this site today.
• No cross-site tracking and no social pixels — nothing that follows you to another website.
• No fingerprinting or device identification beyond the ordinary server logs our host keeps for security.

This is why you are not being asked to click through a consent banner: strictly necessary cookies do not need prior consent, and every cookie we set is one.

4. Cookies set by others

Some pages load content or services from third parties, and those parties may set cookies of their own under their own policies:

• Razorpay, on the checkout a brand uses to fund a campaign — for fraud prevention and to complete the payment.
• Google, if you choose to sign in with your Google account.

We do not control those cookies and cannot read them. Images are served from Cloudinary, which does not set cookies for image delivery.

5. Controlling cookies, and changes to this page

Every browser lets you view, block and delete cookies from its settings. Blocking the cookies described in clause 2 will stop you from being able to sign in — they are the mechanism, not an extra.

If we ever add analytics or any cookie that is not strictly necessary, we will update this page and ask for your consent before setting it. Until then, this page is the complete list.

Questions about any of this go to support@indclipping.com. What we do with the data itself is covered in the Privacy Policy.