Cookie Policy

Last updated: 17 June 2026

Effective date: 17 June 2026

This Cookie Policy explains how StoreFlea ("we", "our", "us") uses cookies and similar technologies across our applications and websites — the Shopkeeper Dashboard, Storefront Websites, and the QR Dine-in / Smart Ordering app — collectively the "Service". It should be read with our Privacy Policy.

1. What are cookies?

Cookies are small text files stored on your device by your browser. We also use similar technologies such as local storage, session storage and tokens to keep you signed in and to make the Service work. In this Policy, all of these are referred to as "cookies".

2. Why we use cookies

• Keep you securely signed in and maintain your session.

• Remember your account/shop context and preferences.

• Keep the Service secure (fraud prevention, abuse detection, CSRF protection).

• Maintain QR dine-in / ordering sessions linked to a table and order.

• Understand usage and performance to improve the Service.

3. Categories of cookies we use

3.1 Strictly necessary (always on)

Required for the Service to function. These cannot be switched off.

• Authentication & session: login/session tokens, JWT, refresh/session identifiers.

• Security: CSRF tokens, abuse/fraud protection.

• Ordering session: QR dine-in table/session tokens.

• Load & routing: infrastructure/session routing.

3.2 Functional

Remember preferences and settings (e.g. selected shop, language, UI state) to improve your experience.

3.3 Analytics & performance

Help us understand how the Service is used so we can improve it (e.g. page/usage metrics). These are aggregated and used for product improvement.

StoreFlea's core platform relies primarily on strictly necessary cookies and tokens. Where non-essential cookies (functional/analytics) are used, we seek consent where required by law.

4. Third-party cookies

Some features rely on third parties that may set their own cookies, including:

• Payment gateway (Razorpay) — during subscription checkout.

• Infrastructure (AWS) — hosting and session routing (India region, Mumbai).

• Messaging/embedded content — where WhatsApp/Meta or similar widgets are used.

These third parties process data under their own privacy and cookie policies.

5. Consent & your choices

• Strictly necessary cookies are set automatically because the Service cannot function without them.

• For non-essential cookies (functional/analytics), where required under the DPDP Act and applicable law, we ask for your consent and you may decline or withdraw it.

• You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may break sign-in and core features.

6. Data location & retention

Cookie-related data processed on our servers is hosted on AWS, India region (Mumbai, ap-south-1). Session and authentication cookies last for the duration of your session or a defined validity period; persistent cookies remain until they expire or you delete them.

7. Changes to this Policy

We may update this Cookie Policy from time to time. The "Last updated" date reflects the latest version. Material changes will be notified in-

app or by email.

Contact: support@storeflea.com