Cookie policy

What are cookies

Cookies are small text files a site stores on your device. They let it remember who you are between page loads - without them you would be signed out every time you clicked a link.

The cookies we set

Celebit keeps this deliberately short. We set two cookies, and both exist purely to keep you signed in:

| Cookie | Purpose | Lifetime | | --- | --- | --- | | access_token | Identifies you on each request once you are signed in | 15 minutes | | refresh_token | Quietly issues a new access token, so a short-lived session does not sign you out every 15 minutes | 30 days |

Why two? The access token is deliberately short-lived, so a copied token is of little use for long. The refresh token does nothing on its own except mint a new access token, which is why it can safely last longer.

How they are protected

• httpOnly - JavaScript running on the page cannot read them, which blunts cross-site scripting attacks
• Secure - sent only over an encrypted HTTPS connection
• Scoped to celebit.in and its subdomains, so one sign-in covers the main site and, for staff, the admin console
• Cleared when you sign out, and when the refresh token expires

No tracking. We set no advertising, profiling, or cross-site tracking cookies. Nothing we set follows you to other websites, and we do not sell data about your browsing.

Similar technologies

Your browser's local storage holds small conveniences such as your last chosen city and recent search filters. These stay on your device and are not transmitted to us as cookies. Clearing your browser data removes them.

Third-party cookies

Some services we rely on may set their own cookies:

• Razorpay, during checkout, to run the payment securely and guard against fraud
• Cloudflare, which hosts and protects the site, for security and network routing

We do not control these, and their own policies govern them. We do not embed advertising networks, social media pixels, or third-party analytics trackers.

Do we ask for consent

The only cookies we set are strictly necessary to sign you in, which is why you are not shown a cookie banner. If we ever add cookies that are not strictly necessary - analytics or marketing, say - we will ask for your consent first and update this page.

Managing cookies

Every major browser lets you view, block, and delete cookies from its settings, and most offer a private-browsing mode that clears them when you close the window.

Because our only cookies are the ones that sign you in, blocking them means you will not be able to log in, book a vendor, or use anything that needs an account. Browsing vendors, categories, and blog posts will still work.

Questions

Write to support@celebit.in about anything on this page. How we handle the data behind these cookies is covered in our privacy policy.

Changes

If we start using cookies for anything beyond signing you in, we will update this page before doing so and set out exactly what changed.