Cookie & Tracking Technology Policy

Cookies are small text files placed on your computer, tablet, or mobile device by websites that you visit. They are widely used to make websites work properly, improve user navigation speed, enforce authentication security, and provide reporting information to site owners.

In addition to cookies, Cravme uses browser LocalStorage, SessionStorage, and secure HTTP-Only cookies to store session states, active outlet preferences, and merchant authorization tokens for POS and administrative functions.

We classify the cookies and tracking tokens used across Cravme Services into four distinct functional categories:

2.1 Essential & Strictly Necessary Cookies

These cookies are mandatory for the operation of Cravme Services. Without them, core functions such as account authentication, merchant login verification, cart persistence, POS station binding, and order checkout processing cannot operate.

• Session Tokens: Enforces encrypted user login states.
• Security & CSRF Protection: Prevents cross-site request forgery attacks on order checkout and admin actions.
• Outlet Context: Retains your active restaurant branch context during multi-outlet management sessions.

2.2 Functional & Preference Cookies

These cookies enable enhanced personalization and remember your individual configuration choices:

• Theme & Layout Settings: Stores dark/light mode preference across sessions.
• Language & Region: Remembers your preferred locale (`en-IN`) and currency display settings.
• Printer & Hardware Configurations: Keeps track of localized terminal hardware bindings.

2.3 Performance & Analytics Cookies

Analytics cookies gather aggregated, anonymous information about how visitors navigate our web platforms and apps. This data allows us to optimize page load speeds, refine user interface workflows, and resolve operational bugs.

• Platform Telemetry: Tracks general page visits, navigation paths, and error stack trace logs.
• Performance Diagnostics: Measures API request latencies and checkout conversion efficiency.

2.4 Operational & Notification Cookies

Used to maintain live web-socket connections for real-time Kitchen Display (KDS) order notifications, delivery rider GPS ping updates, and counter billing alerts.

We integrate trusted third-party service providers to deliver secure payment processing, map routing, and SMS/WhatsApp notification delivery:

• Payment Gateways (Juspay, Razorpay): Enforces PCI-DSS compliant secure session tokens during UPI and card checkouts.
• Map & Location APIs (Google Maps API): Used for delivery address verification and rider GPS dispatch.
• Authentication Services (Firebase Auth): Manages secure Multi-Factor Authentication (MFA) tokens.

Cravme does NOT sell, rent, or trade user data or cookie identifiers to third-party ad brokers or external marketing networks.

You have full control over cookie settings on your web browser and mobile device:

4.1 Browser Controls

Most modern web browsers allow you to manage your cookie preferences through their settings menu. You can choose to block all cookies, accept only first-party cookies, or delete stored cookies upon closing your browser window.

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Apple Safari: Preferences → Privacy → Block all cookies

*Please Note:* Disabling Essential or Strictly Necessary cookies will prevent you from logging into the Cravme Admin Dashboard or completing online restaurant order checkouts.

We may periodically revise this Cookie Policy to reflect upgrades in technology, regulatory guidelines, or operational requirements. Any revisions will be published on this page with an updated "Last Updated" timestamp.

If you have any questions regarding our use of cookies or data privacy practices, please contact our Data Protection Officer:

• Email: privacy@cravme.com
• Legal Entity: INCOSS Technologies Private Limited
• Official Portal: https://biz.cravme.com