Cookie Policy

Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to remember information about your visit — such as your login session or preferences — to improve your experience on subsequent visits.

We also use similar technologies such as local storage and session storage for authentication tokens, and web beacons (tracking pixels) for analytics.

PhishShield sets the following categories of cookies:

• Strictly necessary cookies: required for the Platform to function. These include session cookies for authentication (next-auth.session-token), CSRF protection tokens, and preferences. These cannot be disabled.
• Analytics cookies: Google Analytics (ga, _ga, _gid, _gat) — used to measure website traffic, page views, and user journeys in aggregate. Data is anonymized and does not identify you personally.
• Performance cookies: Vercel Analytics — privacy-first analytics that does not use cookies but may use local storage. No personal data is collected.
• Functional cookies: your billing plan, dashboard layout preferences, and notification settings stored to improve your experience.

Some cookies are set by third-party services we use:

• Google Analytics (Google LLC): _ga, _gid, _gat_gtag — track anonymized usage statistics. Governed by Google's Privacy Policy. You can opt out via the Google Analytics Opt-out Browser Add-on.
• Razorpay (Razorpay Financial Solutions Pvt. Ltd.): cookies set during payment checkout for fraud prevention and session management. Governed by Razorpay's Privacy Policy.

We do not permit third-party advertising networks to set cookies on our Platform. We do not use cookies for behavioral advertising or retargeting.

Cookies we set fall into two duration categories:

• Session cookies: deleted when you close your browser. Used for authentication and CSRF protection during your active session.
• Persistent cookies: remain on your device for a set period. Google Analytics cookies persist for up to 2 years; session preference cookies persist for 30 days.

You can control and delete cookies through your browser settings. Most browsers allow you to:

• View cookies currently stored on your device.
• Delete all cookies or cookies from specific websites.
• Block third-party cookies by default.
• Set your browser to notify you when a cookie is being set.

Note: disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling analytics cookies will not affect your ability to use any Platform features.

Browser-specific instructions: Chrome (Settings → Privacy → Cookies), Firefox (Settings → Privacy → Cookies), Safari (Preferences → Privacy), Edge (Settings → Privacy → Cookies).

To opt out of Google Analytics tracking across all websites, install the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

Alternatively, you can set the Do Not Track (DNT) header in your browser. We respect DNT signals and will not load Google Analytics if DNT is enabled.

We may update this Cookie Policy as we add or remove cookies and tracking technologies. Changes will be reflected with an updated 'Last updated' date. We encourage you to review this page periodically.