Privacy · Working draft
Privacy and cookies.
Choose what optional uses you allow. The full-screen choice prompt appears automatically on Store pages only; elsewhere it opens when you select “Privacy choices” in the footer. No optional analytics, marketing or personalization scripts, cookies or storage load on those other pages before you open the controls. Essential storage is always on because it keeps sign-in, security, and shopping features working. We remember your saved choice for 400 days; you can change it at any time, and we will ask again if it expires or our privacy choices change.
How the buttons work: “Accept all” enables every optional purpose listed below. “Manage choices” lets you review each purpose, and “Save choices” records only the options you selected. “Reject all” keeps optional purposes off. Essential storage remains active with every choice.
WORKING DRAFT — NEEDS LEGAL REVIEW. The exact operator, providers, purposes, retention periods, legal basis and grievance contact must be confirmed before public launch. Any uncertain legal applicability is VERIFY BEFORE USE.
Purpose choices
Browser storage in this version
| Name | Purpose | Lifetime | Recipient |
|---|---|---|---|
origyn_session cookie | Sign-in session; HttpOnly, SameSite=Lax and Secure on production HTTPS | Configured session duration (currently 7 days); removed on sign-out/expiry | Origyn application only |
origyn_consent_id cookie | Random consent-history reference; HttpOnly, SameSite=Lax and Secure on production HTTPS | 400 days, then browser expiry | Origyn application only; the random ID is not an IP address or fingerprint |
origyn_preferences_v1 local storage | Theme, motion and density preferences | Until cleared by the visitor/browser | Origyn pages on this browser |
origyn_session_hint and origynUser local storage | Non-secret interface sign-in hint and display name/email for account menus | Until sign-out or browser storage is cleared | Origyn pages on this browser |
origyn_store_cart session storage | Guest cart during the current browser tab session | Cleared when the tab/session ends or by the visitor | Origyn Store on this browser |
origyn_recently_viewed_v1 local storage | Recently viewed product IDs; created and read only when Personalization is accepted | Until consent is withdrawn, storage is cleared, or the list is replaced | Origyn Store on this browser |
origynPublisherDraft, origynCurrentProduct | Publisher listing draft and the current listing editor selection | Until replaced or cleared in browser storage | Origyn publisher pages on this browser |
origyn_referral_code, origyn_checkout_return, origyn_checkout_pending session storage | Carry a referral attribution code or return to a pending checkout flow in the current tab | Current tab session; checkout markers are removed after return | Origyn pages on this browser |
Optional purpose choices are recorded with a random consent ID, choice version, purpose settings, page language and UTC time. Anonymous history is retained for up to 400 days and then removed by a daily retention task. Signed-in choices are also linked to the account with a complete change history. Account-linked history follows account deletion/retention handling. The record does not store a full IP address or device fingerprint. Essential session and account data are processed separately from optional purposes.
Third-party services
No analytics or marketing third-party script is currently configured. Razorpay Checkout is loaded only after a signed-in user starts checkout; the actual payment provider and production data flows still need approval. A purpose grant cannot by itself authorize a future vendor or a new processing purpose. Origyn must update the notice and consent version before introducing one.
Change or withdraw
Use “Privacy choices” in the footer to change or withdraw any optional purpose. The new choice is saved immediately. Personalization data is deleted from this browser when that purpose is withdrawn. If the privacy API is unavailable, Origyn keeps the choice panel open and reports that it could not save your selection.
Official references — applicability VERIFY BEFORE USE
- Digital Personal Data Protection Act 2023 — MeitY
- Digital Personal Data Protection Rules 2025 and corrigendum — MeitY
- CERT-In Directions and FAQ
- Consumer Protection rules and Dark Patterns Guidelines — Department of Consumer Affairs
The current privacy notice and consent choices are engineering controls only. Their legal effect, required purposes, cookie notice content, retention, rights, deadlines and grievance arrangements need owner and Indian legal review.