Cookie & Tracking Policy

info

The short version

We use very little. One cookie to keep you signed in, some browser storage to hold your cart, a random device identifier so guests can find their own orders, and a push token if you allow notifications. We run no third-party advertising trackers and we do not sell any of it.

1.Strictly necessary cookies

These are required for the Platform to function. They cannot be switched off without breaking the service.

sessionA signed authentication token identifying your logged-in account and role. Set as an HTTP-only cookie so page scripts cannot read it. Without it you cannot stay signed in.

Security & rate limitingYour IP address is read on sensitive requests such as payment initiation to limit automated abuse. It is not written to your device.

2.Browser storage we use

These are stored in your browser's local storage rather than as cookies. They stay on your device and are not transmitted with every request.

khaogully_cartYour current cart, so it survives a page refresh or a browser restart and so you can build an order before signing in.

khaogully_device_idA randomly generated identifier for this browser. It lets a guest checkout find its own orders later without an account. It contains no personal information and is not linked to any advertising network.

khaogully_active_orders / khaogully_last_orderA local copy of your live orders, so tracking loads instantly.

khaogully_favoritesRestaurants you have marked as favourites, stored only on your device.

khaogully_location_verifiedRecords that your delivery area has already been confirmed, so you are not asked again on every visit.

khaogully_userBasic profile details cached for display, cleared when you log out.

3.Push notifications

If you allow notifications, Google Firebase Cloud Messaging issues a registration token for that browser or device. We store it against your account, along with your browser user-agent string, so we can tell you when your order is accepted, picked up and on its way.

Notifications are off until you explicitly grant permission.
You can revoke permission at any time from your browser or operating system notification settings. The token is then no longer usable and we prune it.
A service worker is registered to receive these messages and to keep an installed app on the current version. It stores no personal data of its own.

4.Activity and analytics

We record a limited operational picture of how the Platform is being used — the page currently open, the cart being built, and the role of the session. This drives the live operations view an administrator uses to run the service: to see that orders are flowing, that kitchens are online, and that nothing is stuck.

It is tied to your device identifier and, once you sign in, to your account.
It is used internally only. It is not shared with advertisers or data brokers.
These records are short-lived and pruned regularly.
We do not use Google Analytics, advertising pixels, cross-site trackers or fingerprinting.

5.Location

If you grant location permission, we read your coordinates at two moments only: when checking that your address is inside our delivery radius, and at checkout so the Delivery Partner can find you. We do not track your location in the background and we do not read it when you are not using the Platform. You can decline location access and type your address manually instead.

6.Third-party cookies

When you pay, the payment gateway's checkout is loaded in your browser and it sets its own cookies to secure that transaction. Those are governed by the gateway's own policies, not ours. Apart from this, KhauGully sets no third-party cookies.

7.How to clear or block this

Clear everything — clear site data for this website in your browser settings. This signs you out and empties your cart.
Block cookies — you can block them in your browser, but you will not be able to sign in or place an order.
Turn off notifications — revoke the notification permission for this site in your browser or device settings.
Turn off location — revoke the location permission and enter your address manually.

8.Questions

For anything about this policy, contact Shoaib Qureshi at grievance@khaugully.in. For the wider picture of how we handle personal data, see our Privacy Policy.