Cookie Policy
Last updated: May 2026
This Cookie Policy explains how Digi2L, operated by UTC Digital Technologies Private Limited, uses cookies and similar technologies (such as localStorage and device fingerprints) when you visit digi2l.co.in. It is a supplement to our Privacy Policy.
1. What is a cookie
A cookie is a small text file placed on your device when you visit a website. Cookies allow the site to recognise your device across pages, remember your preferences, and help us understand aggregate site usage. Some cookies are set by us (first-party); others are set by services we use (third-party).
2. Categories of cookies we use
2.1 Strictly necessary cookies
These cookies are essential for the Platform to function. Without them, you would not be able to sign in, place orders, or use core features. They do not require consent under DPDP Act §7(b) because they are needed to perform the service you have asked for.
| Cookie | Purpose | Lifetime | Set by |
|---|---|---|---|
token (HTTP-only) | Customer session (signed JWT) | 14 days | Digi2L (first-party) |
qr_session (HTTP-only) | Temporary session for QR-deep-link orders | 60 minutes | Digi2L (first-party) |
__Host-csrf | CSRF protection on form submissions | Session | Digi2L (first-party) |
2.2 Analytics cookies
Analytics cookies help us understand how visitors use the Platform in aggregate — for example, which pages are most viewed and where users drop off in the sell flow. These cookies are set only after you give consent through the cookie banner (or via your browser's “Do Not Track” signal where supported).
| Cookie | Purpose | Lifetime | Set by |
|---|---|---|---|
_vercel_speed_insights | Page-load performance measurement (aggregated) | Session | Vercel (third-party) |
_vercel_analytics | Anonymised page-view counts | 24 hours | Vercel (third-party) |
2.3 Marketing / advertising cookies
We do not currently set any marketing or advertising cookies on the Platform. If we add any in future (for retargeting, conversion tracking, or social-media pixels) we will update this Policy and seek fresh consent before placing the cookie on your device.
2.4 Similar technologies
We also use:
localStorage— to store non-sensitive preferences such as your last viewed PIN code and dismissed banner state.- Server-side logs (IP, user-agent) — not a cookie strictly, but worth disclosing: kept for 180 days for security and abuse-prevention purposes (IT Rules 2021 §3(1)(g)).
3. How to control cookies
You have three layers of control:
- Cookie banner — when you first visit the Platform, a banner asks for consent to analytics cookies. You can accept, reject, or customise.
- Browser settings— all modern browsers let you block or delete cookies for a specific site or globally. Refer to your browser's help pages: Chrome, Firefox, Safari, Edge, etc.
- Email the DPO — to withdraw consent for all non-essential cookies at any time, email data.protection@digi2l.co.in. We will honour the request on your next session.
Blocking strictly-necessary cookies may break Platform functionality (you will not be able to sign in or stay signed in across pages).
4. Changes to this Cookie Policy
We may update this Policy from time to time. Material changes are published on the Platform for at least 15 days before they take effect. The current version is dated at the top of the page.
5. Contact
For questions about cookies, contact our Data Protection Officer at data.protection@digi2l.co.in.