Cookie Policy

1. What Are Cookies & Local Storage?

Cookies are small text data files placed onto your computer, tablet, or smartphone when you visit a website. In modern web applications, they are often paired with Browser Local Storage and Session Storage.

At Cobcult, these technologies allow our website to remember who you are, keep your cart items intact when you browse multiple pages, retain your custom shoe specifications in our 3D customizer, and load pages rapidly.

2. Your Consent

When you first visit `cobcult.com`, essential cookies and session tokens are initialized so the website functions correctly. By continuing to navigate our catalogue, configuring shoes, and using our services, you consent to our use of cookies and tracking technologies as described in this policy.

*Freedom of Choice:* You have full authority over non-essential cookies. You can modify or withdraw your consent at any time via your browser settings (see Section 9).

3. What Cookies & Storage Information We Collect

We collect minimal, privacy-centric data through browser storage:

• Authentication Tokens: Secure cryptographic JWT access and refresh tokens that authenticate your logged-in customer session.
• Cart & Wishlist Cache: Selected shoe models, leather colorways, sole configurations, and size selections.
• 3D Customizer State: Real-time customization choices (e.g. burnished toe patina, Goodyear welt thread color, monogram initials) so you never lose progress.
• Display Preferences: Currency choices, active filter selections, and recently viewed styles.
• Technical Logs: IP address snippets, browser user-agent signatures, and session timestamps for security diagnostics.

4. Source of Collection

Cookies on Cobcult come from two origins:

• First-Party Cookies: Created and read directly by Cobcult to preserve your shopping session, manage authentication, and run the 3D customizer.
• Trusted Third-Party Services: Originating from certified partners such as secure payment gateways (e.g., Razorpay/Stripe for fraud detection during checkout) and cloud CDNs for fast asset loading.

5. Purpose of Collection: Categories We Use

We group all browser tracking technologies into three distinct categories:

• Strictly Necessary (Essential): Critical for the website to function. They handle secure customer login, shopping cart persistence across tabs, rate-limiting against bot attacks, and payment checkout security. *These cannot be turned off as the website will cease to function without them.*
• Functional & Customizer Cookies: Remember your personalized settings—such as shoe size preferences, saved leather swatch choices in our 3D studio, and custom footwear drafts.
• Performance & Diagnostics: Help us monitor page rendering speeds, detect broken links or sizing errors, and understand which footwear categories are most viewed so we can optimize inventory.

6. Security of Cookies & Storage

We implement industry-standard safeguards to protect all cookie and session data:

• Secure & HTTP-Only Flags: Authentication cookies are marked with `HttpOnly` and `Secure` flags, preventing malicious scripts or unauthorized third-party JavaScript from reading your session keys.
• Cryptographic Salting: Session identifiers are cryptographically signed using high-entropy secret keys.
• Cross-Site Request Forgery (CSRF) Protection: Built-in token verification prevents unauthorized cross-site requests.

7. Retention: How Long Are Cookies Stored?

The lifespan of our cookies and local storage tokens varies according to their purpose:

• Session Cookies: Temporary files that expire and are automatically deleted the moment you close your browser tab.
• Cart & Customizer Storage: Stored locally in your browser so you can resume your custom footwear design across days. This remains stored until you complete your order, clear your browser cache, or request account deletion.
• Authentication Tokens: Persistent login tokens expire automatically after 30 days of inactivity for your security.

8. Automated Diagnostics & Anti-Fraud Checks

Cobcult uses cookie and session diagnostic data solely for automated security validation:

• Anti-Abuse Checks: Verifying that promotional referral credits are not being self-referred through duplicate browser sessions.
• Rate-Limiting: Protecting our website against automated credential-stuffing attacks or bot scraper abuse.

We do NOT use cookies for automated behavioral advertising or discriminatory profiling algorithms.

9. How Do I Withdraw My Consent & Manage Cookies?

You can restrict, block, or delete cookies at any time directly through your web browser:

• Google Chrome: Click Menu (⋮) → Settings → Privacy and Security → Third-Party Cookies → Choose "Block third-party cookies" or "See all site data and permissions".
• Apple Safari (Mac / iOS): Open Safari → Preferences / Settings → Privacy → Check "Block all cookies" or click "Manage Website Data".
• Mozilla Firefox: Click Menu (☰) → Settings → Privacy & Security → Enhanced Tracking Protection → Select "Strict" or manage Cookies and Site Data.
• Microsoft Edge: Click Menu (...) → Settings → Cookies and site permissions → Manage and delete cookies and site data.

*Important Note:* If you disable or clear all cookies and local storage, you will be logged out of your Cobcult account, and your shopping bag and 3D customizer drafts will be cleared.

10. Country of Origin & Data Hosting

Cobcult operates from India. All first-party cookie records, authentication sessions, and customer storage tokens are managed on secure cloud infrastructure hosted in accordance with the laws of the Republic of India and the Digital Personal Data Protection Act (DPDP Act).

11. Changes to This Cookie Policy

We may update this Cookie Policy periodically to reflect changes in the technologies we use, new website features, or regulatory compliance standards. Any revisions will be published on this page with an updated "Last Updated" timestamp.

12. Contact Information

If you have any questions, concerns, or requests regarding our use of cookies or tracking technologies:

• Privacy Desk: `privacy@cobcult.com` (Cookie preferences, data rights, and consent withdrawal)
• Customer Desk: `care@cobcult.com` (Mon – Sat, 10:00 AM – 7:00 PM IST)