Cookies and browser storage we use
This Cookie Policy lists every cookie, local-storage item and similar browser-side identifier that Web Digital Mantra IT Services Private Limited sets when you use OrbitoCRM, OrbitoMeet, or our marketing site. It supplements our Privacy Policy.
1. What a cookie is
A cookie is a small file a website asks your browser to save. The next time your browser visits the same site it sends the file back, so the site can recognise you, keep you signed in, or remember a preference. "Local storage" is similar but stays only in your browser and is never sent back on its own. We treat both the same way for this policy.
2. Categories we use
- Strictly necessary — without them the site cannot function. You cannot refuse them without breaking sign-in.
- Functional — remember a preference you set, like dark mode. You can clear them any time.
- Analytics — count visits and page views on the public marketing site only, so we know which pages are useful. Never on the authenticated CRM or on meet.orbitocrm.in.
- We do not use advertising cookies, cross-site trackers, retargeting pixels, or data brokers.
3. The full list
3.1 OrbitoCRM — authenticated app (orbitocrm.in)
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
next-auth.session-token | Necessary | Keeps you signed in. HttpOnly, Secure, SameSite=Lax. | 30 days (sliding) |
next-auth.csrf-token | Necessary | Prevents cross-site request forgery on sign-in forms. | Session |
next-auth.callback-url | Necessary | Returns you to the page you tried to open before signing in. | Session |
orbito.theme (localStorage) | Functional | Remembers your light / dark preference. | Until cleared |
orbito.sidebar (localStorage) | Functional | Remembers whether the left sidebar is pinned open. | Until cleared |
act-as | Necessary (managers only) | Audited "manager acts as sales exec" session marker. | Session |
3.2 OrbitoMeet — public video (meet.orbitocrm.in)
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
orbito.meet.theme (localStorage) | Functional | Remembers your light / dark preference across sessions. | Until cleared |
OrbitoMeet sets no analytics or tracking cookies at all. The room itself is HTTPS plus a direct DTLS/SRTP media channel to our Bengaluru server; nothing in the call is logged beyond what you already see in the UI.
3.3 Marketing website (orbitocrm.in public pages)
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_<id> | Analytics | Google Analytics 4 — distinguishes visitors, measures page views on the public marketing site. Honours the global ga-disable-<id> kill switch. Not set on the CRM or on meet.orbitocrm.in. | Up to 2 years |
4. Turning cookies off
Every major browser lets you block or delete cookies, usually under Settings → Privacy. Blocking the "Necessary" cookies will break sign-in — you will not be able to use the CRM. Clearing functional cookies will reset your theme and sidebar preference to the defaults.
To opt out of Google Analytics on the marketing site, install the official Google Analytics Opt-out Browser Add-on, or set window["ga-disable-GA_MEASUREMENT_ID"] = true before the first page load.
5. Do Not Track and Global Privacy Control
We honour Global Privacy Control (Sec-GPC: 1): if your browser sends it we disable analytics for your visit automatically. "Do Not Track" has no standardised meaning any more, so we do not act on it specifically — use GPC instead.
6. Changes to this policy
We update this policy when the set of cookies changes. The current version is always at orbitocrm.in/cookie-policy.
Questions about this policy?
Write to our Grievance Officer, Virendra Kumar, at info@webdigitalmantra.in, call +91 9620 805 972, or post a letter to Web Digital Mantra IT Services Pvt Ltd, Bengaluru, Karnataka, India (GST 29AAIFW4289G1ZH).
We reply to every data-rights or complaint request within thirty days of receipt as required under Indian law.