1. What cookies are
Cookies are small files a website stores in your browser. Similar technologies (local storage, pixels, scripts) are covered by this policy too, and we call them all "cookies" here.
2. The cookies we use
2.1 Strictly necessary (always on)
These make the site work and keep it secure. They do not need consent because the site cannot work without them, but we still list them.
| Name | Purpose | Duration |
|---|---|---|
JSESSIONID | Keeps you signed in (Saathi or staff account), protects forms, and remembers the checkout you started, so no one else can open it | Deleted when you close the browser. Ends after 30 minutes idle and 12 hours at most |
saath_consent | Remembers your cookie choice: a random number, your choice and the banner version, nothing else | 12 months |
2.2 Payment (set by Razorpay, during payment only)
When you pay, Razorpay's checkout may set its own cookies for fraud prevention and to complete the payment. These are needed for the payment you asked for. Razorpay's own policy applies to them.
2.3 Analytics (optional, off by default)
If you choose Accept, the Saath Foundation website itself counts which pages and buttons help people give. The counts are daily totals, kept in our own database on our own server. Nothing is sent to any other company, analytics store no IP address and no identifier, and nothing follows you to other sites. Your cookie choice is recorded against the random number kept in the saath_consent cookie. Separately, our web server keeps security logs with IP addresses (see the Privacy Policy).
| Name | Purpose | Duration |
|---|---|---|
saath_src | Remembers which campaign link brought you here (for example a WhatsApp or Instagram campaign), so we can see which campaigns lead to gifts. It holds only the campaign's source, medium and name, never anything about you | Until you close your browser |
Whatever you choose, we also keep simple daily page counts: how many times each page was opened, on which kind of device and from which website. They use no cookie and nothing that identifies you.
2.4 What we never use
- Advertising, retargeting or marketing pixels (for example social-media pixels).
- Cross-site tracking or data sold to others.
- Session recording or "heatmap" tools.
- Cookie walls: you never have to accept optional cookies to use the site.
3. No tracking on children's pages
The following pages carry strictly necessary cookies only, whatever you chose in the banner, and a security policy blocks any third-party script on them:
- children listing and every child profile (
/…/sponsor-a-child/children/…); - the online classroom and any page a child logs into;
- Report a Concern;
- the Rupee Trail and any page in your account that shows a child's details.
This follows the DPDP Act, 2023 s.9(3), which prohibits tracking, behavioural monitoring and targeted advertising directed at children, and our own rule that nothing about a child is tracked.
4. Your choices
- The banner offers "Accept analytics" and "Reject", with equal prominence. Nothing optional is set before you choose.
- Cookie settings in the footer lets you change your choice at any time. Withdrawing consent deletes the analytics cookies we can reach.
- Your browser settings can also block or delete cookies. Blocking strictly necessary cookies will stop sign-in and checkout working.
- We honour the Global Privacy Control signal as a "Reject".
5. Changes and contact
We update this list before adding any cookie. Questions: Grievance Officer, Anshu Aggarwal, help@thesaathfoundation.com.