Privacy Policy Terms of Service Cookie Policy Refund Policy

Cookie Policy

Last Updated: September 2026 • PocketGhar Legal Governance

We use cookies to maintain session of your user. It is not used to personally identify you on other websites.

Governing Law & Statutory Framework: Digital Personal Data Protection Act, 2023 (India) ("DPDP Act"), Information Technology Act, 2000 (and amendments), Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Real Estate (Regulation and Development) Act, 2016 ("RERA / MahaRERA").

1. Introduction, Identity of Data Fiduciary & Scope

This Cookie Policy ("Policy") governs the collection, processing, deployment, and management of digital identifiers, HTTP cookies, pixel tags, local storage (localStorage), and session storage (sessionStorage) deployed across the website https://pocketghar.com, its subdomains, mobile-optimized portals, APIs, and associated web applications (collectively, the "Platform").

The Platform is owned, operated, and maintained by PocketGhar (referred to interchangeably as the "Company", "PocketGhar", "we", "us", or "our"), acting as a Data Fiduciary under the Digital Personal Data Protection Act, 2023.

By continuing to access, browse, or utilize the Platform, you, as a natural person acting as a Data Principal (buyer, consortium participant, builder, channel partner, agent, or casual visitor), acknowledge that you have read, understood, and agreed to the practices outlined in this Policy.

2. What Are Cookies, Web Beacons, and Local Storage?

2.1 HTTP Cookies

Cookies are small, encrypted alphanumeric text files transferred to and stored within your web browser or internet-enabled device hardware. Cookies enable our web servers to recognize your specific device, retain authenticated sessions across navigation, enforce cybersecurity protections, and analyze aggregate traffic patterns.

2.2 Local Storage (localStorage) and Session Storage (sessionStorage)

Modern web standards (HTML5) provide client-side web storage mechanisms that hold data locally on your device with enhanced cryptographic isolation:

  • sessionStorage persists temporarily and is automatically wiped once you close the relevant browser tab or window.

  • localStorage persists across browser restarts until manually cleared or programmatically expired, used strictly for persistent user preferences such as search history and cookie consent state.

2.3 Pixel Tags and SDKs

We may utilize lightweight script tags, web beacons, and Software Development Kits (SDKs) provided by vetted technical partners (e.g., Google, Razorpay, MapMyIndia) to measure service delivery, render interactive spatial maps, and ensure payment checkout integrity.

3. Categories of Data Collected and Technologies Deployed

We categorize all cookies and digital storage mechanisms into three distinct operational classifications:

Category 1: Strictly Necessary / Essential (Always Active — No Consent Required)

  • Purpose & Operational Scope: Essential for foundational operation, network routing, edge delivery, cybersecurity, and authenticated user workflows. Enables account authentication, role-based access controls (RBAC) across Buyer, Builder, and Admin portals, live group buying consortium operations, Razorpay payment processing handshakes, and CSRF mitigation.

  • Legal Ground under DPDP Act, 2023: Deemed legitimate use under Section 4 and Section 7 of the DPDP Act for the provision of user-requested digital services, network security, and compliance with statutory obligations.

  • Can be disabled: No. Disabling these identifiers via browser override will break core functionalities including login, booking token transfers, and portal security.

  • Key Identifiers: sb-access-token & sb-refresh-token (Supabase Auth JWTs), pocketghar_cookie_consent_v1 (LocalStorage), __cf_bm / cf_clearance (Cloudflare Edge CDN), and Razorpay Checkout State (checkout.js).

Category 2: Analytics, Performance & Telemetry (Consent-Based — Opt-In)

  • Purpose & Operational Scope: Collects aggregated, pseudonymized usage metrics including page load latencies, high-demand real estate localities, filter usage distributions, session durations, and user flow conversions. Enables PocketGhar to optimize speed and enhance property search discoverability.

  • Legal Ground under DPDP Act, 2023: Explicit affirmative consent obtained via the Cookie Consent Banner pursuant to Section 6 of the DPDP Act.

  • Third-Party Service: Google Analytics / Google Tag Manager (G-5085FX6KB6) with Google Consent Mode v2 default denied enforcement.

  • Key Identifiers: _ga (up to 2 years), _gid (24 hours), _gat (1 minute). IP anonymization is enforced; telemetry is never combined with PAN, Aadhaar, or phone numbers without separate explicit consent.

Category 3: Functionality, Map Localization & User Experience (Consent-Based — Opt-In)

  • Purpose & Operational Scope: Enables enhanced personalization, locality mapping, and session continuity. Includes remembering recent search queries (e.g., Pune, Mumbai, Thane, Navi Mumbai), preferred BHK configurations, carpet area budgets, and interactive spatial map zoom coordinates.

  • Legal Ground under DPDP Act, 2023: Explicit consent under Section 6 of the DPDP Act.

  • Key Identifiers: recentSearches (LocalStorage autocomplete), property_click_track_* (SessionStorage deduplication), and Mapping SDK cache (MapMyIndia / Mappls / OpenStreetMap).

4. Comprehensive Cookie & Local Storage Inventory

Identifier / Key Type Provider Purpose Retention Category sb-*-auth-token LocalStorage / Cookie PocketGhar / Supabase User authentication, session integrity, RBAC permissions Up to 30 Days Essential pocketghar_cookie_consent_v1 LocalStorage PocketGhar Stores Data Principal cookie consent preferences under DPDP Act 1 Year Essential __cf_bm / cf_clearance HTTP Cookie Cloudflare Edge CDN Bot protection, rate limiting, DDoS defense 30 Mins – 1 Year Essential Razorpay Session Tokens SessionStorage / Memory Razorpay (RBI Aggregator) Secure payment processing for consortium booking deposits Active Session Essential _ga, _gid, _gat HTTP Cookie Google Analytics (G-5085FX6KB6) Pseudonymized site performance, traffic telemetry, conversion tracking 1 Min – 2 Years Analytics recentSearches LocalStorage PocketGhar Retains recent real estate search queries on the client device User Deletable Functional property_click_track_* SessionStorage PocketGhar Prevents duplicate click tracking in property listings Active Session Functional Map Bounds Cache SessionStorage MapMyIndia / Mappls Caches interactive locality boundary coordinates Active Session Functional

5. Legal Protections, Safe Harbors & Disclaimers for Brand Security

5.1 Real Estate Marketplace & RERA Disclaimer

PocketGhar functions as a technological prop-tech platform facilitating group buying consortiums, project discovery, and builder-buyer digital interactions. The deployment of cookies, spatial maps, search telemetry, or analytics shall not be construed as real estate advisory, financial advice, architectural certification, or an endorsement of any project. All property specifications, carpet areas, amenities, and MahaRERA / RERA registration numbers displayed are provided directly by developers/promoters or sourced from public regulatory filings.

5.2 Payment Gateway Safe Harbor

PocketGhar integrates with Reserve Bank of India (RBI) authorized Payment Aggregators (Razorpay). PocketGhar does NOT collect, process, or store raw Credit Card numbers, Debit Card numbers, CVV codes, or NetBanking MPINs in cookies or platform databases. All financial transactions occur over 256-bit TLS encrypted channels managed directly by the payment aggregator in compliance with PCI-DSS standards.

5.3 Third-Party External Links & WhatsApp Integrations

The Platform provides features to interact with developers, sales representatives, and group leaders via third-party communication channels (such as WhatsApp Click-to-Chat links). Once you click on an external link or redirect to a third-party domain (e.g., wa.me, maharera.mahaonline.gov.in, razorpay.com), this Cookie Policy ceases to apply. PocketGhar disclaims all liability for the cookie practices, data processing, and security standards of external third-party portals.

5.4 Limitation of Liability

To the fullest extent permissible under Indian law:

  1. PocketGhar shall not be liable for any indirect, incidental, special, or consequential damages resulting from third-party tracker failures, browser extensions interfering with cookie operations, or unauthorized device-level access by third parties.

  2. In no event shall PocketGhar's total aggregate liability arising out of or related to this Cookie Policy exceed the amount paid by the user to PocketGhar for platform services in the preceding twelve (12) months, or INR 1,000 (Indian Rupees One Thousand), whichever is lower.

6. Rights of the Data Principal under DPDP Act, 2023

As a recognized Data Principal under the DPDP Act, 2023, you are endowed with statutory rights regarding personal data processed through digital identifiers:

  • Right to Notice & Transparent Consent (Section 6): You have the right to receive clear, itemized notice of all non-essential cookies and provide or withhold consent before such trackers are set.

  • Right to Withdraw Consent (Section 6(4)): You may withdraw your consent for non-essential cookies (Analytics and Functional) at any time. Withdrawal is as accessible as granting consent and does not affect the lawfulness of processing undertaken prior to withdrawal.

  • Right to Access Information (Section 11): You have the right to request a summary of personal data processed and the identities of all Data Fiduciaries / Data Processors with whom data has been shared.

  • Right to Correction and Erasure (Section 12): You may request the erasure of your personal data or clear your client-side search history via browser or account settings.

  • Right of Grievance Redressal (Section 13): You have the right to accessible and timely grievance redressal through our designated Grievance Officer.

7. How to Manage, Customize, or Revoke Cookie Preferences

7.1 Using the On-Site Consent Manager

You can modify your cookie preferences at any time by clicking the "Cookie Choices" prompt or using our banner controls to toggle Analytics and Functional cookies on or off.

7.2 Clearing Device & Browser Storage

You can delete or block cookies directly through your browser settings:

  • Google Chrome: Settings → Privacy and Security → Third-Party Cookies / Clear browsing data.

  • Apple Safari: Preferences / Settings → Privacy → Manage Website Data.

  • Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data.

  • Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.

Notice: If you elect to delete or block essential cookies, you may be unable to authenticate into your PocketGhar account, view active consortium bids, or process token deposits.

8. Data Security & Storage Integrity

PocketGhar implements industry-standard technical and organizational security measures pursuant to the SPDI Rules and the DPDP Act, 2023. These include HTTP-only cookie flags where applicable, Strict SameSite origin isolation (SameSite=Lax or SameSite=Strict), 256-bit TLS data transmission in transit, and restricted Row Level Security (RLS) policies within our database infrastructure.

9. Grievance Redressal Officer & Contact Information

In compliance with Section 13 of the DPDP Act, 2023 and Rule 5(9) of the SPDI Rules, 2011, PocketGhar has instituted a dedicated Grievance Redressal mechanism.

Entity Name: PocketGhar

Designated Officer: Grievance Officer & Privacy Compliance Desk

Registered Email: support@pocketghar.com

Website: https://pocketghar.com

Registered Office / Jurisdiction: Mumbai, Maharashtra / Jaipur, Rajasthan, India

Statutory Response Window: Valid grievances will be acknowledged and addressed within thirty (30) calendar days from the date of receipt.

10. Governing Law and Exclusive Jurisdiction

This Cookie Policy, its interpretation, validity, and any dispute or claim arising out of or in connection with the collection or processing of data via cookies shall be governed exclusively by the laws of the Republic of India, without regard to conflict of law principles. Any legal suit, action, or proceeding shall be instituted exclusively in the competent courts located at Mumbai, Maharashtra / Jaipur, Rajasthan, India.

11. Amendments and Revisions

PocketGhar reserves the right to amend or update this Cookie Policy at any time to accommodate changes in applicable legal statutes, regulatory directions from the Data Protection Board of India (DPBI), technological shifts, or service enhancements. When material modifications occur, we will update the "Last Updated" date and display a refreshed consent prompt across the Platform where required by law.

Cookie Policy | PocketGhar | PocketGhar