A cookie is a small text file downloaded onto your device when you visit a website. Cookies allow websites to remember information about you, customize your browsing experience, recognize you on return visits, and improve services.
No. Cookies are not harmful and cannot install malware, access personal files, transmit passwords or banking information, or compromise your device security. Cookies can only be read by the website that created them.
Enable core website functionality. Cannot be disabled.
| Cookie Name | Purpose | Duration |
|---|---|---|
| session_id | Maintains user login session | Session (until logout) |
| csrf_token | Protects against cross-site forgery attacks | Session |
| auth_token | Authenticates logged-in user | 30 days |
| location_preference | Remembers delivery location | 365 days |
| cart_items | Stores items in shopping cart | Session |
| payment_session | Maintains payment gateway connection | 1 hour |
| language_preference | Stores preferred language/region | 365 days |
Remember your preferences to enhance user experience. Can be disabled (will affect experience).
| Cookie Name | Purpose | Duration |
|---|---|---|
| saved_addresses | Saves delivery addresses for quick reordering | 365 days |
| favorite_merchants | Stores favorite restaurants/stores | 365 days |
| recent_searches | Tracks recent search queries | 90 days |
| ui_preferences | Stores layout, theme, and display preferences | 180 days |
| notification_settings | Remembers notification preferences | 365 days |
| app_version | Tracks app version for compatibility | 30 days |
| font_size_preference | Stores accessibility font size choice | 365 days |
Collect anonymized data on how visitors use the website. Can be disabled.
| Cookie Name | Purpose | Provider | Duration |
|---|---|---|---|
| _ga | User identification | Google Analytics | 2 years |
| _gid | Session ID | Google Analytics | 24 hours |
| _gat | Request limiting | Google Analytics | 1 minute |
| pageview_count | Pages viewed per session | Thapala Box | Session |
| device_type | Identifies device type | Thapala Box | 365 days |
| referrer_source | Tracks how user arrived | Thapala Box | 90 days |
All analytics data is anonymized and aggregated. Individual user identity is not stored.
Track user interests to deliver targeted advertising. Can be disabled (you may see generic ads instead).
| Cookie Name | Purpose | Provider | Duration |
|---|---|---|---|
| _fbp | Facebook Pixel — user identification | 90 days | |
| IDE | Google DoubleClick — cross-site tracking | 390 days | |
| GoogleAdsID | Google Ads — user interests | 1 year | |
| _ttp | TikTok Pixel — user tracking | TikTok | 365 days |
| conversion_pixel | Tracks conversions (orders placed) | Thapala Box | 365 days |
| interest_category | Stores inferred user interests | Thapala Box | 180 days |
No personally identifiable information (PII) is shared with advertising third parties.
Thapala Box uses third-party services that place cookies on your device:
Thapala Box does not allow third parties to collect PII via cookies and requires all third parties to comply with DPDPA 2023 and applicable privacy laws.
On your first visit, a cookie consent banner appears with options to Accept All, Reject Non-Essential, or Customize. To adjust later: Log into account → Settings → Privacy & Data → Cookie Preferences.
Install the Google Analytics Opt-Out Browser Add-On from tools.google.com/dlpage/gaoptout to prevent Google Analytics from tracking your visits.
Thapala Box respects DNT headers and reduces tracking when DNT is enabled, though essential cookies remain active.
On first visit, a consent banner is shown. Only essential cookies are placed before consent is given. Your consent choice is stored in a cookie (consent_preferences) for 365 days. You may withdraw consent at any time via account Settings → Privacy & Data → Cookie Preferences.
Note: Withdrawing consent does not delete previously collected data. To delete existing data, contact admin@thapalabox.com.
Policy updates are published with minimum 7 days notice via website banner, email notification, and in-app notification. Old policy versions available at www.thapalabox.com/legal/cookie-policy-archive or via admin@thapalabox.com.
| Version | Date | Changes |
|---|---|---|
| 1.0 | March 7, 2026 | Initial policy creation |
Grievance Officer: Sai Vusirikapally, Grievance Officer
Email: admin@thapalabox.com | Phone: +91 7702613638
Address: 2-110, Chintha Nekkonda, Parvathagiri, Warangal – 506122, Telangana
For unresolved concerns, you may also contact the National Consumer Helpline at 1800-11-4000 or consumerhelpline.gov.in.
| Term | Definition |
|---|---|
| Cookie | Small text file stored locally on device |
| Session Cookie | Expires when browser is closed |
| Persistent Cookie | Remains on device after browser is closed |
| Essential Cookie | Required for website functionality and security |
| Functional Cookie | Enhances user experience and personalization |
| Analytics Cookie | Collects anonymized data on website usage |
| Marketing Cookie | Tracks interests for targeted advertising |
| DNT | Do Not Track — browser signal requesting no tracking |
| DPDPA | Digital Personal Data Protection Act 2023 (India) |
Document Version: 1.0 | Last Updated: March 7, 2026 | Next Review: September 7, 2026
Legal Compliance: IT Act 2000, DPDPA 2023, GDPR-inspired best practices
Thapala Box Private Limited | CIN: U49231TS2025PTC198633