Cookie & Tracker Policy
Comprehensive technical and legal disclosures regarding cookie categorization, session tokens, analytical trackers, and consent withdrawal under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
Active Cookie Preferences & Consent Status
Under Section 6(4) of the DPDP Act 2023, you have the statutory right to withdraw or modify your cookie preferences at any time.
1 What Are Cookies & Local Storage Tokens?
Cookies are small alphanumeric data packets placed on your browser or device when accessing B A C Web Development & Cloud Services (officialbac.in). Local storage tokens serve similar purposes by storing authenticated session credentials securely inside your browser.
In strict accordance with Section 5 and Section 6 of the DPDP Act, 2023, we do not deploy any non-essential cookies without prior, informed, and affirmative opt-in consent.
2 Comprehensive Cookie Inventory & Technical Specifications
The table below provides a complete register of every cookie and browser token deployed across officialbac.in:
| Cookie Name | Provider | Category | Lifespan | Technical Purpose & Ground |
|---|---|---|---|---|
| cookiesAccepted | officialbac.in | Strictly Necessary | 365 Days | Stores your DPDP Act cookie consent status (Accept All / Essential Only). |
| bac_shield_token | officialbac.in | Strictly Necessary | 1 Hour | BAC Shield WAF security token for CSRF protection and rate-limiting defense. |
| clientToken | officialbac.in | Strictly Necessary | 7 Days | Cryptographically signed JWT authenticating client portal sessions over HTTPS. |
| connect.sid | officialbac.in | Strictly Necessary | Session | Encrypted HTTP-only Express session identifier for flash notices and form states. |
| visitorId | officialbac.in | Performance / Diagnostics | 30 Days | Anonymous edge node performance latency probes. Cleared when consent declined. |
3 Third-Party Trackers & Data Processors (DPDP Section 8)
We work with vetted Data Processors under statutory Data Processing Agreements that prohibit secondary data exploitation:
Provides TLS 1.3 encryption, DDoS mitigation, and edge routing. Places security tokens strictly necessary for bot protection.
Processes secure PCI-DSS tokenized transactions for invoices and fuel tank credits. Active only during checkout.
Delivers transactional 2FA OTP codes and service tickets. Does not set marketing cookies on visitor browsers.
Delivers optimized web typography. Queries are cached without setting user tracking cookies.
4 Browser-Level Cookie Controls & Instructions
In addition to our on-site Consent Manager, you can inspect, delete, or block cookies through your browser settings:
- Google Chrome: Settings → Privacy and security → Third-party cookies → Block third-party cookies.
- Mozilla Firefox: Settings → Privacy & Security → Enhanced Tracking Protection → Strict mode.
- Apple Safari: Preferences → Privacy → Prevent cross-site tracking & Block all cookies.
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Note: Disabling strictly necessary cookies may prevent logging into your Client Dashboard and deployment console.
5 Data Retention Schedules (DPDP Act Section 8(7))
Under Section 8(7) of the DPDP Act 2023, personal data is erased once the specified purpose is fulfilled or consent is withdrawn:
| Data Classification | Retention Duration | Statutory Justification |
|---|---|---|
| Client Profiles & Git Deploys | Active account tenure + 30 days grace | Contractual service provision (Section 4) |
| Financial Receipts & Tax Invoices | 8 Years from fiscal year end | Mandatory compliance under Indian GST & IT Act |
| Cookie Consent Choices | 365 Days | Section 6 DPDP consent record-keeping |
| WAF & Incident Security Logs | 90 Rolling Days | Cybersecurity audit & CERT-In compliance |
Statutory Grievance Redressal & Escalation
For inquiries regarding our cookie deployments or to withdraw consent, contact our Grievance Officer:
If your grievance is not resolved within 30 days, you retain the statutory right under Section 13(3) of the DPDP Act to file a complaint before the Data Protection Board of India (DPBI).