Cookie Policy
Last updated: 1 October 2026
1. What are cookies and similar technologies?
Cookies are small text files stored by your browser. Websites also use similar technologies such as local storage and scripts that read information from your device. In this policy, "cookies" covers all of them.
This policy explains which ones RiteFolio (operated by Quantech Data Science LLP) uses, and should be read together with our Privacy Policy.
2. How we use them and our legal basis
Strictly necessary items are required to provide the service you ask for (signing in, security, payments, remembering your settings). They do not need your consent and cannot be switched off.
All other categories are used only after you opt in. Until you choose, they stay off and their scripts are not loaded. We do not use advertising or cross-site tracking cookies, and we do not sell or share your personal data for targeted advertising.
3. Categories
- Strictly necessary (always active) — Needed for the site to work: keeping you signed in, protecting forms from abuse, processing payments, remembering your cookie choices and the settings you pick in the app (theme, active profile, financial year). These cannot be switched off.
- Analytics & performance (opt-in) — Help us understand which pages are used and how fast they load so we can improve RiteFolio. Collected in aggregate, without cookies and without identifying you. Off unless you turn it on.
4. Cookies and technologies we use
Strictly necessary
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sb-*-auth-token* | RiteFolio (Supabase Auth) First-party | Keeps you signed in and authenticates your requests. | Cookie | Until you sign out (max. 400 days) |
| rf_cookie_consent | RiteFolio First-party | Stores your cookie choices and an anonymous consent ID so we don't ask again on every visit. | Cookie | 180 days |
| _GRECAPTCHA | Google reCAPTCHA google.com | Protects the contact form from spam and automated abuse. Loaded only on the Contact Us page. | Cookie | 6 months |
| Cashfree checkout | Cashfree Payments cashfree.com | Processes subscription payments and prevents payment fraud. Loaded only when you start a checkout; Cashfree may set its own cookies on its domain. | Script (no storage) | Set by Cashfree |
| theme | RiteFolio First-party | Remembers the light / dark theme you selected. | Local storage | Until cleared |
| activeProfile_* | RiteFolio First-party | Remembers which portfolio profile you were working in. | Local storage | Until sign-out |
| financialYearId, financialYearName, startDate, endDate | RiteFolio First-party | Remembers the financial year you selected. | Local storage | Until sign-out |
| ritefolio-config-v2, ritefolio-dashboard-layout-v1, sidebar-collapsed, reportForm | RiteFolio First-party | Caches app configuration and remembers your dashboard layout, sidebar state and in-progress report form. | Local storage | Until sign-out |
Analytics & performance
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Web Analytics | Vercel Inc. vercel-scripts.com | Counts page views and referrers in aggregate. Sets no cookies; visitors are distinguished by a hash of the request that is discarded after 24 hours. | Script (no storage) | No storage on your device |
| Speed Insights | Vercel Inc. vercel-insights.com | Measures page load performance (Core Web Vitals) so we can fix slow pages. | Script (no storage) | No storage on your device |
5. Managing your choices
You can give, change or withdraw consent at any time, as easily as you gave it, from (also linked in the site footer and, when signed in, in your profile menu). Withdrawing consent takes effect immediately and does not affect processing that happened before it.
We remember your choice — including a refusal — for 180 days, and ask again sooner if we add a new category or change how one is used.
If your browser sends a Global Privacy Control signal, we treat it as a refusal of all optional categories unless you later opt in yourself.
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop sign-in and other core features from working.
6. Third parties and international transfers
Some of the providers listed above (Vercel Inc. and Google LLC) may process data outside India, including in the United States, under their own privacy terms and appropriate safeguards. Third-party providers are responsible for the cookies they set on their own domains.
7. Record of your consent
When you make a choice we store, against a random consent ID kept in the rf_cookie_consent cookie, the categories you selected, the policy version and the time. This record is not linked to your account and is kept only to demonstrate that we respected your choice.
8. Changes to this policy
We update this policy whenever the cookies we use change. The date at the top shows the latest revision; material changes will ask for your consent again.
9. Contact and grievances
For questions, or to exercise your rights under the Digital Personal Data Protection Act, 2023 or other applicable law, write to support@ritefolio.in.