Funtoosh
Policy DocumentProduction Ready

Cookie Policy

Minimal cookies, maximum privacy. Only what sign-in, the wallet lock and your theme and language preferences need.

Effective: September 23, 2026Last updated: September 23, 2026HTTPS/TLS in transit • Designated sensitive records use application-level encryption

1. Introduction

Funtoosh uses minimal cookies and local storage to keep you signed in, protect your wallet, and remember your theme and language. We do not use tracking or advertising cookies. This policy explains what we store, why, and your controls, in line with ePrivacy Directive principles and DPDP Act.

2. Definitions

  • Essential Cookies: Required for core functionality like theme, language, and secure session.
  • Local Storage: Browser storage for UI preferences and non-secret display data, local to your device.

3. Essential Cookies

NamePurposeDurationType
funtoosh_server_sessionKeeps you signed in (server-signed, not readable by scripts)Up to 30 daysEssential — HttpOnly, Secure, SameSite Lax
funtoosh_wallet_unlockProof that you entered your wallet PIN (or biometric) recently15 minutesEssential — HttpOnly, Secure, SameSite Lax
funtoosh_langYour language choice (EN/HI) so the server renders the right one1 yearEssential — SameSite Lax
funtoosh_app_lockProof that you unlocked the app lock, if you enabled oneYour chosen inactivity windowEssential — HttpOnly, Secure, SameSite Lax

4. No Tracking Cookies

We explicitly do NOT use:

  • Google Analytics, Mixpanel, Amplitude, Facebook Pixel, TikTok Pixel, Google Ads tags
  • Third-party advertising cookies or cross-site trackers
  • Fingerprinting scripts or behavioral profiling cookies

Future optional privacy-preserving analytics, if ever introduced, will be self-hosted, no cookies, opt-in only, and disclosed here per Transparency Page.

5. Local Storage & IndexedDB

  • theme: Light/Dark/System preference (kept until you change it)
  • funtoosh_language: English/Hindi choice (kept until you change it)
  • funtoosh_policy_version: Which policy version you last accepted, so we can ask you to re-accept when the rules change
  • funtoosh_session / user: Your display name and avatar for instant paint — never an auth token; the real credential is the HttpOnly cookie above

Clearing your browser's site data removes all of this without affecting your account; just sign in again.

6. Local Cache

Funtoosh does not install a service worker or an offline cache. Your browser's normal HTTP cache may keep static assets (icons, fonts, hero images) for faster loads; no personal data, no messages and no wallet data are ever cached by the site itself. Push notifications are delivered only by the Funtoosh Android app, which stores a device token for that purpose.

7. Your Control

  • Browser: Settings → Privacy → Clear cookies or block third-party cookies; Funtoosh remains functional with essential cookies only.
  • In-app: Change theme and language any time from the header or Settings; Log Out clears the session cookie and local data on that device.
  • Do Not Track: We do not track anyone, with or without a DNT header.
  • Opt-out: No opt-out needed for tracking as we do not track; essential cookies cannot be disabled without losing session.

8. User Responsibilities

  • Keep device and browser updated to ensure secure cookie handling.
  • Do not share your password, 2FA codes or wallet PIN; keep the email behind your account secure.
  • Log Out on shared devices; it clears the session cookie and local data.

9. Platform Responsibilities

  • Use only essential cookies, no tracking, transparent disclosure here and in Privacy Policy.
  • Secure cookies with HttpOnly, Secure on HTTPS, SameSite Lax, and short expiry where possible.
  • Provide clear controls for clearing storage and resetting preferences.
  • Never cache messages, wallet data or personal data in the browser beyond what the current screen needs.

10. Changes to This Policy

If we introduce any non-essential cookies in future (unlikely given privacy-first approach), we will update this policy, post at /cookies, ask for consent where the law requires, and ask you to re-accept the updated policy in-app. Continued use after effective date implies acceptance.

11. Contact Information

Effective Date: September 23, 2026 • Last Updated: September 23, 2026

Grievance Officer (IT Rules 2021)

Somesh Mishra
D 24/8, Himalay Bhawan,
Shatabdi Nagar, Panki,
Kanpur,
Uttar Pradesh – 208020,
India
Email: [email protected]
Phone: +91 94540 43072 (10 AM – 6 PM IST)

Statutory timelines we work to: acknowledgement within 24 hours; disposal within 15 days; prohibited content under Rule 3(2)(b) within 72 hours; non-consensual sexually explicit or morphed content under Rule 4(1)(p) within 24 hours; court or government orders under Rule 3(1)(d) within 36 hours. Removed content and the associated records are retained for 180 days for investigation purposes. These are the limits set by law for us to act within; they are not a guarantee of any particular outcome on any particular report.

Before we remove or disable content on our own initiative, Rule 4(8) requires us to notify you with reasons and give you a reasonable opportunity to dispute it. Automated tools may flag content, but a human reviews before any account-level action is taken. See the Transparency Report.

Your rights under the DPDP Act 2023

  • Notice and consent (§5): we tell you what we collect and why before you agree, and you can withdraw consent at any time in Settings.
  • Purpose limitation (§4, §6): your data is used only for running Funtoosh, safety, payments and legal obligations — never sold, never used to build advertising profiles.
  • Access and correction (§11): you can view and correct your profile data in Settings.
  • Erasure (§12): you can delete your account from Settings → Account. See Data Retention for what the law requires us to keep afterwards, and for how long.
  • Retention limit (§8(7)): we erase personal data once the purpose it was collected for is over, unless a law requires us to keep it.
  • Grievance redressal (§13): write to the officer named above, or use Grievance Redressal. Unsatisfied with the decision? Appeal to the Grievance Appellate Committee within 30 days. Data protection queries: [email protected].

Age: Funtoosh is for users aged 18 and over. Under the DPDP Act 2023 a person under 18 is a Child and we do not knowingly create accounts for them. No guarantees: Funtoosh is provided on an as-is basis. Nothing on this page is a guarantee of any specific result, earning, delivery time or moderation outcome.

© 2026 Funtoosh • All rights reserved← Return to Funtoosh Home