Cookie Policy

Cookies are small text files stored on your device (computer, phone, or tablet) when you visit a website. They allow the website to remember your actions and preferences over time, so you don't need to re-enter information every time you visit.

Similar technologies include:

• Web beacons (pixels) — Tiny transparent images embedded in pages or emails to track opens and interactions
• Local storage — Browser-based storage for app preferences and cached data
• Session storage — Temporary data stored only for the duration of your browser session
• Device identifiers — Used in our mobile app to identify devices for analytics and push notifications

The following cookies may be set when you visit chase21.app:

Essential

• chase21_session — Maintains your login session (expires: session end)
• csrf_token — Security token to prevent cross-site request forgery (expires: session end)
• cookie_consent — Stores your cookie preferences (expires: 1 year)

Analytics (optional)

• _ga, _gid — Google Analytics visitor tracking (expires: 2 years / 24 hours)
• _fbp — Facebook Pixel for app install attribution (expires: 90 days)

Performance (optional)

• chase21_perf — Page load performance metrics (expires: 30 days)

The Chase 21 mobile app does not use traditional browser cookies. Instead, we use:

• Device advertising ID (GAID / IDFA) — For attributing app installs and measuring ad campaigns. You can reset or opt out of this in your device settings
• App analytics (anonymized) — Screen views, button taps, and feature usage to improve the app. No personally identifiable information is included
• Expo Push Token — A unique device token for delivering push notifications. Stored securely in our database
• Secure local storage — Your session token and preferences are stored locally on device in encrypted storage

Some third-party services we integrate with may set their own cookies or use tracking technologies:

• Google Analytics — Website traffic analysis. Google Privacy Policy
• Razorpay — Payment processing (essential for transactions). Razorpay Privacy Policy
• Stream.io — Video call infrastructure. Their cookies are session-scoped and essential for video functionality
• Facebook Pixel — App install attribution (optional, only on website)

We do not control third-party cookies. Please review each provider's policy for details on how they use tracking technologies.

Browser Settings

You can control cookies through your browser settings. Here's how for common browsers:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Safari: Preferences → Privacy → Manage Website Data
• Firefox: Options → Privacy & Security → Cookies and Site Data
• Edge: Settings → Privacy, search, and services → Cookies

Opt-Out Tools

• Google Analytics opt-out: Google Analytics Opt-out Add-on
• Network Advertising Initiative opt-out: optout.networkadvertising.org

Some browsers send a "Do Not Track" (DNT) signal to websites. Currently, there is no universal standard for responding to DNT signals, so Chase 21 does not alter its data collection practices based on DNT signals.

However, you can always opt out of optional cookies and analytics by contacting us or adjusting your browser settings as described above.

We may update this Cookie Policy when we change the cookies we use or when law requires it. Updates will be posted on this page with a revised "Last updated" date. For significant changes, we will notify users via the app or email.

For questions about our use of cookies or to exercise your data rights:

• Email: privacy@chase21.app
• Support: Visit our Contact page