Cookie Policy
Last updated: 20 October 2026
1. About this policy
This Cookie Policy explains how Korpo, operated by Arka India Technology Solutions LLP ("Korpo", "we", "us"), uses cookies and similar technologies on korpo.in and its subdomains (the "Platform"). It lists every cookie and browser-storage item the Platform sets, and every third-party service the Platform loads that may set its own cookies or receive your device information. It should be read together with our Privacy Policy and Terms and Conditions. It is issued in line with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023 to the extent in force.
2. What are cookies
Cookies are small text files that a website stores in your browser. They let the site recognise your browser on later requests — for example, to keep you signed in. "Similar technologies" means browser local storage and session storage, which store small values on your device without sending them to our servers on every request. In this policy, "cookies" covers all of these unless stated otherwise.
First-party cookies are set by korpo.in. Third-party cookies are set by another company's domain when the Platform loads that company's content (for example, an embedded map).
3. Categories we use
- Strictly necessary — required to sign you in, keep your session secure, protect forms against cross-site request forgery, and remember your cookie choice. The Platform cannot work without them, so they cannot be switched off. They are not used for advertising or tracking.
- Preferences (browser storage only) — remember choices you make in the interface, such as light/dark theme or which sidebar items you pinned. They stay on your device and are never sent to us. They are part of the service you asked for, so they are treated as necessary.
- Functional & third-party embeds (optional) — content from third parties that may set their own cookies, currently Google Maps location previews. These are off by default and only load after you allow them.
We do not use analytics, advertising, profiling or social-media tracking cookies (see Section 7).
4. Cookies we set
On the live site, some names carry a __Secure- or __Host- prefix. These prefixes tell the browser to send the cookie only over HTTPS.
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
authjs.session-token | Strictly necessary | Keeps you signed in. Holds an encrypted session token, not your password. Renewed while you are active. | Expires after 15 minutes without activity |
authjs.csrf-token | Strictly necessary | Protects sign-in and other forms against cross-site request forgery. | Session (until browser closes) |
authjs.callback-url | Strictly necessary | Remembers which page to return you to after sign-in. | Session |
authjs.state, , authjs.pkce.code_verifier | Strictly necessary | Set only while you sign in with LinkedIn, to secure the sign-in redirect. | 15 minutes |
skip_password_setup | Strictly necessary | Remembers that you chose to skip the optional password-setup prompt. | 7 days |
korpo_cookie_consent | Strictly necessary | Stores your cookie choice, the policy version you answered and when, so we don't ask again on every page. | 180 days |
5. Local & session storage
These values stay in your browser and are never sent to our servers automatically.
| Key | Type | Purpose | Duration |
|---|---|---|---|
theme | Local storage | Your light / dark / system theme preference. | Until you clear it |
korpo:pinned-rail | Local storage | Services you pinned to the sidebar. | Until you clear it |
korpo:rail-pane-pinned | Local storage | Whether the sidebar panel stays open. | Until you clear it |
korpo-admin-users-columns-v1 | Local storage | Column layout of the admin users table (administrators only). | Until you clear it |
rentals-new-draft | Session storage | Saves an unfinished rental listing so a page refresh doesn't lose it. | Until the tab is closed or the listing is posted |
6. Third-party services
Some features load content from other companies. When they do, your browser connects to that company directly, and it receives your IP address and browser details. It may also set its own cookies under its own policies, which Korpo does not control.
| Service | When it loads | What it may do | Category |
|---|---|---|---|
| Google Maps (Google LLC) | Map previews on event and skill forms — only after you allow functional cookies | May set Google cookies (for example NID, AEC, SOCS). Google cookie policy | Functional (optional) |
| Google Maps link | Only if you click “Open in Google Maps” on a rental | Opens Google Maps in a new tab under Google's own policies. Nothing loads until you click. | — |
| OpenStreetMap tiles & Nominatim (OpenStreetMap Foundation) | Interactive maps and location search on rentals, carpool, marketplace and events | Receives your IP address and the area or search text you look up. Sets no cookies. OSMF privacy policy | Strictly necessary for the map feature you use |
| unpkg.com (CDN) | Map pages, to load the map library's stylesheet | Receives your IP address. Sets no cookies. | Strictly necessary for the map feature you use |
| Razorpay | Only when you start a payment (Premium, listing boost, paid event) | Razorpay's checkout sets its own cookies for fraud prevention and payment processing. Razorpay privacy policy | Strictly necessary for the payment you requested |
| Only if you choose “Continue with LinkedIn” | You are redirected to linkedin.com, which sets its own cookies under its own policy. LinkedIn cookie policy | Strictly necessary for the sign-in method you chose |
7. What we do not use
Korpo does not use Google Analytics, Meta Pixel, advertising networks, retargeting, fingerprinting, cross-site tracking, or social-media "like"/"share" widgets. We do not sell or share cookie data with advertisers. If we ever add analytics or other non-essential technologies, we will first update this policy, list each cookie and its purpose, and load it only after you consent.
8. Your consent & choices
On your first visit, a cookie notice asks you to choose between Accept all, Necessary only, or Manage preferences. Strictly necessary cookies are always active, because the Platform cannot work without them. Optional categories stay off unless you switch them on.
We record your choice, the policy version and the time — both in the korpo_cookie_consent cookie and in a consent log on our servers (linked to your account if you are signed in) — as evidence of consent. You can change or withdraw your consent at any time; withdrawing does not affect anything already loaded with your consent. If this policy changes materially, we will ask you again.
9. Browser controls
You can also block or delete cookies and site data in your browser's settings (for example, Chrome: Settings → Privacy and security → Cookies; Safari: Settings → Privacy; Firefox: Settings → Privacy & Security). If you block strictly necessary cookies, you will not be able to sign in or use most of the Platform. Clearing site data also clears your cookie choice, so you will be asked again.
10. How long cookies last
The tables above give the duration of each cookie and storage item. Your consent choice lasts 180 days, after which we ask again. Consent-log records on our servers are kept for as long as needed to show that consent was obtained, in line with our data retention practices.
11. Changes to this policy
We review this policy whenever we add, remove or change a cookie or third-party service. The "Last updated" date at the top shows the latest version. If a change adds an optional category or changes how we use your data, we will ask for your consent again before it takes effect.
12. Contact
Questions about this Cookie Policy can be sent to our Grievance Officer at grievance@korpo.in, or see our Grievance Redressal page.