PointNXT Cookie Policy

1. Scope & Operating Entity

This Cookie Policy explains how PointNXT ("Platform", "we", "us", or "our"), operated by AdaptNXT Technology Solutions Pvt. Ltd. (Bengaluru, Karnataka, India), uses cookies, LocalStorage, SessionStorage, and security challenge tokens when you visit our website at pointnxt.com or access our merchant order management portal.

This policy should be read alongside our Privacy Policy, Terms & Conditions, and Refund Policy.

2. What Are Cookies & Web Storage Technologies?

Cookies are small text data files placed on your browser or device when you visit a website. In addition to HTTP cookies, modern web applications utilize complementary browser storage technologies:

• First-Party Cookies: Set directly by PointNXT to manage merchant authentication, session security, and dashboard navigation.
• Third-Party Cookies: Set by domain partners such as Google Analytics to provide traffic performance metrics.
• LocalStorage & SessionStorage: Client-side browser storage used to store UI preference states, saved filter criteria, and consent choices without transmitting data overhead on every HTTP request.
• Security Tokens (Cloudflare Turnstile): Non-cookie cryptographic verification tokens used to prevent automated spambot form submissions.

3. Cookie Categories We Use

PointNXT classifies web cookies and storage objects into four functional categories:

A. Strictly Necessary & Security Cookies (Mandatory)

Essential technical cookies required for the fundamental operation of our website and merchant dashboard. These include session authentication tokens, CSRF security defenses, and Cloudflare Turnstile bot verification.

B. Performance & Analytics Cookies

Cookies that collect aggregated, anonymous performance data regarding site visits, page loading speeds, and navigation flows. We utilize Google Analytics 4 (GA4) to measure technical performance and optimize user experience.

C. Functionality & Preference Cookies

Cookies and LocalStorage objects that remember your settings (such as selected warehouse views, order table filter states, and saved consent choices) to provide a seamless user experience across sessions.

D. Marketing & Campaign Attribution Cookies

Optional cookies used to evaluate the performance of enterprise sales campaigns and referral channels. These operate strictly on an opt-in basis.

4. Google Consent Mode v2 Compliance

PointNXT implements Google Consent Mode v2 to respect user privacy choices in compliance with global data protection standards (GDPR, DPDP Act 2023):

• Default Privacy State: When a user visits pointnxt.com, consent signals for ad_storage, analytics_storage, ad_user_data, and ad_personalization are set to 'denied' by default.
• Consent-Driven Execution: Analytics and performance scripts only update to 'granted' after a user explicitly accepts performance cookies via our cookie banner or settings dialog.
• Persistent Preference Storage: Your consent preferences are stored locally in your browser under the key cookie_consent_preferences.

5. Active Cookie & Web Storage Inventory

Below is an inventory of specific cookies and browser storage keys active on our platform:

6. How to Manage & Control Your Preferences

You hold full control over how cookies and browser storage objects are handled on your device:

A. On-Site Consent Settings

You can modify or update your cookie consent choices at any time by updating your consent settings via the cookie banner or clearing the cookie_consent_preferences entry in your browser's LocalStorage.

B. Browser-Level Controls

Most web browsers allow you to block, delete, or manage cookie settings directly:

• Google Chrome: Settings → Privacy and security → Third-party cookies
• Mozilla Firefox: Options → Privacy & Security → Enhanced Tracking Protection
• Apple Safari: Preferences → Privacy → Block all cookies
• Microsoft Edge: Settings → Cookies and site permissions

C. Google Analytics Opt-Out

You can prevent Google Analytics from processing your session data across all websites by installing the official Google Analytics Opt-out Browser Add-on.

7. Third-Party Tracking Partners

We maintain strict data processing agreements with our technical tracking and security sub-processors:

• Cloudflare Inc.: Used for Turnstile bot mitigation, DDoS defense, and global CDN delivery. Cloudflare processes IP addresses and challenge tokens strictly for security verification.
• Google LLC (Google Tag Manager & GA4): Used for aggregate performance reporting under strict Google Consent Mode v2 default protection.

8. Policy Updates & Contact Information

We may update this Cookie Policy periodically to reflect technological enhancements or legal requirements. When changes occur, we will update the "Last Updated" date at the top of this page.