Transparency & Technology DisclosuresCookie Audit 2026

Cookie Policy

This Cookie Policy describes how Gargi PaperKraft (“Company”, “we”, or “our”), operating under the commercial packaging brand Papzo, utilizes cookies, local storage, and similar web tracking technologies on papzo.in.

Effective Date: October 1, 2026

Last Revised: October 1, 2026

View Privacy Policy

Our Minimal Cookie Philosophy

Unlike conventional consumer portals, Papzo does NOT sell, rent, or trade your web browsing history to third-party ad brokers. We do not run third-party cross-site behavioral advertising retargeting networks. We utilize cookies strictly to keep your shopping session secure, maintain cart specifications, analyze catalogue usability via Google Analytics 4, and allow seamless checkout through RBI-compliant payment gateways.

1. What Are Cookies and Local Storage?
2. How Papzo Uses Cookies
3. Comprehensive Cookie Audit Table
4. Google Analytics 4 (GA4) Disclosures
5. Payment Gateway Cookies (Razorpay)
6. Third-Party Integrations & Maps
7. How to Control, Block & Delete Cookies
8. Updates & Contact Desk

1. What Are Cookies and Local Storage?

A cookie is a small alphanumeric text file placed onto your computer, tablet, or smartphone when you visit a website. Cookies allow the website to recognize your browser, maintain shopping cart memory as you navigate between pages, and ensure smooth security checks.

We also use related technologies including:

Session Cookies: Temporary cookies that remain active only while your browser tab is open and are deleted automatically upon closing the browser.
Persistent Cookies: Cookies that remain on your device for a specified retention window (e.g., 30 days to 2 years) to remember your preferences upon return visits.
Local & Session Storage (HTML5 Web Storage): Browser storage mechanisms that store key-value data directly in your browser without transmitting it with every HTTP request.

2. How Papzo Uses Cookies

On the Papzo platform, cookies and browser storage serve four well-defined purposes:

Essential & Security

Protecting against Cross-Site Request Forgery (CSRF), validating administrative logins, and maintaining secure server communication.

Cart & Order Continuity

Remembering your selected bag size, quantity tier (250/500/1000/5000+), and destination PIN code during checkout.

Performance & Diagnostics

Understanding which paper bag dimensions and industry guides are most valuable to Indian business buyers.

Secure Payment Rails

Enabling the Razorpay payment modal to verify transactions securely without ever exposing card data to our servers.

Complete Inventory

3. Comprehensive Cookie Audit Table

The following audit table provides complete transparency regarding every cookie, identifier, and storage token deployed across the Papzo storefront:

Category	Cookie / Storage Name	Provider / Source	Exact Purpose	Lifespan
Strictly Necessary (Essential)	sb--auth-token sb--refresh-token	Supabase Auth	Maintains encrypted JWT session tokens for authenticated administrative and client portal sessions. Prevents unauthorized database queries via Row-Level Security.	Session / 7 Days
Strictly Necessary (Essential)	__Host-* / Next.js Routing	Papzo Server	Edge server routing, CSRF token validation, and secure HTTP header delivery across server components.	Session
Functional & Configuration	cart_state / variant_cache	Papzo Browser Storage	Stores temporary product configurator selections (selected SKU, bag size in mm, quantity ladder tier) so user does not lose configuration while reviewing specifications.	Session / 30 Days
Analytical & Performance	_ga	Google Analytics	Assigns an anonymous, randomized client identifier to measure aggregated visitor counts and user journeys across site pages.	2 Years
Analytical & Performance	_ga_* (Container ID)	Google Analytics	Maintains session state and dispatches eCommerce events (`view_product`, `select_quantity`, `begin_checkout`).	2 Years
Third-Party & Payments	rzp_device_id / rzp_checkout	Razorpay Gateway	Loaded exclusively when payment modal triggers. Manages fraud risk scoring, tokenized card validation under RBI guidelines, and bank payment session handshakes.	Session / 1 Year
Third-Party & Payments	NID / CONSENT	Google Maps	Sets map preferences and user configuration if interacting with the embedded factory directions map on `/contact`.	6 Months to 2 Years

4. Google Analytics 4 (GA4) Disclosures

Papzo uses Google Analytics 4, a web analysis service provided by Google LLC (“Google”). GA4 uses cookies to analyze how visitors use our packaging website:

IP Anonymization: In Google Analytics 4, IP addresses are used solely for coarse geographic reporting (City and State in India) and are not logged or stored on persistent disks by Google.
Custom E-Commerce Telemetry: We record anonymous conversion funnels such as clicking “Contact factory sales” or selecting 500 pieces vs 1,000 pieces to ensure our factory inventory accurately reflects demand from Indian bakeries, cafes, and retailers.
Opt-Out Add-On: If you prefer that Google Analytics does not collect data on your visits across websites, you may install the official Google Analytics Opt-out Browser Add-on .

5. Payment Gateway Cookies (Razorpay)

When you initiate payment for an order on Papzo, the secure payment modal is rendered by Razorpay Software Private Limited, an RBI-regulated Payment Aggregator.

Razorpay may deploy necessary security cookies and local storage tokens to identify suspicious transaction patterns, prevent card-testing attacks, and verify multi-factor authentication (such as Bank OTP or UPI Intent handshakes).

These cookies are strictly required to execute financial transactions and are governed by Razorpay’s privacy and security policies in full accordance with the Reserve Bank of India.

6. Third-Party Integrations & Maps

Our website includes links and integrations with third-party platforms:

WhatsApp Web / App: When clicking any WhatsApp support link (wa.me/919918280347), you are redirected directly to WhatsApp. Papzo does not inject any WhatsApp tracking cookies onto your device.
Google Maps: On our Contact page, an interactive map is embedded to assist customers with physical directions to our Chinhat/Lucknow manufacturing plant. Google may set cookies in your browser when loading the map frame.

User Empowerment

7. How to Control, Block & Delete Cookies

You possess the technical right and ability to manage, restrict, or block cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent the checkout process from functioning properly:

Google Chrome (Desktop & Android)

Go to Settings > Privacy and security > Third-party cookies. Here you can block third-party cookies, clear browsing data, or manage site-specific permissions for papzo.in.

Apple Safari (macOS & iOS)

On macOS, open Safari > Settings > Privacy > Prevent cross-site tracking. On iPhone/iPad, go to Settings > Safari > Advanced > Block All Cookies.

Microsoft Edge (Windows)

Navigate to Settings > Cookies and site permissions > Manage and delete cookies and site data to block or clear tracking tokens.

Mozilla Firefox

Open Settings > Privacy & Security > Enhanced Tracking Protection and select Standard or Strict, or manage cookie storage manually.

8. Updates & Contact Desk

We may periodically revise this Cookie Policy to reflect changes in web technologies, our logistics integrations, or statutory guidelines under Indian law. Any updates will be published on this page with an updated “Last Revised” timestamp.

Gargi PaperKraft · Privacy & Cookie Desk

Facility: Gargi PaperKraft Manufacturing Facility, Lucknow, Uttar Pradesh – 226028, India

Email: grievance@papzo.in / hello@papzo.in

Telephone: +91 99182 80347

Read our companion Privacy Policy for complete DPDPA 2023 disclosures.

Factory Story Packaging FAQ Factory Desk