01 What is a cookie?
A cookie is a small text file that a website places on your device. We also use related technologies — localStorage, sessionStorage, pixel tags and web beacons. Together they let us remember you across page loads, keep you signed in, recall your preferences, understand how the site is used, and measure whether the site is working well.
Cookies are organised into categories below. Strictly necessary cookies are always on; the others run only with your consent.
02 Strictly necessary
These keep the site working — secure sign-in, the customer portal, your shopping cart, and basic functions like remembering you across page loads. You cannot disable them and still use the site.
| Storage / cookie | Purpose | Lifetime |
|---|---|---|
__Secure-3PSID (Firebase / Google Auth) | Sign-in session for the customer portal. | Session |
fl-session | Studio session and CSRF binding. | 30 days |
cart (localStorage) | Saved shopping cart for signature collection. | Until cleared |
csrf-token | Cross-site request forgery protection. | Session |
fl-cookie-consent | Records your cookie-banner choices. | 12 months |
03 Functionality
Remember your preferences — theme, saved estimate-form drafts, future language preference. Set with consent and easy to clear in settings.
| Storage | Purpose | Lifetime |
|---|---|---|
fl-theme (localStorage) | Light / dark mode. | 12 months |
fl-estimate-draft (localStorage) | Saved progress on the estimate form so reloads don't lose your inputs. | Until submitted or cleared |
fl-contact-last (localStorage) | A copy of your last contact-form submission for your reference. | 30 days |
fl-lang | Future language switcher (Telugu, Kannada, Malayalam, Tamil) when added. | 12 months |
04 Analytics
Help us understand which pages visitors find useful, where they drop off, and how the site performs. Run only with your consent.
| Cookie | Purpose | Lifetime | Provider |
|---|---|---|---|
_ga | Distinguish visitors. | 24 months | Google Analytics 4 |
_ga_<ID> | Per-property session state. | 24 months | Google Analytics 4 |
_gid | Distinguish visitors (24-hour bucket). | 24 hours | Google Analytics 4 |
We send only pseudonymised IDs to Google Analytics; we do not share names, emails or phone numbers. We have IP anonymisation enabled.
05 Marketing
Help us measure the success of campaigns and serve relevant content. Run only with your consent.
We do not currently run paid ad pixels. We reserve the right to add Meta Pixel, LinkedIn Insight, Pinterest Tag or similar tags in the future to attribute campaigns and remarket to engaged visitors. We will refresh consent before activating any such tag, and update this Notice with the specific cookies and lifetimes.
06 Third-party embeds
Pages that embed content from other services may set cookies governed by those services' own policies. The most common embeds on our site are:
- Google Maps — on the Contact page (studio location).
- YouTube — on project case-study pages and the journal.
- Social media — Instagram, Pinterest, LinkedIn embeds in articles.
- Vimeo — for select project films.
You can read each provider's policy by visiting their site. We use no-cookie or privacy-enhanced variants of these embeds where the provider offers them.
07 Razorpay checkout
The Razorpay checkout sets its own cookies for fraud detection, session continuity and 3-D Secure verification when you make a payment for a signature-collection order or service invoice. These are strictly necessary for checkout to work and are governed by the Razorpay privacy policy.
08 Your choices
- First visit — a consent banner offers Accept all, Reject all, and Manage preferences. You can switch analytics and marketing on or off at the category level.
- Anytime — open Cookie Settings from the link in the footer to update your choices.
- Browser — most browsers let you block or delete cookies via Settings → Privacy. Note that disabling strictly necessary cookies will break sign-in, the cart and the customer portal.
- Mobile — both iOS and Android offer per-site cookie controls in Safari, Chrome and other browsers.
09 Do Not Track / Global Privacy Control
We respect Global Privacy Control (GPC) signals where supported by your browser — analytics and marketing cookies are not set when GPC is on, regardless of the consent banner state.
The older "Do Not Track" header is not currently honoured because the spec was retired without replacement.
10 Children
The site and the signature collection are not directed at children under 18. We do not knowingly set cookies for, or collect data about, anyone under 18.
11 Updates
We may revise this Notice from time to time as we add features, integrations or partners. The "Effective" date at the top of the page tells you when the current version took effect. Material additions (e.g. activating a new marketing pixel) will trigger a fresh consent prompt.
12 Contact
Questions on cookies?
Email: privacy@flamingolifestyles.in
Phone: +91 8123426007