Cookie Policy
Last updated: 16 October 2026
1. What are cookies?
Cookies are small text files that a website places on your device when you visit. They allow the site to remember information about your visit — such as your preferred settings or whether you are logged in — so you do not have to re-enter information each time you come back.
We also use similar technologies such as localStorage (browser storage) and inline scripts loaded after your consent. This policy covers all of them.
2. How we use cookies
CRYSTALLIC uses cookies in four categories. Strictly necessary cookies are always active because the site cannot function without them. All other categories are off by default until you opt in.
Strictly necessary
Session management, authentication, shopping cart, payment processing (Razorpay), and storing your consent choice. You cannot opt out of these.
Preferences
Remember your display choices, region, or language so you do not have to reconfigure them each visit.
Analytics
Google Analytics 4, Microsoft Clarity, and Vercel Analytics help us understand which pages are popular and how to improve the experience. All data is aggregated and anonymised.
Marketing
Meta Pixel measures whether our ads led to purchases and enables us to show relevant ads on Instagram and Facebook. We never sell your data to advertisers.
3. Cookies we set
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| crystallic_consent | CRYSTALLIC (first-party) | Stores your cookie preferences so we do not ask again. | Strictly necessary | 1 year |
| sb-*-auth-token | Supabase (auth.crystallic.in) | Keeps you logged in across pages. | Strictly necessary | Session / 1 hour refresh |
| crystallic-cart (localStorage) | CRYSTALLIC (first-party) | Persists your shopping cart while you browse. | Strictly necessary | Until browser storage is cleared |
| __stripe_mid / __stripe_sid | Razorpay / Stripe infra | Fraud prevention during payment processing. | Strictly necessary | Session |
| _ga, _ga_* (Google Analytics) | Google LLC | Measures page views, sessions, and user journeys — all aggregated and anonymised. | Analytics | 2 years (_ga) / 1 year (_ga_*) |
| _clck, _clsk (Microsoft Clarity) | Microsoft Corporation | Records anonymised session replays and heatmaps to improve UX. | Analytics | 1 year (_clck) / 1 day (_clsk) |
| Vercel Analytics | Vercel Inc. | Privacy-friendly page-view counting. No cookies set; uses aggregated edge data. | Analytics | No cookie |
| _fbp, _fbc (Meta Pixel) | Meta Platforms Inc. | Measures ad conversions and enables retargeting on Meta platforms. | Marketing | 90 days (_fbp) / 90 days (_fbc) |
4. Managing and withdrawing consent
You can change or withdraw your consent at any time:
- Click "Cookie settings" in the footer of any page.
- Use the "Withdraw all consent" link inside the preferences panel — this deletes all optional tracking cookies immediately and reloads the page.
- Clear your browser cookies via your browser settings (this removes all cookies for all websites).
Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
5. Third-party cookies
Some cookies are set by third parties whose privacy policies govern how they process data:
6. Contact
If you have questions about this Cookie Policy, please contact us at privacy@crystallic.in or write to us at:
CRYSTALLIC
[OWNER TO CONFIRM — registered address]
Email: privacy@crystallic.in
Grievance Officer: [OWNER TO CONFIRM — name & contact per IT Act 2000 Rule 5(9)]
Items marked [OWNER TO CONFIRM] must be completed by the business owner before this policy is published. Nothing in this document constitutes legal advice — have your lawyer review it.