Cookie Policy
How NB03 uses cookies, local storage, and session storage on digital.nittish.in — aligned with India's Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025.
This policy is published for transparency about our data practices. It is not legal advice. For advice on your specific obligations, consult a qualified lawyer.
Data Fiduciary: NB03 (operated by Nittish Baboria). For broader processing purposes and your statutory rights, see our Privacy Policy.
Managing your preferences
Under Section 6 of the DPDP Act, 2023 and Rule 3 of the DPDP Rules, 2025, consent must be as easy to withdraw as to give. On your first visit, a banner offers Accept All (essential + analytics) or Essential Only. Reopen settings via Cookie Preferences in the footer. Withdrawing analytics consent stops new first-party telemetry; essential authentication cookies remain for signed-in users.
Cookie & storage inventory
We do not use third-party advertising, social plug-in trackers, or Google Analytics on this website.
| Name | Storage | Category | Purpose & retention |
|---|---|---|---|
| __Secure-next-auth.session-token | HTTP cookie | Essential | NextAuth session for logged-in users. Secure, HttpOnly, SameSite=Lax. Expires with session. |
| __Host-next-auth.csrf-token | HTTP cookie | Essential | CSRF protection for authentication flows. |
| nb03_cookie_consent | localStorage | Essential (consent record) | JSON record of essential/analytics choices and timestamp until you clear site data. |
| analytics_session_id | sessionStorage | Analytics (consent-based) | Anonymous UUID linking page views in our first-party analytics database. Cleared when the tab closes. |
| analytics_has_visited | localStorage | Analytics (consent-based) | Flags return visits for aggregate metrics only. |
| admin_users_cache / admin_analytics_cache | localStorage | Performance (admin only) | Short-lived admin dashboard cache; cleared on logout. |
Browser controls
You can delete cookies and site data through your browser settings. Blocking essential cookies may prevent login. For data protection questions or grievances, contact privacy@digital.nittish.in or nittishbaboria123@gmail.com.
Sources & legal basis
The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 take effect in phases per Government of India notifications (including G.S.R. 843(E) and G.S.R. 846(E), published 13 November 2025). We align our practices with the Act and Rules as notified; mandatory dates for specific provisions are set out in those notifications.
- Digital Personal Data Protection Act, 2023 (Act 22 of 2023) — India Code
- DPDP Act — commencement notification (G.S.R. 843(E), 13 November 2025)
- Digital Personal Data Protection Rules, 2025 — MeitY documents
- CERT-In directions under Section 70B(6), IT Act, 2000 (Direction No. 20(3)/2022-CERT-In)
This policy is published for transparency about our data practices. It is not legal advice. For advice on your specific obligations, consult a qualified lawyer. We recommend periodic review by a qualified lawyer as the Data Protection Board of India and Central Government issue further guidance.