Cookie Policy & Tracking Transparency

The cookies, session tokens, and browser storage used across khypri.com and app.khypri.com, and your privacy choices under the DPDP Act 2023 and GDPR.

Effective date and version: October 2026 (Version 1.2). This document is available in English only and forms part of, and shall be read together with, the Terms of Service and the Privacy Policy.

1. Scope and Meaning

1.1 This Cookie Policy explains the cookies and similar technologies (browser local storage and session tokens) used on the Khypri AI marketing website (khypri.com) and the Khypri AI learning application (app.khypri.com), and supplements Section 3 of the Privacy Policy.

1.2 “Cookie” means a small text file placed on a device by a website; “local storage” means secure data kept in the browser under the website's own origin and not sent to the server with every request.

2. Categories of Cookies We Use

2.1 The Company uses only strictly necessary security cookies, functional preference cookies, and optional aggregate analytics. It does not use third-party marketing or advertising cookies and does not build behavioural advertising profiles.

  1. Strictly Necessary — Authentication & Security (app.khypri.com):
    • BearerToken: Authorizes secure, encrypted REST API requests for authenticated students, parents, and educators.
    • ASP.NET_SessionId: Standard web application session state cookie, configured with SameSite=Lax and HttpOnly.
    • __RequestVerificationToken: Cryptographic anti-forgery token preventing Cross-Site Request Forgery (CSRF) attacks.
    These cookies cannot be switched off, as they are technically indispensable for signing into the learning platform securely.
  2. Functional — Language & Theme (khypri.com):
    • khypri_lang: Remembers your preferred display language for the marketing site and translated policy documents (retained up to 30 days).
    • khypri_theme: Remembers your preferred interface visual theme (dark or light mode).
    • khypri_cookie_consent_v2: Records your explicit cookie consent choice in browser local storage.
  3. Performance & Analytics (Aggregated Metrics):
    • _ga / _ga_*: Google Analytics cookies used exclusively to assess aggregate website visits and operational performance. Google Analytics is integrated with Google Consent Mode v2: client-side analytics storage is set to denied by default and is only activated if you explicitly choose "Accept All" in the cookie banner. Analytics cookies are never used to track sensitive student learning dialogues or individual academic performance.
    • Cookieless Technical Pings (Consent Mode v2 Advanced): For visitors who have not chosen "Accept All" (or who select "Essential Only"), Google Analytics operates in cookieless mode. No persistent cookies (such as _ga) are written to or read from your browser. In this state, Google receives only anonymous, non-identifying technical pings (page URL, referrer, and approximate country) used strictly for aggregate audience estimation and server load modeling, without creating a personal profile or identifying you.
    • Zero Advertising Signals: Advertising storage, ad user data, and ad personalization signals are permanently set to denied across the platform in strict alignment with Section 9(3) of India's DPDP Act 2023 and US COPPA principles.

3. Child & Student Privacy (DPDP Act 2023 Compliance)

3.1 No Targeted Advertising: Khypri does not sell student personal data, does not permit third-party ad networks on the platform, and does not conduct behavioral tracking or cross-context commercial profiling of minor students.

3.2 Privacy by Design: Under India's Digital Personal Data Protection (DPDP) Act 2023 and global student safety standards, tracking and analytics remain strictly opt-in and can be revoked at any time.

4. Managing and Revoking Your Choices

4.1 Revocation: You can change or revoke your analytics consent at any time by clicking "Cookie Preferences" in the footer of any page or by clearing your browser's site data for khypri.com and app.khypri.com.

4.2 Browser Controls: Most web browsers allow you to block or delete cookies through browser settings. Note that blocking strictly necessary cookies on app.khypri.com will prevent you from signing into the portal.

4.3 Contact & Grievance Officer: Inquiries regarding this Cookie Policy or requests under the DPDP Act 2023 may be directed to our Data Protection Officer at privacy@khypri.com or dpo@khypri.com.

5. Updates to This Policy

5.1 We may update this Cookie Policy from time to time to reflect operational or regulatory changes. Any modifications will be published here with an updated effective date.

Select Language