Cookie and Browser Storage Policy

1. Essential Storage Only Ruhanir IT does not use invasive third-party cross-site advertising or tracking cookies. We utilize strictly necessary first-party browser cookies and local storage required to operate authenticated portal sessions and preserve user language preferences.

2. Inventory of Browser Cookies & Storage Keys The following keys are set directly by our platform: - **`sb-access-token`**: Secure session authentication token generated by Supabase to maintain your authenticated staff or administrative session. - **`engine_realm`**: Internal session state token identifying active application realm (`erp_portal` vs. platform console). - **`preferred_lang`**: Remembers your preferred storefront and documentation language (`en` or `bn`). Stored in cookies and localStorage with a 1-year expiration.

3. Bot Protection & Verification (Cloudflare Turnstile) To protect portal onboarding (`/apply`), password resets, and public contact forms from automated spam and credential stuffing, we integrate **Cloudflare Turnstile**: - **Where Deployed**: Exclusively on interactive security forms (login, apply, contact). It is not loaded during general content browsing. - **Privacy Assurance**: Turnstile does not deploy persistent third-party tracking cookies or cross-site profiling cookies. Cloudflare processes ephemeral, privacy-preserving browser signals within the session solely to distinguish human visitors from automated bots. - **Network Telemetry**: Client IP address and challenge timestamp are processed directly by Cloudflare, Inc. under Cloudflare's Privacy Policy.