Cookie Policy

A cookie is a small text record a website asks your browser to keep and send back on later visits. Browsers also offer local storage and session storage, which stay on your device and are never sent to any server. This page lists every one of these that LandSahi uses, in full. There is nothing else.

Essential, set only when you use the feature

• ldai_session (cookie, first party): set when you sign in and only then. It holds your account id, an expiry and a signature proving we issued it. It is marked HttpOnly and Secure, so page scripts cannot read it and it travels only over HTTPS. It lasts 30 days or until you sign out; signing out deletes it. Without it nothing on the site can tell you are signed in, so it cannot be refused while staying signed in.
• ldai_oauth (cookie, first party): set only when you press Continue with Google, and only on a deployment where that button is offered. It holds a random value that proves the reply from Google belongs to this browser, plus the page to return you to. HttpOnly and Secure, sent only to the address that completes the sign-in, and deleted the moment the sign-in completes or after ten minutes, whichever comes first.
• lang (cookie, first party): remembers whether you chose English or मराठी. Set only when you press the language switch in the header, kept for one year, sent only to this site. Its value is the two letters of the language and identifies nobody.
• theme (local storage): light or dark. Written only when you press the theme toggle. Never leaves your device.
• ls_consent (local storage): the choice you make on the cookie notice, with the date you made it, so the notice does not return on every page. Kept for one year, then the notice asks again. Never leaves your device, which is why the same person on another browser or phone sees the notice afresh.
• ls_signin_dismissed (session storage): set when you close the sign-in prompt or choose Continue as guest, so the prompt does not return on the next page. Discarded when the tab closes. Never leaves your device.
• Usage measurement id (session storage): a random identifier held for the life of one browser tab so that page views from that tab can be counted as one visit on our own servers. Discarded when the tab closes. It is not a cookie, is never sent to any other website, and is not joined to any advertising profile. What that measurement records and does not record is set out in the privacy policy.

Set by a third party, only if you use that feature

• Razorpay (only on the checkout page, while you pay): the payment window writes a session cookie, rzp_unified_session_id (about 30 minutes), and rzp_device_id, rzp_checkout_anon_id and rzp_stored_checkout_id in local storage and __rzp_risk in session storage on this site, to hold the payment session together and check it for fraud. Inside its own window, Razorpay and the fraud-check services it loads (Stripe, Sardine, hCaptcha) set cookies on their own domains, under Razorpay's terms. None of these exist unless you open a payment.
• googtrans (cookie, Google): written only if you press EN on a Marathi report, to tell Google's translation widget which direction to translate. Switching back clears it. The widget itself, and what it sends to Google, is described in the privacy policy.
• _ga and _ga_* (cookies, Google Analytics): exist only on a deployment where a Google Analytics measurement id has been configured, and even then only after you choose "Allow analytics" on the cookie notice. Until you do, nothing loads from Google and none of these cookies exist. They let Google recognise a returning browser and last up to two years. Where analytics is not configured at all, the notice offers no such choice, because there is nothing to allow.

How we ask

On your first visit a small notice at the foot of the page tells you about the essential cookies above. It asks a question only where there is something optional to decide, which today means Google Analytics on a deployment that has it configured. Your answer is stored on your device as described above. You can change it at any time: Cookie settings. The notice is never shown inside a PDF export.

Controlling cookies in your browser

Every browser lets you view, delete and block cookies and site data from its settings. Blocking the session cookie signs you out; blocking the language cookie returns the site to English; neither breaks anything else. Deleting site data also deletes your cookie-notice choice, so the notice appears again.

What we do not use

No advertising cookies, no retargeting pixels, no social-media buttons that report your visit, no cross-site tracking of any kind. Map imagery from Esri and the network edge from Cloudflare see the requests your browser makes to them, which is a matter of network addresses rather than cookies; both are described in the privacy policy.

Changes

If a new cookie or storage item is ever added, it is added to this page in the same release and the effective date above moves. The list here is the complete list at the date shown.