2. How We Use Cookies
We use cookies strictly for the following purposes:
- Authentication: Keep you logged in securely across sessions.
- Session Management: Maintain your cart, preferences, and form data.
- Security: Prevent fraud, detect suspicious activity, enforce rate limits.
- Load Balancing: Route requests to the correct server for performance.
- CSRF Protection: Prevent cross-site request forgery attacks.
- Cookie Consent: Remember your cookie preference (this banner).
We do not use cookies for:
- Tracking your browsing across other websites
- Building advertising profiles
- Analytics or behavioral tracking (we use server-side, privacy-respecting analytics)
- Social media tracking pixels
- Third-party marketing cookies
3. Cookie Categories
All cookies we use fall into the "Strictly Necessary" category:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| trv_access | JWT access token for authentication | 15 minutes | HttpOnly, Secure, SameSite=Lax |
| trv_refresh | JWT refresh token for session renewal | 30 days | HttpOnly, Secure, SameSite=Lax |
| trv_session | Session identifier for server-side session | Session | HttpOnly, Secure, SameSite=Lax |
| trv_csrf | CSRF protection token | Session | HttpOnly, Secure, SameSite=Strict |
| trv_cookie_consent | Records cookie banner acceptance | 1 year | First-party, Secure, SameSite=Lax |
| trv_cart | Shopping cart contents (client-side) | 30 days | LocalStorage (not a cookie) |
| trv_theme | User theme preference (light/dark/auto) | 1 year | LocalStorage (not a cookie) |
| trv_preferences | User UI preferences (sidebar state, etc.) | 1 year | LocalStorage (not a cookie) |
All cookies are set on the .trivenico.com domain (or localhost in development) with the Secure flag (HTTPS only) and appropriate SameSite attributes.
4. Third-Party Cookies
We do not set any third-party cookies on our domains.
However, when you interact with embedded content or external integrations, those third parties may set their own cookies on their own domains:
- Payment Gateways (Stripe, PayPal, Square, etc.): When you checkout, the payment provider may set cookies on their domain for fraud prevention and authentication. Governed by their privacy policies.
- Maps/Location Services: If a store uses Google Maps or similar, Google may set cookies on google.com.
- Video Players (YouTube, Vimeo): Embedded videos may set cookies on their domains when played.Social Media Buttons: If present, social platforms may set cookies when you interact with them.
We have no control over these third-party cookies. Please review their respective cookie policies.
5. Your Choices
5.1 Essential Cookies
You cannot opt out of essential cookies, as they are required for the Services to function. Blocking them via browser settings will break login, checkout, and security features.
5.2 Browser Controls
You can manage cookies through your browser settings:
5.3 LocalStorage & SessionStorage
We use localStorage for theme preference, cart, and UI preferences. You can clear these via browser dev tools or settings. Clearing may reset your preferences.
5.4 Do Not Track
We respect the DNT: 1 header. Since we don't use tracking cookies, DNT has no functional impact but signals your preference.
5.5 Cookie Banner
On first visit, you'll see a banner: "We use only essential cookies. [Got it]". Clicking "Got it" sets the trv_cookie_consent cookie for 1 year and hides the banner. You can clear this cookie to see the banner again.
6. Contact Us
Questions about this Cookie Policy:
Email: privacy@trivenico.com
Postal: TriveniCo, Inc., Thamel, Kathmandu 44600, Nepal
This Cookie Policy is part of our Privacy Policy and Terms of Service.