Cookie Policy

Last modified: September 14, 2026 · Version 2026-09-14

1Cookies and how we use them

This Cookie Policy explains how Circin ("we", "us") uses cookies and similar technologies on the website circin.ai (the "Website"). It should be read together with our Privacy Policy, which describes how we handle personal data across the Circin platform, including the mobile applications used by schools, teachers, students, parents and drivers. This policy covers the Website only.

A cookie is a small text file that a website places on the device you use to browse the internet, and that the same website can read back on later requests. We use the word "cookie" in this policy to also cover similar technologies that store or read information on your device — browser localStorage, IndexedDB, and comparable storage — because the law treats them the same way.

In short: this Website uses only required cookies — the ones it needs to work and to keep you safe. It does not use analytics, personalisation or advertising cookies, and no third party sets a cookie on this Website. Because nothing optional is stored, we show you a short notice rather than asking for consent; the sections below explain the details and what would change if that ever differs.

2Your cookie choices

  • The cookie notice. On your first visit we show a notice at the bottom of the page. Choosing OK records that you have seen it. If we ever introduce optional cookies, the same notice will instead offer Accept all, Reject optional and Manage settings, with every optional category switched off until you turn it on, and rejecting will be as easy as accepting. You will be asked again if this policy changes materially.
  • Cookie settings. You can review or change your choices at any time from the link in the footer of every page.
  • Global Privacy Control (GPC). If your browser sends the GPC signal, we treat it as a refusal of every optional category: the banner still tells you that we use required cookies, but optional cookies are kept off, cannot be switched on, and no "Accept all" is offered while the signal is present — even if you accepted them on an earlier visit.
  • Your browser. You can set your browser to block or delete cookies, or to warn you before a cookie is stored: Chrome, Firefox, Safari, Edge. Blocking the required cookies listed below will stop parts of the Website — such as signing in or sending the contact form — from working.

3Types of cookies we use

Required cookies (always on)

Needed for the website to work: keeping you signed in, protecting forms against forgery, remembering that you have seen this notice, and running the human check on the contact form. They cannot be switched off.

Name Set by Type Lasts What it is for
circin_session Circin (first party) HTTP cookie 8 hours Identifies your browsing session so the pages you open belong together and, after you sign in, keeps you signed in. Marked HttpOnly and Secure. Set for our whole site domain, so it is also sent to our sub-domains; the 8-hour window restarts on each request.
XSRF-TOKEN Circin (first party) HTTP cookie 8 hours Security token that proves a form or request was sent from this website and not forged by another site (CSRF protection). Same domain scope and 8-hour window as circin_session.
circin_cookie_consent Circin (first party) HTTP cookie 12 months Remembers that you have seen this notice — it stores the policy version you saw, the date and time you dismissed it and, if optional categories are ever offered, the choices you made — so we do not ask again on every visit. It contains no identifier.
theme Circin (first party) localStorage Until you clear site data Remembers whether you chose light or dark mode. Only written when you use the toggle.
firebaseLocalStorageDb Google Firebase (on our behalf) IndexedDB Until you sign out or clear site data Holds the sign-in state created by Firebase Authentication — for email-and-password, "Sign in with Google" and email sign-in links alike. Only created on the sign-in pages (/login and the sign-in link page).

Categories we do not use

  • Personalisation: Remembers choices that go beyond what the site needs to function. Not used on this Website.
  • Analytics: Measures how visitors use the website (pages visited, time on page) so we can improve it. Off until you switch it on. Not used on this Website.
  • Advertising: Builds a profile of your interests to show you advertising elsewhere. We do not sell or share personal data for advertising. Not used on this Website.

4Third-party services your browser contacts

Some parts of the Website are delivered by other companies' servers. When your browser fetches them, that company receives your IP address and basic browser details, as any web server does. None of these services sets a cookie on this Website; each processes the request under its own privacy policy, linked below. These providers operate servers outside India and the European Economic Area, so your IP address may be processed in other countries; each provider publishes the safeguards it applies to such transfers in the policy linked.

Service Where Why we use it What it receives Their policy
Cloudflare Turnstile
challenges.cloudflare.com
Home page only (the contact form) Tells human visitors apart from bots without a CAPTCHA puzzle. Runs inside an isolated frame from Cloudflare. IP address, browser and device signals used for the check www.cloudflare.com
Google Fonts
fonts.googleapis.com, fonts.gstatic.com
Password-reset and email-verification pages only Serves the typeface used on those pages. IP address and browser details policies.google.com
Firebase Authentication (Google)
identitytoolkit.googleapis.com, securetoken.googleapis.com, circin-prod.firebaseapp.com, www.gstatic.com, apis.google.com, developers.google.com, accounts.google.com
Sign-in pages only (/login and the sign-in link page) Verifies staff sign-ins. Every sign-in — email and password, "Sign in with Google", or a sign-in link from an email — is checked by Firebase Authentication, which we use as our identity provider. IP address; the email address and password you enter (over an encrypted connection), or your Google account details if you sign in with Google policies.google.com
Content delivery networks (cdnjs.cloudflare.com, unpkg.com, cdn.jsdelivr.net)
cdnjs.cloudflare.com, unpkg.com, cdn.jsdelivr.net
All pages Deliver the open-source scripts and styles the pages are built with. IP address and browser details www.cloudflare.com

5How long cookies stay

Session cookies are deleted when you close your browser. Persistent cookies stay for the period shown in the tables above, or until you delete them.

The cookie that remembers that you have seen the notice lasts 12 months. After that, or sooner if this policy changes materially, you will be shown the notice again.

7Changes to this policy

We update this policy when the cookies we use change. The version and "last modified" date at the top tell you which edition you are reading; a material change re-triggers the notice so you see it on your next visit.

8Contact and grievance redressal

Questions about cookies or this policy: support@circin.ai.

Grievances under the Digital Personal Data Protection Act, 2023 may be addressed to our grievance-redressal team at support@circin.ai. We acknowledge grievances within the period the Act and its rules prescribe.

Circin, Ground floor, Cinnabar Hills, Embassy Golf Links Business Park, Challaghatta, Bengaluru, Karnataka 560071, India.