← Home

Cookie Policy

Last updated: September 21, 2026

On this page

1. Introduction

  • This Cookie Policy ("Policy") explains how Carnatic Foods Private Limited ("Company", "we", "us", or "our") uses cookies and similar tracking technologies on the raagas website, progressive web application, and related digital properties (collectively, the "Platform").
  • This Policy should be read together with our Privacy Policy (raagas.co.in/legal/privacy), which provides detailed information on how the Company collects, processes, stores, and protects Personal Data. By continuing to use the Platform, You consent to the use of strictly necessary cookies (which are essential for the Platform to function and do not require consent). For all other categories of cookies, the Company shall obtain Your explicit, informed consent before placing them on Your device, in compliance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

2. What Are Cookies

Cookies are small text files that are placed on Your device (computer, smartphone, tablet, or other internet-enabled device) when You visit a website or use a web application. Cookies are widely used by website operators to make their websites and applications function efficiently, to improve the user experience, to remember preferences, to provide analytics and performance information, and to deliver relevant advertising. The term "cookies" in this Policy also encompasses similar technologies — including local storage, session storage, IndexedDB, web beacons (pixel tags or tracking pixels), service workers, and device fingerprinting — which serve comparable or related purposes. All references to "cookies" in this Policy include these similar technologies unless otherwise specifically stated.

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

  • These cookies are essential for the Platform to function correctly and securely. Without them, core features such as page navigation, user authentication, shopping cart functionality, and security protections would not operate. These cookies do not require Your consent as they are necessary for the provision of the service You have explicitly requested.
  • Authentication and session cookies: Maintain Your logged-in state, session identity, and authentication tokens across pages during a browsing session and between visits (for persistent login).
  • Security cookies: Cross-Site Request Forgery (CSRF) tokens and other security mechanisms that protect Your Account and transactions against unauthorised actions, session hijacking, and replay attacks.
  • Cart persistence: Store Your shopping cart contents in local storage so that items, quantities, customisations, and special instructions are retained during Your session and across page navigations.
  • Load balancing and performance: Distribute traffic optimally across servers and data centres for consistent Platform performance.
  • Cookie consent preference: Store Your cookie consent choices and preferences so that You are not repeatedly presented with the consent banner on subsequent visits.
  • Service worker: Manage offline caching, background synchronisation, and push notification functionality for the progressive web application.

3.2 Functional Cookies

  • These cookies enable enhanced functionality and personalisation features on the Platform. They may be set by the Company or by third-party providers whose services are integrated into the Platform. If You do not allow these cookies, some or all of these features may not function properly or may revert to default settings.
  • Outlet and location preferences: Remember Your most recently selected raagas outlet and saved delivery addresses.
  • UI preferences: Store user interface preferences such as high contrast mode, display density, and layout preferences.
  • Language and region: Remember Your language and regional display preferences.

3.3 Analytics and Performance Cookies

  • These cookies collect information about how visitors use the Platform — including which pages are visited most frequently, time spent on pages, navigation patterns, technical errors encountered, and traffic sources. This information is used to analyse Platform performance, identify technical issues, and improve the overall user experience. Unless otherwise stated, all analytics data is aggregated and does not identify individual Users.
  • Google Analytics 4 (_ga, _ga_8G2BQB9XKP): Collects pseudonymous and aggregated usage data including pages visited, session duration, bounce rate, traffic sources, device and browser type, and approximate geographic region (country/city level). Provider: Google LLC (United States). Data retention: Up to 14 months. Privacy: policies.google.com/privacy.
  • Sentry (sentry-*): Collects error logs, JavaScript exception reports, crash data, performance metrics (page load times, API response times), and application traces to help the Company identify, diagnose, and resolve technical issues. Provider: Functional Software, Inc. (United States). Data retention: 90 days. Privacy: sentry.io/privacy.

3.4 Marketing and Advertising Cookies

  • These cookies are used to deliver advertisements that are relevant to You, to measure the effectiveness of advertising campaigns, to attribute conversions (e.g., an Order placed after clicking an advertisement), and to limit the number of times You see a particular advertisement. They may be set by advertising networks with the Company's permission and are only placed with Your explicit consent.
  • Meta Pixel (_fbp, _fbc): Tracks conversions from Meta (Facebook and Instagram) advertisements, builds targeted audience segments for future advertising campaigns, and enables remarketing to Users who have visited the Platform. Provider: Meta Platforms, Inc. (United States). Data retention: Up to 180 days. Privacy: facebook.com/privacy/policy.
  • The Company does not sell Your Personal Data to advertisers. Marketing cookies are placed on Your device only after You have provided explicit, informed consent through the cookie consent banner. You may withdraw this consent at any time (see Section 7).

4. Cookie Inventory

  • The following is a detailed inventory of the principal cookies and similar technologies used on the Platform. This inventory is maintained and updated periodically; additional cookies may be introduced as the Platform evolves.
  • Strictly Necessary — auth_token | raagas.co.in | Stores encrypted authentication JWT for session persistence | Persistent | 30 days | First-party
  • Strictly Necessary — csrf_token | raagas.co.in | Cross-site request forgery protection token | Session | Browser close | First-party
  • Strictly Necessary — cart_state | raagas.co.in (localStorage) | Shopping cart contents and customisations | Persistent | Until cleared | First-party
  • Strictly Necessary — raagas.website-consent.v2 | raagas.co.in (localStorage) | Stores cookie consent choices | Persistent | 180 days | First-party
  • Strictly Necessary — sw-* | raagas.co.in | Service worker cache and sync data | Persistent | Until cleared | First-party
  • Functional — selected_outlet | raagas.co.in (localStorage) | Remembers selected outlet and location | Persistent | 90 days | First-party
  • Functional — ui_prefs | raagas.co.in (localStorage) | High contrast mode and UI settings | Persistent | Until cleared | First-party
  • Analytics — _ga | raagas.co.in | Google Analytics client identifier | Persistent | 14 months | First-party (set by Google Analytics)
  • Analytics — _ga_8G2BQB9XKP | raagas.co.in | Google Analytics 4 state for this measurement stream | Persistent | 14 months | First-party (set by Google Analytics)
  • Analytics — sentry-* | Mobile application, not the website | Error monitoring session and replay data | Persistent | 90 days | Third-party (Sentry)
  • Marketing — _fbp | raagas.co.in | Meta Pixel browser identifier | Persistent | 90 days | Third-party (Meta)
  • Marketing — _fbc | raagas.co.in | Meta Pixel click identifier | Persistent | 180 days | Third-party (Meta)
  • Marketing — _gcl_aw | raagas.co.in | Google Ads click identifier, set only when You arrive from a Google advertisement and have allowed advertising cookies | Persistent | 90 days | First-party (set by Google Ads)
  • Payment — cf_* | cashfree.com | Cashfree payment session and fraud detection | Session/Persistent | Varies | Third-party (Cashfree)
  • Push — fcm_token | raagas.co.in (localStorage) | Firebase Cloud Messaging device token | Persistent | Until cleared | Third-party (Google/Firebase)

5. Session Cookies vs Persistent Cookies

5.1 Session Cookies

Session cookies are temporary cookies that exist only for the duration of Your browsing session. They are automatically deleted when You close Your browser window or tab. Session cookies are used for essential functionality such as maintaining Your authenticated state, CSRF protection, and payment processing context during a single browsing session.

5.2 Persistent Cookies

Persistent cookies remain stored on Your device for a defined period (ranging from 24 hours to 14 months, depending on the specific cookie) or until You manually delete them through Your browser settings. Persistent cookies are used to remember Your preferences, login status, consent choices, and analytics identifiers across multiple visits to the Platform.

6. First-Party vs Third-Party Cookies

6.1 First-Party Cookies

First-party cookies are set by the Company on the raagas.co.in domain. These cookies are used for core Platform functionality, user preferences, cart persistence, and the Company's own analytics. The Company has direct control over first-party cookies and their data.

6.2 Third-Party Cookies

Third-party cookies are set by external service providers whose services are integrated into the Platform. These third-party providers include: Google LLC (Google Analytics, Firebase Cloud Messaging), Meta Platforms, Inc. (Meta Pixel), Functional Software, Inc. (Sentry), and Cashfree Payments (payment processing). The Company does not control the cookies set by these third-party providers. For information on their cookie practices, data collection, and opt-out options, please refer to their respective privacy policies (linked in the Cookie Inventory above and in the Privacy Policy).

7. Consent and Managing Your Cookie Preferences

7.1 Cookie Consent Banner

  • When You first visit the Platform (or after clearing Your cookies), a cookie consent banner is displayed prominently. The banner provides the following options:
  • Accept All: Consents to all categories of cookies — strictly necessary, functional, analytics and performance, and marketing and advertising.
  • Reject All: Rejects all non-essential cookies. Only strictly necessary cookies (which do not require consent) shall be placed on Your device.
  • Customise: Opens a granular preference panel allowing You to individually select which categories of non-essential cookies (functional, analytics, marketing) You wish to allow or reject.
  • Non-essential cookies (functional, analytics, and marketing) are NOT placed on Your device until You provide affirmative consent by clicking "Accept All" or selectively enabling specific categories through "Customise". Merely continuing to browse the Platform, scrolling, or navigating to other pages does not constitute consent for non-essential cookies. Pre-ticked checkboxes are not used, in compliance with Section 6 of the Digital Personal Data Protection Act, 2023.

7.2 Changing Your Preferences

You may change Your cookie preferences at any time by clicking the "Cookie Settings" link available in the Platform footer. This re-opens the cookie preference panel, allowing You to modify Your choices. Changes to Your preferences take effect immediately for new cookies. Existing cookies from a previously accepted category will continue to exist on Your device until they expire or You manually clear them through Your browser settings.

7.3 Browser Settings

  • Most modern web browsers provide built-in controls to manage cookies. Common options available through browser settings include:
  • Block all cookies or block only third-party cookies.
  • Delete all existing cookies and site data.
  • Set preferences for specific websites (allow or block cookies per site).
  • Receive a notification or prompt before a cookie is placed on Your device.
  • Note: Blocking or deleting strictly necessary cookies may significantly impair Platform functionality, including authentication, cart persistence, CSRF protection, and payment processing. The Company is not responsible for degraded functionality resulting from the User's browser cookie settings.

7.4 Mobile Device Settings

On mobile devices, You can manage tracking, advertising identifiers, and cross-app tracking permissions through Your device settings. On iOS: Settings > Privacy & Security > Tracking (toggle per-app tracking permission). On Android: Settings > Google > Ads > Opt out of Ads Personalisation (or Delete Advertising ID). Disabling advertising identifiers or app tracking limits the ability of marketing cookies and third-party advertising networks to build a profile based on Your activity across apps and websites.

8. Consent Management

  • The Company maintains records of Your cookie consent choices — including the date and time of consent, the specific categories of cookies consented to, and any subsequent modifications or withdrawals — for a period of seven (7) years from the date of consent, in compliance with the Digital Personal Data Protection Rules, 2025.
  • If the Company makes material changes to the types of cookies used, introduces new categories of cookies, or significantly changes the purposes for which cookies are used, the Company may reset Your cookie preferences and present a fresh consent banner, requiring You to provide new consent before non-essential cookies are placed.
  • You may withdraw Your consent for non-essential cookies at any time through the "Cookie Settings" link in the Platform footer, with the same ease with which consent was originally given. Withdrawal of consent shall not affect the lawfulness of cookie-based processing carried out prior to the withdrawal.
  • When a Consent Manager registered with the Data Protection Board of India under the DPDP Act becomes available and applicable, the Company shall integrate with such Consent Manager to enable You to manage Your cookie consents through a standardised, accessible, and interoperable interface.

9. Do Not Track and Global Privacy Control

  • Do Not Track (DNT): Some web browsers include a "Do Not Track" signal that communicates to websites that the user does not wish to be tracked. As there is currently no universally accepted standard for how websites should interpret and respond to DNT signals, the Platform does not currently alter its data collection or cookie behaviour in response to DNT signals. You can manage tracking preferences through the cookie consent controls described in Section 7.
  • Global Privacy Control (GPC): The Company acknowledges the emerging Global Privacy Control (GPC) signal as a mechanism for communicating privacy preferences. While GPC is not currently mandated under Indian law, the Company monitors the development of this standard and may implement GPC signal recognition in a future update to this Policy.

10. Cookies and Personal Data

Certain cookies may collect or be associated with Personal Data — including Your IP address, device identifiers, unique analytics identifiers, browsing behaviour, and location data (approximate). Any Personal Data collected through or in association with cookies is processed in accordance with our Privacy Policy (raagas.co.in/legal/privacy) and the Digital Personal Data Protection Act, 2023. The legal basis for processing Personal Data through strictly necessary cookies is contract performance (Section 7(a) of the DPDP Act — processing necessary for the provision of the service requested by the Data Principal). For all other categories of cookies, the legal basis is Your explicit consent (Section 6 of the DPDP Act).

11. Children's Privacy

The Platform is not directed at children under eighteen (18) years of age. The Company does not knowingly place tracking, behavioural monitoring, profiling, or targeted advertising cookies on the devices of children, in compliance with Section 9 of the Digital Personal Data Protection Act, 2023, which prohibits tracking or behavioural monitoring of children and targeted advertising directed at children.

12. Changes and More Information

  • The Company reserves the right to modify this Cookie Policy at any time to reflect changes in technology, legal or regulatory requirements, or business practices. Changes shall be effective upon publication on the Platform with an updated "Last Updated" date. For material changes (including the introduction of new cookie categories or significant changes in cookie purposes), the Company may reset Your cookie preferences and request fresh consent.
  • To learn more about cookies, how they work, and how to manage them, visit the following external resources:
  • aboutcookies.org — General information about cookies and privacy
  • allaboutcookies.org — Detailed guides on managing cookies across different browsers and devices
  • youronlinechoices.eu — Opt-out of online behavioural advertising from participating companies
  • For any questions, concerns, or requests regarding our use of cookies and tracking technologies, contact: care@raagas.co.in

Contact

For questions about this policy, contact:

Carnatic Foods Private Limited

CIN: U56100TN2025PTC180902

Registered Office: Plot No. 87, Sun Garden, Morattandi, Auroville, Vanur, Villupuram, Tamil Nadu 605101, India

Email: care@raagas.co.in

Designation: Director, Grievance Redressal Officer, Nodal Officer & Data Protection Officer

Grievance and DPO Email: care@raagas.co.in