Cookies Policy

Cookies are small text files a website stores on your device to remember something — a login, a preference, or (on other sites) your behaviour for advertising. “Local storage” is a similar browser mechanism we use for settings. Under India’s DPDP Act, 2023, anything that identifies or tracks you — cookies included — needs your informed consent, except what is strictly necessary to run the service you asked for.

The marketing site you are reading sets no advertising cookies and no third-party tracking cookies. Fonts are served from our own servers, so no external tracker watches your visit. What we do store:

• Strictly necessary local storage — your signed-in session reference is kept in your browser’s local storage under a crugex:user key so the app can restore your view between page loads, plus small preference entries. Clearing it signs you out on this device.
• Authentication cookies — sign-in is handled by our authentication provider (Supabase), which sets strictly necessary session cookies for the authentication domain only. These keep you logged in securely and are not used for tracking.
• First-party access flags — when you are signed in, Crugex sets two cookies on its own domain, crugex_auth and crugex_role (a value like student, instructor or recruiter). They hold no tokens, identifiers or personal data; they exist only so the server can show signed-in visitors the right home page and never paint a page their role can’t use. They expire after 30 days or when you sign out.
• Your product data lives server-side — course progress, assessments, applications and proof records are stored in Crugex’s database, not in your browser. See the Privacy Policy for the full picture.

That is the complete list. No analytics scripts, no advertising pixels, no social-media trackers — on this page or anywhere on the site.

Inside the app, your courses, skills and proof records live on our servers — nothing about your progress is stored on your device beyond your sign-in session and small interface preferences. All of it is tied to your account and covered by the Privacy Policy. If we ever add analytics or marketing cookies, we will show a consent notice first, describe each purpose, and let you refuse without losing access to the core service.

Like every internet service, our servers keep request logs (IP address, timestamps) for security. Under CERT-In directions these logs are retained for a rolling 180 days on servers located in India, then deleted. They are used for security and abuse-prevention only — never for advertising.

• Every browser lets you delete cookies and local storage, or block them per-site. Clearing Crugex's local storage signs you out on that device; your account data stays server-side.
• Deleting your Crugex account removes the data tied to your session; see the Privacy Policy for the full deletion picture.
• Questions about a specific item of storage? Write to support@crugex.com and we will tell you exactly what it does.

If our cookie practices change — for example, when we introduce privacy-respecting product analytics — this page and the consent notice will be updated before anything new touches your device.