1. Privacy-by-Design Architecture & Data Minimization
Amaracus Technologies (“AMARACUS”, “we”, “us”) operates cryptographic software infrastructure designed for mission-critical enterprise environments. Unlike commercial advertising platforms, AMARACUS enforces a strict policy of architectural data minimization regarding client storage:
Only strictly essential HTTP-Only session cookies and browser localStorage keys required to authenticate API requests, enforce security boundaries, and record user consent.
Zero third-party advertising cookies, zero cross-site behavioral trackers, zero social media pixels, and zero client-side tracking scripts.
2. Exhaustive Inventory of Cookies & Storage Technologies
The table below enumerates every cookie and local storage technology deployed across AMARACUS domains (amaracus.tech, api.amaracus.tech):
| Key / Cookie | Category | Type & Provider | Duration | Purpose & Statutory Legal Basis |
|---|---|---|---|---|
| sessionToken | Strictly Necessary | HTTP Cookie (First-party, HttpOnly, SameSite=Lax, Secure) | 30 days, renewed while in use | Authenticates API sessions and protects against CSRF. Exempt from consent under ePrivacy Art. 5(3) and GDPR Recital 30. |
| amaracus_session_token | Strictly Necessary | localStorage (First-party client) | Until Sign-Out | Stores bearer token attached to API client headers (Authorization: Bearer). Purged immediately upon logout. |
| amaracus_cookie_consent | Strictly Necessary | localStorage (First-party client) | Persistent | Records user acknowledgment of essential storage and preference configuration so the banner does not repeatedly reappear. |
| amaracus_pref_functional | Functional Preference | localStorage (First-party client) | Persistent | Stores user choice on whether functional UI preferences (like custom theme) may be saved. |
| theme | Functional Preference | localStorage (First-party client) | 1 Year | Remembers user interface dark or light mode preference to prevent screen flicker upon page load. |
| __cf_bm (Conditional) | Strictly Necessary | HTTP Cookie (Cloudflare Edge, SameSite=None, Secure) | 30 Minutes | Distinguishes humans from automated bot attacks to defend edge infrastructure against DDoS. Contains zero personal or tracking information. |
3. Technology Domain Analysis
AMARACUS does not embed ad networks, Google Ads tags, Meta (Facebook) pixels, LinkedIn Insight tags, or cross-context behavioral tracking scripts. We never monetize, share, or sell user device data.
We do not run analytics scripts in your browser (such as Google Analytics, Hotjar or Cloudflare's Web Analytics beacon); the site's Content Security Policy blocks them. Cloudflare, which hosts the website, keeps aggregate request counts from its own server logs, without cookies.
Our application embeds zero third-party iframes (such as YouTube video players, Vimeo embeds, or social feeds) that could silently set tracking cookies. Fonts are served from amaracus.tech itself, so no font provider receives your IP address.
USD checkout (Polar.sh) works by redirecting you to Polar's own pages, where Polar's cookie policy applies. INR checkout (Razorpay) opens Razorpay's checkout window over the Billing Console: Razorpay's script and payment frame load only after you choose to pay in INR, and Razorpay's own cookie and privacy policies apply inside that window. No social login widgets are loaded on AMARACUS pages.
4. Managing Cookies via Browser Settings & Privacy Signals
In addition to our in-app Preference Center above, you can inspect, block, or delete cookies directly through your browser controls:
- Google Chrome: Settings → Privacy and security → Third-party cookies.
- Mozilla Firefox: Settings → Privacy & Security → Enhanced Tracking Protection.
- Apple Safari: Preferences → Privacy → Manage Website Data.
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Because AMARACUS does not engage in cross-site tracking, behavioral profiling, or commercial data sales, our platform is inherently compliant with Global Privacy Control (GPC) and Do Not Track (DNT) header signals.
5. Statutory Inquiries & Grievance Contacts
For questions regarding our device storage practices, contact our privacy and data protection teams below or review our Contact & Company Information Register: