Cookie Policy & Telemetry Framework · effective 6 July 2026

What we store on your device , and why.

Written under the Information Technology Act, 2000 and Indian digital commerce data management practice. It covers HTTP cookies, local browser storage, secure tracking tokens, mobile SDK pixel tracking and the similar automated logging tools we deploy.

How to control them
5
Categories of cookie deployed
4
Purposes they serve
2
Retention windows: session, persistent
0
Cookies tracking minors
16
Clauses in this policy
12h
Support, every day of the week
What a cookie actually is

Small text files, doing specific jobs

Cookie architectureHighly secure, serialised text configuration files or small string files deployed to your browser's local memory or mobile device storage by a web application server.
What they doThey act as specialised network memory keys, letting our core servers keep you securely signed in, protect your profile from session hijacking, optimise dashboard rendering speeds, analyse visitor volume trends, detect malicious automated bot activity, and continuously refine system processing.
Why we use them

Four jobs behind the scenes

To sustain high concurrency across our mobile recharges and Bharat Connect utility processing streams.

User authentication

Verifying individual profile sessions and preventing account hijacking during checkout routines.

Security and risk mitigation

Blocking unauthorised dashboard entry and validating browser fingerprint signatures.

Session integrity

Tracking transaction payloads safely as you move from the review page through to the payment gateway.

Performance telemetry

Recording page loading delays, database call latency and system API responses to clear technical errors.

Types deployed

Five categories, and what sits in each

1

Strictly necessary and essential

Critical configuration strings required for basic system operations: active login session codes, OTP session validation tracking, Cross-Site Request Forgery (CSRF) protection signatures, and payment gateway secure authentication tokens. Disabling these will halt transaction capabilities.

2

Performance and system telemetry

Data logging tools used exclusively to monitor infrastructure responses — page loading times, API network delay logs, connection timeout frequencies, error rates and path maps.

3

Functional and preference

Storage blocks that save user selections: UI theme modes, language preferences, recently used service billers and preferred payment methods.

4

Security and anti-fraud control

High-priority protection tools that analyse session details to flag account takeover risks, check suspicious changes in device metadata, identify automated bot attacks and protect user financial files.

5

Analytics and behavioural insight

Metric monitors that generate statistical reports on unique user metrics, average processing durations, mobile browser types and app use patterns.

+

Retention windows

Session cookies clear automatically when you log out or close the client window. Persistent cookies remain in browser storage until they hit their set expiry limits or you wipe them manually.

Mobile and third parties

Outside the browser, and beyond our own servers

Mobile app telemetry

CLAUSE 5

Because native Android packages and Apple iOS bundles operate outside standard desktop browser environments, our mobile apps use secure cryptographic session keys, distinct Firebase Cloud Messaging tokens, native mobile device indicators and application preference properties — to deliver verified push notifications, maintain secure backend API sessions, verify account states and handle crash tracking.

Third-party integrations

CLAUSE 6

We work with trusted financial partners, cloud providers, anti-fraud infrastructure systems and operational analytics vendors. These partners may place telemetry markers or invoke analytical SDK protocols across our interfaces to perform transaction security checks, deliver messaging alerts or log system crashes.

Device recognition

CLAUSE 7

Our automated intake layer reviews standard network headers to record device types, operating system versions, browser strings, window sizes and localised time zones. This is used solely to optimise application layouts and block suspicious cross-region account activity.

Fraud mitigation

CLAUSE 8

Telemetry logging blocks cyber threats by tracking duplicate login events, flagging unexpected device switches during checkout, stopping automated password guessing and checking interface performance.

Customisation

CLAUSE 9

The same logging saves your recently used telecom operators and configuration options, to create a smoother and faster payment experience next time.

Children and Do Not Track

CLAUSES 12, 13

There is currently no shared international standard for "Do Not Track" browser signals; Anpay processes data uniformly in line with this framework and applicable Indian digital laws. We do not use cookies to track or gather profile records from minors.

Managing cookie settings

You can block them. Here is the cost.

Restricting essential security cookies

You can block or clear cookies using your browser's built-in preferences. But be aware that restricting essential security cookies will block access to premium payment tools, prevent account logins, and halt the delivery of Bharat Connect bill payments.

Accountability

Who this policy answers to

VD
Vaskar Das
Founder & Director

Signs off on what telemetry the platform collects and why.

"Every token we set has to earn its place — either it keeps the session safe, or it goes."

This framework applies when you access, browse or execute transactions through our official website corridors, Android packages and Apple iOS bundles, customer portals, specialised merchant transaction desks and administrative dashboards.

It is linked with our Corporate Privacy Policy, Terms & Conditions and Grievance Redressal Policy.

Effective 6 July 2026IT Act 2000Indian digital commerce regulations
Questions about tracking

Ask the compliance desk

Anything about what is stored on your device, or how to switch a category off.

Corporate statutory coordinates

Legal titleAnpay Ventures Private Limited
CINU63990WB2024PTC272006
GSTIN19ABBCA0218R1ZH
Registered office1st Floor, Narayanpur, Kumarganj, Balurghat, Dakshin Dinajpur, India
Effective date6 July 2026

Unified helpdesk channels

General bureauinfo@anpay.in
Support operationssupport@anpay.in
Settlement & reversalsdispute@anpay.in
B2B partnershipsbusiness@anpay.in
Voice hotline011 6929 0388
WhatsApp corridor+91 94341 16115
Service window11:00 AM to 11:00 PM IST, every day
Tell us your name
Enter the 10-digit number on your account
Enter an email we can reply to
Pick the one that fits best
0 / 1000
A few lines, please — enough for us to act on

We never ask for your OTP, MPIN, card CVV, full card number or UPI PIN.