Cookie Notice · Orbit Connect

1. In short

This website sets only the cookies it needs in order to work. It sets no analytics, advertising or tracking cookies and loads no third-party scripts, fonts or images. Because every cookie below is strictly necessary, we do not ask you to accept cookies.

2. The cookies we set

All of them are first-party, sent only over HTTPS, marked HttpOnly (so page scripts cannot read them) and SameSite=Lax. On a secure connection their names start with __Host-, which stops other sites from overwriting them.

Cookies set by this website
Cookie	What it is for	When it is set	How long it lasts
`__Host-oc_session`	Keeps you signed in. It holds a random token; only a hash of the token is stored on our server.	When you log in.	Until you close the browser, or up to 30 days if you choose "Keep me signed in". The server also ends a session after 2 hours without activity and 12 hours in total, or 14 days and 30 days if you kept it.
`__Host-oc_csrf`	Protects forms from being submitted by another website on your behalf.	When a page with a form is shown, such as log in, sign up or contact.	2 hours.
`__Host-oc_flash`	Carries a one-time message to the next page, such as a confirmation that you signed out.	Only when such a message is shown.	Until you close the browser.

Cookies are not a "consent" matter here because each one is needed to deliver the service you asked for: signing in, submitting a form safely and seeing the result.

3. Other storage and third parties

The site does not use browser local storage or session storage, and does not include analytics, advertising, social-media or other third-party code. Fonts, icons and images are served from this site.

4. Managing cookies

You can delete or block cookies in your browser settings. If you block the cookies above, you will not be able to log in, and forms on the site will be rejected because they cannot be verified.

5. The Orbit Connect app inside Shopify

This notice covers toolsmania.in. The Orbit Connect app that opens inside your Shopify admin is a separate service. It signs you in through Shopify's own authentication and session mechanism, which is governed by Shopify's terms and privacy policy. See our privacy policy for the data the app processes.