This Cookie Policy explains how MoveTara ("we", "us", "our") uses cookies, local storage, and similar technologies when you access the MoveTara web platform at www.movetara.com and our mobile application.

1. What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They help the website remember your preferences, login state, and other information to improve your experience. Similar technologies include local storage, session storage, and device identifiers used in mobile apps.

2. Types of Cookies We Use

Type	Purpose	Duration	Required?
Essential / Authentication	Keeps you logged in, stores your session token (Supabase auth token), and maintains your security context	Until logout or session expiry	Yes — app cannot function without these
Preference	Stores your selected theme (light/dark mode), language, dashboard layout preferences, and notification settings	Persistent (until cleared)	Yes — for consistent user experience
Local Storage	Caches frequently accessed data (hostel details, room configurations) for faster loading and offline access	Persistent (until cleared)	Yes — for app performance
Push Notification Token	Stores Firebase Cloud Messaging (FCM) device token to deliver push notifications	Until token refresh or app uninstall	Optional — only if notifications enabled

3. Third-Party Cookies

The following third-party services may set cookies or use similar technologies when you use MoveTara:

Service	Purpose	Type
Supabase	Authentication session management	Essential
Firebase (FCM)	Push notification delivery token	Functional

We do not use Google Analytics, Facebook Pixel, or any advertising/tracking SDKs.

4. How to Manage Cookies

You can control cookies through the following methods:

• Browser settings: Most browsers allow you to block or delete cookies via Settings → Privacy → Cookies. Note that blocking essential cookies will prevent you from using MoveTara.
• Clear app data: On mobile, go to your device Settings → Apps → MoveTara → Clear Data to remove all locally stored data.
• Logout: Logging out of MoveTara clears your authentication session and related tokens.
• Disable notifications: Go to MoveTara Settings → Notifications to disable push notifications and revoke the FCM token.

5. Data Stored in Mobile App

When using the MoveTara mobile app, the following data is stored locally on your device:

• Authentication token (encrypted) for maintaining your OTP-verified login session
• User preferences (theme, notification settings)
• Cached hostel and room data for faster loading
• FCM push notification token (if notifications are enabled)
• MPIN hash for quick app access (stored securely, never in plaintext)

All locally stored data is deleted when you uninstall the app or clear app data from your device settings.

6. Do Not Track

MoveTara respects "Do Not Track" (DNT) browser signals. Since we do not use tracking or advertising cookies, our behavior does not change based on DNT settings — we never track you across websites regardless.

7. Changes to This Policy

We may update this Cookie Policy if we introduce new technologies or change how we use cookies. Updates will be reflected with a revised "Last Updated" date at the top of this page.