Cookie Policy
Comprehensive disclosure of the verified browser cookies, local storage mechanisms, authentication tokens, and payment scripts utilized on LayoverX.
1. What Are Cookies & Browser Storage Technologies?
LayoverX (“LayoverX,” “we,” “us,” or “our”) uses cookies and similar web storage technologies to operate our transit concierge platform (https://www.layoverx.in/), maintain secure passenger sessions, compute flight buffer timelines, safeguard payment transactions, and remember your stopover preferences.
Small data files stored on your web browser by a website server. Cookies allow our platform to recognize your browser on subsequent visits, authenticate your user account, and deliver secure session continuity.
Client-side browser storage that allows our itinerary builder to cache your flight schedules, selected transit hotels, dining venues, and custom draft plans locally on your device without transmitting unnecessary data on every page reload.
These technologies are deployed strictly to provide essential transit functionality, secure checkout flows, and seamless planning for travelers visiting Mumbai CSMIA Terminal 2.
3. Verified Cookie & Storage Inventory
The table below provides a verified inventory of the actual cookies, storage keys, and client-side tokens implemented across the LayoverX production codebase:
| Key / Cookie Name | Provider | Purpose | Category | Duration | Type |
|---|---|---|---|---|---|
| sb-auth-token | LayoverX / Supabase | Encrypted JWT user authentication session token and automatic token refresh | Strictly Necessary | 7 days | First Party (.layoverx.in) |
| layoverx_calculator_data | LayoverX | Caches flight landing & departure times, airline codes, and calculated buffer windows in browser | Functional | Persistent (Local Storage) | First Party |
| layoverx_draft | LayoverX | Stores active layover draft selections (pinned hotel pod, dining, spa, or transfers) and estimated budget | Functional | Persistent (Local Storage) | First Party |
| layoverx_itinerary_items_anon | LayoverX | Maintains guest/unauthenticated itinerary selections before account login or checkout sync | Functional | Persistent (Local Storage) | First Party |
| layoverx_saved_plans_anon | LayoverX | Stores saved multi-service layover plans for guest users prior to account creation | Functional | Persistent (Local Storage) | First Party |
| layoverx_dark_mode | LayoverX | Stores light/dark UI contrast preference toggle | Functional | Persistent (Local Storage) | First Party |
| rzp_checkout_anon_id | Razorpay | Payment checkout order tokenization, fraud risk analysis, and bank gateway handoff | Payment / Security | Session | Third Party (checkout.razorpay.com) |
| cf_clearance / __cf_bm | Cloudflare | Automated bot mitigation, DDoS rate-limiting, and Turnstile security challenges | Strictly Necessary | 30 minutes – 1 year | First / Third Party |
| _ga / _ga_* (Conditional) | Google Analytics | Measures aggregated page visitor numbers and booking funnel completion rates (active only when GA ID is configured) | Analytics | 2 years | Third Party |
4. Client-Side Local Storage & My Itinerary
Our core planning tool, “My Itinerary”, heavily leverages HTML5 Local Storage directly within your browser. This architectural decision guarantees that:
- Your chosen stopover activities (e.g., Niranta hotel pod, express spa treatment, chauffeur airport pickup) remain intact if you accidentally refresh or close the page.
- Your estimated schedule remains accessible even if you experience temporary mobile data dropouts while taxiing on the runway or moving through CSMIA Terminal 2.
- When you subsequently register an account or log in, your draft plans automatically sync to your user profile.
Local Storage Security Guarantee:
LayoverX never stores sensitive payment credentials, credit/debit card numbers, CVVs, passwords, or government identity scans in local storage. All data cached in local storage consists purely of operational transit schedules and preference flags.
You can clear your local storage at any time through your browser settings. Doing so will immediately reset any unsaved draft itineraries on that device.
5. Third-Party Technologies & Scripts
To provide verified airport concierge operations, LayoverX integrates with specific enterprise service providers:
- Razorpay Software Private Limited: Supplies the client-side checkout script (
checkout.razorpay.com) used to launch the secure payment modal, manage 3D Secure bank redirects, and securely process transactions without exposing card data to LayoverX. - Supabase Inc.: Manages encrypted user session cookies and authentication tokens for passengers accessing their booking dashboards and saved itineraries.
- Cloudflare Inc.: Provides Content Delivery Network (CDN) edge caching, DDoS mitigation, and Turnstile bot protection to safeguard platform availability during peak arrival periods.
- Project OSRM / OpenStreetMap: Computes driving distances and travel time estimates between CSMIA T2 and off-airport hotels, restaurants, or South Mumbai excursions without recording personal identity.
- Google LLC (Google Analytics): When enabled in production, analyzes aggregated website traffic and navigation patterns without individual passenger tracking.
6. Cookie Consent & Controls
Because LayoverX relies almost exclusively on strictly necessary session cookies, functional local storage, and payment verification tokens required to assemble itineraries and complete requested bookings, our platform currently relies on direct, transparent browser-level controls rather than an intrusive automated cookie banner.
Under the Digital Personal Data Protection Act, 2023, you have the right to be informed about all data technologies deployed on your device. We provide full transparency in this policy so that you can make informed choices using your web browser’s built-in cookie and site data management settings.
Impact of Disabling Cookies:
You are free to block or clear cookies at any time. However, because our authentication, itinerary builder, and checkout gateway rely on these technical identifiers, blocking or clearing them will result in:
- Inability to log in or maintain your active user session.
- Immediate loss of unsaved draft itineraries and flight time calculations.
- Failure of the Razorpay payment checkout modal to initialize or verify orders.
7. How to Manage Cookies in Your Browser
Most modern web browsers allow you to review, block, or delete cookies and site storage for specific websites. To manage cookies for layoverx.in, follow the instructions for your respective browser:
Go to Settings → Privacy and Security → Third-party cookies. To clear LayoverX data specifically: Settings → Privacy and Security → Site settings → View permissions and data stored across sites → Search “layoverx.in” → Clear data.
On Mac: Safari → Settings (or Preferences) → Privacy → Manage Website Data → Search “layoverx.in” → Remove. On iPhone/iPad: Settings → Safari → Advanced → Website Data → Remove layoverx.in.
Go to Settings → Privacy & Security → Cookies and Site Data → Manage Data → Type “layoverx.in” → Remove Selected.
Go to Settings → Cookies and site permissions → Manage and delete cookies and site data → See all cookies and site data → Search “layoverx.in” → Delete.
8. Policy Updates & Grievance Redressal
LayoverX may update this Cookie Policy from time to time to reflect modifications in our software architecture, new partner integrations, or evolving regulatory standards under Indian law.
Any changes will be posted on this page with an updated “Last Updated” date. We advise travelers to review this policy periodically when planning stopovers through CSMIA T2.
Cookie & Privacy Redressal Desk
If you have questions regarding our deployment of cookies, local storage mechanisms, or third-party scripts, please contact our data governance team: