Cookie Policy

Cookies are small text files a website places on your browser to remember things between visits — like whether you are signed in, what is in your cart, or how you arrived at the site. This page explains exactly which cookies VASMYST uses, why, how long they stick around, and how to switch them off.

These cookies are essential for the website to function. Without them, you cannot sign in, place an order, or access your account. VASMYST uses a session cookie set by our authentication system (express-session) to keep you signed in as you move between pages. It contains a signed session identifier — never your password. This cookie is deleted when you sign out or when your browser session ends. You cannot opt out of strictly necessary cookies; disabling them will break checkout and login.

We use Google Analytics 4 (GA4) to understand how visitors use the site — which pages are popular, where visitors come from, how quickly the site loads, and where the purchase journey breaks. This data is aggregated and anonymised. GA4 cookies are set by Google and typically persist for up to 24 months. You can opt out at any time by installing the Google Analytics opt-out browser add-on or by blocking third-party cookies in your browser settings.

When you reach checkout, Razorpay — India's leading payment gateway — loads its secure checkout iframe. Razorpay sets its own cookies inside that iframe to prevent fraud, remember your payment preferences for the session, and pass security tokens between our site and their servers. VASMYST cannot read Razorpay's cookies and they are governed by Razorpay's own privacy policy. These cookies are strictly necessary for processing payments — disabling them will stop checkout from working.

Session cookies (auth, cart) are deleted the moment you close your browser or sign out. Persistent cookies (analytics) last up to 24 months from your last visit unless you clear them manually. Payment provider cookies are managed by Razorpay according to their own retention rules.

Every major browser lets you view, block, or delete cookies through its settings — usually under “Privacy” or “Site data”. Direct guides: Chrome, Firefox, Safari, Edge. Blocking strictly necessary cookies will stop you from signing in or checking out; blocking analytics or payment cookies is safe but may affect the experience.

VASMYST processes personal data in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act). We collect only the data we need to fulfil your order and improve the service. You have the right to access, correct, or request erasure of your personal data — email support@vasmyst.com with the subject line “Data Request” and we will respond within 30 days as required by law.

VASMYST does not sell, rent, or trade your personal data or cookie-derived data to third parties for advertising or marketing. The only parties who see your data are those directly involved in delivering your order (courier partners), processing your payment (Razorpay), or providing site analytics (Google Analytics) — and only to the extent needed to perform that service.

We may update this cookie policy from time to time to reflect changes in the cookies we use or in applicable law. The “Last updated” date at the top of the page will always reflect the most recent revision. Material changes will be highlighted on the site.

Questions about cookies or your data? Email support@vasmyst.com.