# Gloibox Cookie Policy Draft

**Status: Draft for review. Effective date: 2026-10-28.**

This policy covers cookies and similar browser storage used by Gloibox, operated by Gloitel Consulting Pvt. Ltd. Cookies are small values stored by your browser. Local storage keeps preferences on your device and may remain until removed. This policy should be read with the Privacy Policy.

## Storage used by the application

The following inventory reflects the application code and is intended for verification against the deployed service before publication.

| Storage                            | Purpose                                           | Duration                                                        | Category                                    |
| ---------------------------------- | ------------------------------------------------- | --------------------------------------------------------------- | ------------------------------------------- |
| Authentication and sign-in cookies | Maintain sign-in and protect authentication flows | Session or browser lifetime as set by the sign-in provider and app configuration | Necessary for the requested sign-in service |
| NEXT_LOCALE cookie                 | Remember the selected interface language          | Browser session; browser restore settings may preserve sessions | Preference                                  |
| sidebar_state cookie               | Remember whether navigation is expanded           | Seven days                                                      | Preference                                  |
| Theme preference in local storage  | Remember the selected application appearance      | As stored by the device/browser until cleared                   | Preference                                  |

The application uses Google and Apple sign-in options. Choosing one may involve storage on that provider's own service, governed by its policies. The final inventory must distinguish that storage from cookies set on Gloibox domains.

## Analytics and advertising

Gloibox does not use advertising cookies by default. Analytics or third-party tracking tools are used only where enabled by the Customer or required for service operations, and any such use must be disclosed and consented to as required by law. A source-code review alone cannot establish what hosting, tag managers, or external scripts set in production.

Where consent is required for optional storage, it must be obtained before that storage is used. This draft does not represent that a cookie consent banner or preference center is currently deployed for all jurisdictions.

## Your controls

You can view and delete cookies and site data in your browser settings. Blocking authentication cookies may prevent sign-in. Clearing preferences can reset language, appearance, or navigation choices. Browser controls do not remove employee records stored in your organization's Gloibox account; those requests follow the Privacy Policy.

## Contact and updates

For questions, contact privacy@gloibox.com. We will update this inventory when the service's storage practices change and obtain renewed permission where required. The published version will identify its effective date and applicable Gloibox domains when deployed.