কুকি ও ট্র্যাকিং নীতি / Cookie & Tracking Policy
Document version: 2026-05-06.v1 · Last updated: 6 May 2026 · Applies to tenderpulse.com.bd
এক নজরে — আমরা শুধুমাত্র essential cookies ব্যবহার করি — login session ও CSRF protection-এর জন্য। কোনো analytics, কোনো advertising, কোনো third-party tracker নেই।
One-line —Only essential cookies for login & CSRF. No Google Analytics, no Facebook Pixel, no Meta, no Mixpanel, no Segment, no advertising cookies, no third-party trackers of any kind.
১ · কী cookies use করি / Cookies in use
| Cookie name | Purpose | Lifetime | Type |
|---|---|---|---|
| better-auth.session_token | Authenticates your logged-in session. Without it you would be signed out on every page. | 7 days (rolling) | Essential |
| better-auth.csrf_token | Cross-site-request-forgery (CSRF) protection on form submissions and server actions. | Session | Essential |
| better-auth.dont_remember | Tracks the “don’t remember me” choice on the login page so we shorten your session lifetime. | Session | Essential |
| tp_consent_ack | Acknowledgement that you accepted the current Privacy / Terms / EULA versions on this device. Used to skip the consent gate on already-accepted devices. | 365 days | Essential |
| tp_locale | Stores your interface language choice (bn-BD or en-BD). | 365 days | Essential |
২ · যা ব্যবহার করি না / What we don’t use
- No Google Analytics, no Google Tag Manager. We do not run any GA / GTM script anywhere on the site.
- No Facebook Pixel, no Meta SDK. No social-media tracker.
- No Mixpanel, Segment, Amplitude, Heap, FullStory, LogRocket, Hotjar. We do not use any commercial product analytics or session-replay tool. Replay tools are particularly dangerous for procurement data and we have decided permanently against them.
- No advertising cookies. The product is paid and we do not run ads.
- No fingerprinting. We do not run JS that hashes your hardware/canvas/font characteristics.
৩ · Local storage & IndexedDB
- localStorage: we cache UI state (last opened tender, sidebar collapsed/expanded, theme preference) — no personal data, no tracking.
- IndexedDB: not used.
- Service worker: not used.
৪ · Server-side logging (not cookies)
Separately from cookies, our server logs IP, user-agent, request path, and response status in AWS CloudWatch for 90 days for operational diagnostics. See clause 2.8 of the Privacy Policy.
৫ · Changes to this policy
We will update this policy if we ever introduce a new cookie. New cookies will be added to the table above and announced via in-app banner. We will not silently introduce non-essential cookies.
৬ · Contact
Privacy: privacy@publicpulse.com.bd
See also: Privacy Policy · Terms of Service · EULA