laptopfirst

LAPTOPFIRST COOKIE & TRACKING POLICY

Transparency on Local Storage, Session Tokens & Analytics Identifiers

Effective Date: 1st April 2026
Last Updated: 24th September 2026
Applicable Portals: https://laptopfirst.in | https://app.laptopfirst.in
Operated By: Lapswap Tech Private Limited (CIN: U62099DL2024PTC426597), a company incorporated under the Companies Act, 2013, with its registered office at 161-L, Plot No. 9, Sector-7, Evergreen Apartment, Dwarka Sec-6, South West Delhi, Delhi – 110075, India.

OVERVIEW: This Cookie Policy explains how LaptopFirst (“we”, “us”, or “our”) uses cookies, web beacons, session tokens, and local browser storage across our marketing website (laptopfirst.in) and our cloud administrative dashboards (app.laptopfirst.in and alpha.laptopfirst.in).

We use these technologies to maintain secure administrative logins, safeguard against distributed attacks, and understand how rental vendors interact with our dashboard to optimize performance.

1. WHAT ARE COOKIES AND TRACKING TECHNOLOGIES?

  • Cookies are small text files placed on your computer or mobile device by a web server when you visit a website. They allow the website to recognize your device, maintain active sessions, and store user preferences.
  • Local Storage / Session Storage (HTML5) allows web applications to store data locally within the user’s browser for performance and authentication without transmitting data with every HTTP request.
  • Web Beacons / Pixels are small graphic images or scripts embedded into web pages that monitor traffic flow and user navigation.

2. CATEGORIES OF COOKIES USED BY LAPTOPFIRST

We categorize cookies deployed on our Platform into two distinct classifications:

┌────────────────────────────────────────────────────────────────────────┐
│ 1. STRICTLY NECESSARY (ESSENTIAL) COOKIES                              │
│    Required for security, load balancing, and authenticating admin   │
│    logins. Cannot be disabled without breaking the service.            │
├────────────────────────────────────────────────────────────────────────┤
│ 2. PERFORMANCE & ANALYTICS COOKIES                                     │
│    Help us measure user journeys, navigation flows, and UI bottlenecks │
│    using aggregated telemetry (Hotjar).                                │
└────────────────────────────────────────────────────────────────────────┘

3. COMPLETE AUDIT OF DEPLOYED COOKIES

3.1 Strictly Necessary / Functional Technologies (First-Party)

These cookies and local storage keys are essential to provide access to the multi-tenant vendor console, authenticate sessions, and protect against malicious web traffic:

Identifier / Key Provider Storage Type Purpose Typical Expiration
sb-[project-id]-auth-token Supabase Auth (First-Party) Local Storage Stores JWT access tokens and refresh tokens to maintain secure, authenticated vendor sessions across dashboard page loads. Preserved until explicit logout or token refresh expiry (up to 30 days).
__cf_bm Cloudflare HTTP Cookie Distinguishes between humans and automated bots to prevent DDoS attacks and rate-limit scraping abuse. 30 minutes.
cf_clearance Cloudflare HTTP Cookie Stores proof of challenge completion to allow legitimate browser access past Cloudflare security checks. 1 year.

3.2 Performance and Analytics Technologies (Third-Party)

We deploy Hotjar on our marketing portals and administrative dashboard layout to visualize user navigation, click density (heatmaps), and identify confusing user interface workflows:

Cookie Name Provider Purpose Typical Expiration
_hjSessionUser_{site_id} Hotjar Ltd. Persists the Hotjar User ID, unique to that site, to ensure recurring user interactions are recognized across future visits. 365 days.
_hjSession_{site_id} Hotjar Ltd. Holds current session data to group subsequent interactions and pageviews into a single analytical session. 30 minutes.
_hjSessionTooLarge Hotjar Ltd. Emitted when a session is excessively large to instruct the client script to pause recording. Session.
_hjIncludedInPageviewSample Hotjar Ltd. Determines whether a specific visitor is included in the statistical sampling pool for heatmaps. 2 minutes.
_hjAbsolutePaused Hotjar Ltd. Identifies if a visitor has paused tracking or opted out. Session.

Hotjar Privacy Protections: Hotjar’s script is configured with keystroke suppression enabled by default. Hotjar never records sensitive input fields, passwords, credit card numbers, or personal identifying numbers (PAN/Aadhaar) entered into the dashboard.

4. WHAT WE DO NOT DO WITH COOKIES

  • ❌ No Cross-Site Behavioral Ad Retargeting: We do not participate in third-party advertising exchange networks (such as Google AdSense or Meta Pixel) that follow you across unrelated websites to serve behavioral ads.
  • ❌ No Sale of Tracking Data: We never sell, rent, or trade your browser cookies or behavioral interaction metrics to data brokers.
  • ❌ No Renter Tracking on Laptops: Cookies apply only to browsers visiting our web portals. The Mite Agent running on managed rental laptops does not use browser cookies and communicates directly with our MDM server via encrypted system APIs and WebSockets.

5. HOW YOU CAN CONTROL AND MANAGE COOKIES

5.1 Browser-Level Settings

Most modern internet browsers allow you to manage your cookie preferences, refuse specific cookies, or delete previously stored cookies. You can adjust your browser settings using the official guides below:

Note: If you block all cookies or clear your local storage, you will be logged out of your Account and will need to re-authenticate. Essential cookies cannot be switched off if you wish to operate the administrative dashboard.

5.2 Opting Out of Hotjar Analytics

To opt out of Hotjar tracking across LaptopFirst and any other website utilizing Hotjar services, you may visit Hotjar’s universal opt-out portal:
👉 https://www.hotjar.com/legal/compliance/opt-out/

6. POLICY UPDATES AND CONTACT INFORMATION

We may periodically revise this Cookie Policy to reflect technical updates, changes in analytics providers, or emerging statutory requirements. Any material changes will be reflected with an updated "Last Updated" date at the top of this page.

If you have questions or concerns regarding our use of cookies and tracking technologies, please contact:

  • Entity: Lapswap Tech Private Limited (operating as “LaptopFirst”)
  • Registered Office: 161-L, Plot No. 9, Sector-7, Evergreen Apartment, Dwarka Sec-6, South West Delhi, Delhi – 110075, India
  • Email: privacy@laptopfirst.in
  • Official Website: https://laptopfirst.in