Legal & Compliance

Cookie Policy

Transparency regarding our usage of cookies, local session storage, and tracking technologies.

Last Revised: Sep 25, 2026 3 min read SOC-2 / Zero-Trust Aligned
Legal & Compliance Version: 2026.1

1. What Are Cookies & Local Storage?

Cookies and local storage tokens are small text fragments and cryptographic indicators placed on your computer, tablet, or mobile browser when you visit websites. They allow web platforms to remember your session state, authenticate administrative interactions, and maintain user preferences across page navigations.

Hillasian Tech Solutions believes in privacy by design. We do not deploy intrusive third-party cross-site trackers, nor do we sell advertising telemetry.


2. Categories of Cookies We Deploy

A. Strictly Necessary Cookies (Essential)

These tokens are indispensable for the core operation of our platform:

  • hillasian_session: Maintains your secure session state, form wizard progress (such as multi-step project estimators), and temporary flash notifications.
  • XSRF-TOKEN: A cryptographic security token designed to prevent Cross-Site Request Forgery (CSRF) exploits and protect form submissions.
  • Admin Auth Tokens: Used exclusively by authorized personnel to access the administrative dashboard and management consoles.

B. Functional & Preference Cookies

These items retain your customized browsing preferences to ensure a frictionless experience:

  • hill_theme: Records your customized UI palette selection (e.g. Cyber AI, Enterprise Minimal, Fintech, High-Tech Dark).
  • currency_code: Stores your active transactional currency preference (such as INR, USD, EUR, GBP) so budget estimators display values in your chosen denomination.

C. Performance & Security Telemetry

  • Edge Analytics & Rate Limiting: We leverage Cloudflare and edge proxies that set minimal security cookies (such as __cf_bm) to distinguish legitimate human traffic from automated botnets and malicious scrapers.
  • Anonymized Aggregates: Diagnostic load-time telemetry designed to optimize First Contentful Paint (FCP) and Core Web Vitals without storing Personally Identifiable Information (PII).

Cookie Name Provider Classification Purpose Expiration
hillasian_session Hillasian First-Party Strictly Necessary Encrypted session state and flash messaging Session (2 Hours)
XSRF-TOKEN Hillasian First-Party Security CSRF exploit prevention on form submissions Session (2 Hours)
currency_code Hillasian First-Party Functional Remembers selected currency (INR, USD, etc.) 30 Days
hill_theme Hillasian First-Party Functional Preserves chosen UI theme & archetype palette 365 Days
__cf_bm Cloudflare Security Bot management and DDoS mitigation 30 Minutes

4. Managing & Disabling Cookies

You have complete authority over how cookies are handled on your machine:

  • Browser Settings: Most web browsers permit you to refuse cookies, alert you when a cookie is placed, or delete existing cookies via your browser's Privacy or Security settings.
  • Impact of Disabling: Please note that disabling Strictly Necessary cookies may impair core functionality, including the ability to submit project inquiries, run the interactive cost estimator, or authenticate to the staff portal.

5. Contact Information

For any inquiries or technical questions regarding our cookie management framework:

  • Email: contact@hillasian.com
  • Subject: Cookie Policy Inquiry
  • Operational Model: 100% Remote Hybrid Operations
Hillasian Tech Solutions Legal & Compliance Desk
Distributed Architecture & Operations — Chandigarh · Noida · Bengaluru · Manali
Submit Compliance Inquiry →