Cookie Policy
Ruyte uses a small number of cookies to keep the platform secure and working correctly. This page explains what they are, why we use them, and how you can control them.
01
Cookies are small text files that a website places on your device when you visit. They allow the site to remember information about your visit — for example, that you're logged in, or what's in your shopping bag.
We also use related technologies including localStorage (browser storage) and session tokens. This policy covers all of these under the term "cookies."
02
Ruyte uses cookies for three purposes, in order of importance:
We do not currently use advertising or marketing cookies. The consent banner includes a future marketing category — this is not active in production. If we introduce marketing tools, this policy will be updated and you will be asked to consent again before any marketing cookies are set.
03
| Cookie / technology | Provider | Purpose | Duration |
|---|---|---|---|
| next-auth.session-token | Ruyte (NextAuth) | Keeps you signed in. Contains a signed JWT — no personal data is stored in the cookie itself. | Session |
| next-auth.csrf-token | Ruyte (NextAuth) | Prevents cross-site request forgery (CSRF) attacks on forms. | Session |
| next-auth.callback-url | Ruyte (NextAuth) | Remembers where to redirect you after login. | Session |
| ruyte-cart:{userId} | Ruyte | Stores your shopping bag items in localStorage so they persist across page loads. | Persistent (local) |
| ruyte_cart_cleared | Ruyte | sessionStorage flag that prevents ghost items appearing after a completed order. | Session |
| ruyte_display_currency | Ruyte | Remembers your PKR, CAD, USD, GBP, SAR or AED display preference. Display currency is separate from delivery country and the settlement currency shown before payment. | Until changed |
04
We use privacy-respecting analytics to understand broad usage patterns — which pages are popular, where users get stuck, and how checkout converts. We do not track individuals across other websites.
| Cookie / technology | Provider | Purpose | Duration |
|---|---|---|---|
| _vercel_insights | Vercel Analytics | Aggregated page view and performance data. No personally identifiable information is collected. | Session |
| ruyte_sid | Ruyte | Pseudonymous session identifier for internal analytics (pages visited, referrer, visit duration, approximate country, device type). Cleared when the browser tab closes. | Session (tab only — not persistent) |
| ruyte_consent_v1 | Ruyte | Stores your cookie consent choices (categories accepted, timestamp, consent ID). Used to avoid re-showing the banner on every visit. | 12 months |
Ruyte checks for the Global Privacy Control (GPC) browser signal. If your browser or extension sends a GPC signal, marketing cookies are automatically blocked regardless of your other choices. This supports California (CCPA/CPRA) and other privacy frameworks that recognise GPC as a valid opt-out signal.
The older DNT (Do Not Track) header is no longer enforced — it was deprecated due to inconsistent browser support. We recommend GPC-compatible browser extensions such as Privacy Badger for automatic privacy signalling.
05
These cookies remember preferences that affect how the site looks and works for you.
| Cookie / technology | Provider | Purpose | Duration |
|---|---|---|---|
| ruyte_region | Ruyte | Remembers the selected market region. Delivery country and display currency are stored and evaluated separately. | Until changed |
| ruyte-cart:{userId} | Ruyte | Stores your shopping bag items in localStorage so they persist across page loads. Scoped to your user ID. | Persistent (local) |
| ruyte_country_selected | Ruyte | Remembers that you have manually selected your country so the region picker does not re-appear on every visit. | Persistent (local) |
06
Ruyte uses a small number of third-party services that may set their own cookies:
| Cookie / technology | Provider | Purpose | Duration |
|---|---|---|---|
| Safepay secure payment fields | Safepay | Card authentication, fraud prevention and secure payment-session continuity. These essential provider cookies may identify a legitimate payment attempt. | See Safepay's privacy/cookie notice presented during payment |
| Google OAuth | Google LLC | If you sign in with Google, Google sets authentication cookies on accounts.google.com. | See Google's policy |
| Cloudinary | Cloudinary Ltd. | Image delivery CDN. Does not set tracking cookies — only technical delivery parameters. | None |
We have no control over cookies set by these third parties. Please review their respective privacy and cookie policies for full details.
07
Browser settings: All modern browsers allow you to view, delete, and block cookies. Note that blocking essential cookies will break login and checkout.
Global Privacy Control: If your browser sends a GPC signal, Ruyte automatically disables marketing cookies. Analytics requires your explicit consent regardless of GPC.
Withdraw consent: Open Cookie settings (footer link) at any time, choose "Essential only" or "Withdraw consent". This clears your analytics session ID and stops future tracking immediately.
08
We will update this policy when we add or remove cookies or tracking technologies. Changes are reflected in the "last updated" date below. For material changes — such as introducing new analytics providers or activating marketing cookies — we will notify users by email and display a notice on the site, and require fresh consent where applicable.
09
For cookie-specific questions or to exercise your PIPEDA / Law 25 rights, contact our Privacy Officer:
Last updated: August 16, 2026 · Ruyte Inc., Ontario, Canada · Effective date: July 30, 2026