VisaFit Cookie Policy

Essential service technologies

VisaFit uses first-party session and security cookies to authenticate users and protect the service. The session cookie is normally named visa_saas_session; a deployment may use a different name. Its expiry follows the session issued at login and the configured security policy. Signing out invalidates the server session and clears the browser session cookie. Blocking essential cookies may prevent login or other requested functions. Signup form values remain in component memory when navigating back within the form; passwords are not intentionally saved in browser storage.

When you request an annual welcome offer, VisaFit stores an opaque first-party offer identifier in the HttpOnly visafit_annual_offer cookie for up to 30 days. The server stores the fixed one-hour deadline; refreshing does not extend it. The identifier links the offer to your verified signup and first annual invoice if you choose to redeem it. Session storage remembers dismissal of the offer prompt for the browsing session. These technologies do not enable advertising or cross-site analytics. An automatic desktop exit-intent prompt can also issue the offer cookie; you may dismiss the prompt and continue without purchasing.

Third party services

Google reCAPTCHA may operate on login for abuse prevention. Razorpay is loaded when a user opens checkout and may use technologies needed for its payment and fraud-prevention functions. Their respective notices apply to their own processing. No card number or CVV is written into VisaFit acceptance logs.

Optional cookies and control

The signup and payment agreement flow does not enable optional advertising or analytics trackers. Such technologies must not be introduced without a separate appropriate consent mechanism. There is therefore no preselected optional-cookie consent or compulsory marketing checkbox.

You can manage or delete cookies through browser settings. Removing essential session cookies signs you out. Privacy contact: Rishabh at rshbhkataria@gmail.com. The acknowledgement is recorded separately from the MSA and privacy notice.

The annual-offer identifier is a promotional preference, separate from authentication: you do not need it to use VisaFit or purchase a normal subscription. It lasts up to 30 days to recognise the fixed offer, while offer eligibility lasts only one hour. The dismissal preference lasts for the browser session. Browser storage can be cleared independently of cancelling a subscription or requesting deletion of server records.