Skip to content
Sign in
ARINE LEGAL

Cookie Policy

Existing cookie disclosures and the verification pack’s required updates.

What Are Cookies?

Cookies are small text files placed on your device by websites and web apps you visit. They are widely used to make software work efficiently, remember user preferences, maintain active login sessions, and protect against automated security exploits.

Under the EU ePrivacy Directive, GDPR, and CCPA, we provide clear notice and controls regarding all first-party and third-party cookies utilized across our platform.

1. Strictly Necessary & Authentication Cookies

Essential for the core security, sign-in state, CSRF protection, and session persistence of the Arine workflow SaaS platform. These cannot be disabled.

Cookie nameProviderPurposeDuration
arine_session_idArine SaaSMaintains active user login and session securitySession / 24 hrs
__Host-csrf_tokenArine SaaSPrevents Cross-Site Request Forgery (CSRF) attacksSession
auth_stateBase44 AuthVerifies user access permissions for merchant portal30 days

2. Payment & Fraud Prevention Cookies (Stripe, Razorpay, Dodo)

Required by our payment gateway partners to prevent fraudulent transactions, tokenized credit card checkouts, and secure subscription renewals.

Cookie nameProviderPurposeDuration
__stripe_midStripe, Inc.Stripe fraud detection and risk assessment token1 year
__stripe_sidStripe, Inc.Stripe secure payment session tracking30 mins
rzp_device_idRazorpayUPI & INR payment security and risk management1 year
dodo_checkout_sessionDodo PaymentsCross-border merchant billing session state24 hrs

3. Analytics & Performance Cookies

Helps us measure platform usage, workflow engine performance, and aggregate page view trends to continuously improve our software.

Cookie nameProviderPurposeDuration
_ga, _ga_*Google Analytics 4Measures aggregate site visits and workflow usage14 months
arine_telemetryArine CloudMonitors workflow engine latency and API response speeds30 days

4. Preferences & Functional Cookies

Remembers your dashboard settings, dark/light theme choice, and saved workflow builder layouts.

Cookie nameProviderPurposeDuration
theme_preferenceArine SaaSStores visual theme choice (dark / light / system)1 year
canvas_view_modeArine SaaSSaves workflow builder layout view preferences90 days

How to Control & Opt-Out of Cookies

You can control and block cookies through your internet browser settings:

  • Google Chrome: Settings > Privacy and security > Third-party cookies.
  • Mozilla Firefox: Settings > Privacy & Security > Enhanced Tracking Protection.
  • Apple Safari: Preferences > Privacy > Block all cookies.
  • Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on.
Note on Essential & Payment Cookies: Blocking essential or payment security cookies (Stripe/Razorpay/Dodo) may cause subscription billing failures or prevent logging into your SaaS workflow portal.
OCTOBER 29, 2026 VERIFICATION PACK

Proposed verification updates

Draft supplement · reconcile with production before publication

Essential sign-in and active-brand cookies

The pack identifies two essential application cookies: the sign-in session and the active brand. The first maintains authenticated access; the second keeps the selected brand context. Their actual cookie names, lifetimes, domains and flags need confirmation. No names or durations have been invented for these additions.

PostHog analytics

The pack requires PostHog to be included in the disclosure. Confirm its actual use, cookie or storage identifiers, consent behavior and retention settings before publication. The pack’s proposed analytics-event retention is up to 12 months, subject to matching the production configuration.

Reconcile the existing table

The preserved live table names Base44, Stripe, Razorpay, Dodo, Google Analytics and other cookies. That list is not proof that each provider is still used. Check the actual production inventory and remove obsolete entries before publishing a revised policy.

Before publication

  • Supply the approved replacement Privacy Policy, Terms and Data Deletion text, including Google’s exact Limited Use wording.
  • Confirm the Grievance Officer’s name and company postal address.
  • Verify hosting, payment and service providers, cookie inventory, permissions, retention and workspace-deletion behavior.
  • Set the updated policy date to the actual publication date.