Cookie & Data Storage Policy

Last Updated: October 9, 2025

Cookie and Data Storage Policy

Last Updated: October 9, 2025 Effective Date: October 9, 2025


Introduction

This Cookie and Data Storage Policy explains how backend.chat uses browser storage technologies (localStorage, sessionStorage) to provide our services.

Important: backend.chat does NOT use traditional tracking cookies for advertising, analytics, or cross-site tracking.

Contact Us: [email protected]


What Are Cookies and Browser Storage?

Traditional Cookies

Cookies are small text files stored in your browser by websites you visit. They can track you across sites and are often used for advertising.

backend.chat does NOT use cookies.

LocalStorage

LocalStorage is a browser technology that stores data locally on your device. Unlike cookies:

  • Data does not expire (until you clear it)
  • Data is not sent to our servers automatically
  • Data is stored per-domain (can't be accessed by other websites)

We use localStorage to store conversation data, visitor ID, and preferences.

SessionStorage

SessionStorage is similar to localStorage, but:

  • Data is cleared when you close the browser tab
  • Used for temporary session data

We use sessionStorage minimally for active session management.


What We Store in Your Browser

1. LocalStorage Items

ItemPurposeExample ValueEssential?
chat_visitor_idUnique identifier to recognize returning visitors"uuid-abc123"Yes
chat_conversation_[keyPrefix]Your active conversation ID"conv-xyz789"Yes
chat_visitor_name_[keyPrefix]Your name (if you provided it)"John Doe"No (Functional)
chat_visitor_email_[keyPrefix]Your email (if you provided it)"[email protected]"No (Functional)
chat_conversationsList of your conversations[{id, title, time}]Yes
chat_sound_enabledSound notification preference"true" or "false"No (Preference)
chat_cross_tab_messageTemporary sync data for multiple tabs{type, data}Yes

Note: [keyPrefix] is a unique identifier based on the website domain where the widget is embedded.

2. SessionStorage Items

We use sessionStorage only for temporary data during your active session, such as:

  • Temporary WebSocket connection state
  • Draft messages (not yet sent)

This data is automatically cleared when you close your browser tab.


Why We Store Data

Essential Functionality

Required for the service to work:

  • Recognize returning visitors: So you see your previous conversations
  • Maintain conversation state: Keep track of which conversation you're in
  • Sync across browser tabs: If you open multiple tabs, they show the same conversation
  • WebSocket connection: Manage real-time messaging

Without this storage, the chat widget would not function.

Functional / Convenience

Improves your experience (optional):

  • Remember your name and email: So you don't have to re-enter them
  • Sound preferences: Remember if you want sound notifications or not

You can delete this data if you prefer, but you'll need to re-enter information.


Legal Basis for Storage

Under GDPR (European Union)

ePrivacy Directive: LocalStorage and sessionStorage are treated like cookies.

Our legal basis:

  • Essential storage (Art. 6(1)(f) GDPR - Legitimate Interest): Required to provide the service you requested
  • Functional storage: Based on consent (implied when you interact with the widget)

Consent is NOT required for essential storage needed to deliver a service you explicitly requested.

Under CCPA (California)

LocalStorage may be considered "personal information" under CCPA if it contains identifiable data (like email).

Your rights:

  • Request access to data we store
  • Request deletion of data
  • Opt-out of "sale" (we don't sell data)

See our Privacy Policy for details.

Under India's IT Act 2000

We comply with reasonable security practices for data stored on your device.


How to Control and Delete Stored Data

Clear LocalStorage in Your Browser

Google Chrome:

  1. Open Chrome Settings (⋮ > Settings)
  2. Privacy and Security > Clear browsing data
  3. Select "Cookies and other site data"
  4. Choose time range (e.g., "All time")
  5. Click "Clear data"

Firefox:

  1. Open Firefox Settings (☰ > Settings)
  2. Privacy & Security > Cookies and Site Data
  3. Click "Clear Data"
  4. Check "Cookies and Site Data"
  5. Click "Clear"

Safari:

  1. Safari > Preferences > Privacy
  2. Click "Manage Website Data"
  3. Find the website where widget is embedded
  4. Click "Remove" or "Remove All"

Microsoft Edge:

  1. Settings (⚙) > Privacy, search, and services
  2. Under "Clear browsing data," click "Choose what to clear"
  3. Select "Cookies and other site data"
  4. Click "Clear now"

Mobile Browsers:

  • Similar process in Settings > Privacy > Clear browsing data

Domain-Specific Clearing

Most browsers let you clear data for a specific website only:

  • Chrome: Settings > Privacy > Cookies > See all site data and permissions > Search for site > Remove
  • Firefox: Settings > Privacy > Cookies and Site Data > Manage Data > Search for site > Remove Selected

What Happens When You Clear Storage?

  • You will lose your conversation history in the widget
  • You'll be treated as a new visitor
  • You'll need to re-enter your name and email (if the widget asks for them)
  • Your conversations are still stored on the business's backend.chat account (not affected)

Third-Party Storage

We Do NOT Use:

  • ❌ Google Analytics cookies
  • ❌ Facebook Pixel
  • ❌ Advertising network cookies
  • ❌ Cross-site tracking cookies
  • ❌ Third-party tracking scripts

Businesses Using Our Widget May Use:

The business whose website you're on may use their own cookies and tracking. We do not control this.

Check their privacy policy for details.


Cookie Consent Banners

Do You Need to Accept Cookies?

No. backend.chat doesn't use cookies, so:

  • No cookie banner is needed for our widget (in most jurisdictions)
  • Essential storage (localStorage for conversations) doesn't require consent under GDPR/ePrivacy

For Businesses Using Our Widget

If you embed our widget on your website:

  • You likely do NOT need a cookie consent banner specifically for backend.chat
  • Your own cookies (analytics, advertising) may require consent
  • We recommend adding a privacy notice near the widget (e.g., "This chat is powered by backend.chat. See our [Privacy Policy].")

EU/GDPR considerations:

  • Essential storage for service delivery does NOT require consent
  • If you use the widget for non-essential purposes (e.g., marketing), you may need consent

Consult your legal advisor for specific guidance on your website's cookie compliance.


Data Security

How We Protect LocalStorage Data

  • Encryption: Data stored in localStorage is plain text (browser limitation), but sensitive data (passwords) is NEVER stored in localStorage
  • HTTPS only: Our widget only works on HTTPS websites, protecting data in transit
  • Same-origin policy: LocalStorage is isolated per-domain; other websites can't access it

Risks and Limitations

Be aware:

  • If someone has physical access to your device, they could view localStorage data
  • Browser extensions could potentially access localStorage
  • Malware on your device could access localStorage

Best practices:

  • Keep your device secure (lock screen, antivirus)
  • Use trusted browser extensions only
  • Log out on shared devices (or clear browser data)

Changes to This Policy

We may update this Cookie and Data Storage Policy from time to time.

How we notify you:

  • Update the "Last Updated" date at the top
  • For material changes: Email notification (if we have your email)

Your continued use of backend.chat after changes means you accept the updated policy.


Your Privacy Rights

You have rights regarding data stored on your device:

Access

Request information about what data we store in your browser:

Deletion

Delete data at any time:

  • DIY: Clear browser storage (see "How to Control" above)
  • Request help: Email [email protected]

Opt-Out

Opt out of functional storage:

  • Clear localStorage after each visit
  • Don't provide your email/name when asked
  • Note: Essential storage (visitor ID, conversation ID) is required for the service to work

Complaints

If you believe we're misusing browser storage:

  • Contact us: [email protected]
  • For EU users: Contact your data protection authority
  • For California users: Contact California Attorney General

See our Privacy Policy for full details on your rights.


Technical Details (For Developers)

Storage Keys Reference

Format: localStorage.setItem(key, value)

KeyData TypePersistent?Shared Across Tabs?
chat_visitor_idUUID stringYesYes
chat_conversation_[key]UUID stringYesYes
chat_visitor_name_[key]StringYesYes
chat_visitor_email_[key]Email stringYesYes
chat_conversationsJSON arrayYesYes
chat_sound_enabledBoolean stringYesYes
chat_cross_tab_messageJSON objectTemporaryYes (via events)

Cross-Tab Sync: We use localStorage events and BroadcastChannel API to sync conversation state across multiple tabs of the same website.

Storage Limits

  • LocalStorage: ~5-10 MB per domain (browser-dependent)
  • SessionStorage: ~5-10 MB per domain
  • Our usage: Typically <100 KB

Inspection (For Testing)

Chrome DevTools:

  1. Open DevTools (F12)
  2. Application tab > Local Storage > [domain]
  3. View all keys and values

Firefox DevTools:

  1. Open DevTools (F12)
  2. Storage tab > Local Storage > [domain]

Compliance Summary

GDPR (EU)

  • ✅ No cookie consent banner needed (essential storage only)
  • ✅ Privacy notice provided (this policy)
  • ✅ Users can delete data (clear localStorage)
  • ✅ Right to access (contact [email protected])

CCPA (California)

  • ✅ No "sale" of personal information
  • ✅ Right to delete (clear localStorage or contact us)
  • ✅ Privacy Policy discloses data collection

ePrivacy Directive (EU)

  • ✅ Compliant (no cookies, essential storage only)

India IT Act 2000

  • ✅ Privacy notice provided
  • ✅ Reasonable security practices

Comparison: Cookies vs. Our Storage

FeatureTraditional Cookiesbackend.chat LocalStorage
Sent to serverYes (on every request)No (stays in browser)
ExpiresYes (set expiration)No (until manually cleared)
Used for trackingOften yesNo
Used for adsOften yesNo
Third-party accessYes (cross-site cookies)No (same-origin only)
PurposeTracking, ads, sessionsChat functionality only
GDPR consentOften requiredNot required (essential)

Contact Us

Questions about this policy or browser storage?

Email: [email protected] Response Time: 48-72 hours

Company Information: VINAY KHOBRAGADE TECHNOLOGIES LLP RL/5211, Bramhapuri, ARL Bramhapuri, Bramhapuri, Chandrapur Maharashtra, 442402, India


Additional Resources


Last Updated: October 9, 2025


This Cookie and Data Storage Policy is provided for informational purposes and does not constitute legal advice. Consult with a legal professional for compliance guidance specific to your situation.