Cookie & Storage Policy

1. What are Cookies and Local Storage?

Cookies are small alphanumeric text files stored on your browser or device when you visit websites. In addition to cookies, our application utilizes modern browser storage technologies such as localStorage and sessionStorage to maintain responsive interface states, active session validations, and theme preferences.

2. How Vinti Web Solution HRMS Uses Cookies

We believe in transparent, consent-first cookie management. We classify all cookies and storage mechanisms into four distinct categories:

A. Strictly Necessary Cookies (Always Active)

These cookies are essential for core platform security, authentication, and navigation. They cannot be switched off without preventing the software from functioning.

• hrms_session: Manages authenticated user state and keeps you securely logged into your corporate session.
• XSRF-TOKEN: Protects against Cross-Site Request Forgery (CSRF) attacks by ensuring state-changing requests originate from your verified browser.
• remember_web_*: Preserves your secure login status if you select "Remember Me" on sign-in.
• hrms_cookie_consent: Stores your saved cookie consent preferences so we do not prompt you repeatedly on every visit.
• hrms_tab_session_id & hrms_active_tabs: SessionStorage tokens used to enforce single-active-session security and detect tab closures.

B. Functional Storage & Cookies (Optional / User Configurable)

These enhance your interface experience by remembering non-essential preferences across visits.

• hrms_theme / theme: Remembers your selection between Light Mode and Dark Mode.
• hrms_cached_location: Caches recent general geolocation data in LocalStorage to optimize check-in responsiveness without redundant network lookups.

C. Analytics Cookies & Scripts (Optional / User Configurable)

Used to measure visitor interactions, understand user journeys, and improve platform performance.

• _ga, _gid, AW-*: Google Analytics and Google Tag Manager cookies deployed strictly on our public landing page to aggregate anonymized visitor metrics. These scripts are completely blocked until you grant explicit consent.

D. Marketing & Advertising Cookies (Optional / Restricted)

We do not deploy third-party advertising cookies or behavioral tracking networks inside the authenticated employee HRMS portal. Any marketing tags are confined solely to public prospective client web pages and require explicit opt-in.

3. Granular Consent Controls

You have full autonomy over non-essential cookies. You can update your choices at any time by clicking Cookie Preferences in the footer or through your user account profile. When you choose "Reject Optional Cookies", all analytics and marketing scripts are immediately blocked.

4. Browser-Level Controls

You can also configure your browser settings (Chrome, Edge, Firefox, Safari) to reject or delete cookies. However, disabling strictly necessary cookies will render the HRMS login and secure workflows inaccessible.