Cookie Policy
Last updated: 11 October 2026
This policy explains how Ice Cream Wala ("we", "us") uses cookies, local storage and similar technologies on icecreamwala.com (the "Platform"). It should be read with our Privacy Policy and Terms of Service.
1. What These Technologies Are
- Cookies are small files a website stores on your device. They can be session cookies (deleted when you close the browser) or persistent (kept for a set time), and first-party (set by us) or third-party (set by another provider on our behalf).
- Local storage and session storage are browser features that let a site keep small pieces of data on your device. Unlike cookies, this data is not sent to the server automatically with each request.
2. Our Approach
We keep this deliberately minimal.
- We use essential cookies and storage to sign you in, keep forms secure, and remember your choices. Optional analytics cookies require consent.
- Google Analytics and PostHog load only after analytics consent. Our cookie banner is built into the Platform and records your choice. Cookieless Cloudflare Web Analytics loads independently.
- We do not use advertising cookies, cross-site tracking, retargeting or social-media tracking pixels, and we do not sell browsing data.
- Google Analytics 4 is optional and loads only after you choose Allow cookies. Choosing Essential only prevents it from loading. Changing to Essential only disables further application tracking and clears its first-party analytics cookies.
- PostHog also requires analytics consent. It uses an anonymous in-memory identifier, with automatic click/form capture, session recording and person profiles disabled. Cloudflare Web Analytics uses no analytics cookies and measures public-page performance independently of that choice.
3. What We Use and Why
3.1 Strictly necessary
Needed for the Platform to work and be secure. They do not need consent but are listed here for transparency.
- Sign-in session. When you sign in, our server sets a secure, HttpOnly sign-in cookie so you stay signed in and can use account features, such as viewing supplier contacts, sending enquiries, managing listings and, for admins, reviewing listings.
- Google authentication security. If you choose Google sign-in,
icw-google-nonceandicw-google-pendingare secure, HttpOnly cookies with a ten-minute lifetime. They protect the sign-in attempt and carry a short-lived onboarding reference. After authentication, the ordinaryicw-sessioncookie applies. Google's sign-in interface may use its own storage under its policies; this is distinct from optional Google Analytics. - Bot protection. On form pages (quote request, sign-up, enquiry, city request, contact) we use Cloudflare Turnstile to check that a submission comes from a real person. Turnstile may set or read its own cookies or browser storage for this purpose.
3.2 Preference storage
- Your consent choice so the banner does not reappear.
- Email verification hand-off. Session storage remembers the email address you are verifying while you move between sign-up and verification pages. Search filters are carried in the page URL. Live form submissions are sent to our server rather than saved as local drafts.
3.3 Analytics and marketing
Google Analytics 4 and PostHog measure public-page visits after consent. We do not intentionally send names, emails, form contents, query strings, reset tokens or account identifiers to these services. Advertising features are disabled. Cloudflare Web Analytics measures public-page performance without analytics cookies. It is not loaded on account, authentication, form, search or thank-you pages, or URLs with query strings or fragments. Navigation to such links starts a fresh document without its beacon.
4. What We Set
| Name | Provider | Type | Duration | Purpose |
|---|---|---|---|---|
icw-consent | Ice Cream Wala | Local storage | Until you clear site storage | Remembers your consent choice. |
icw-session | Ice Cream Wala | Essential HttpOnly cookie | Browser session with a 12-hour server limit; up to 30 days if you choose “Keep me signed in”; revoked at sign-out | Keeps you signed in according to your login preference. |
icw-google-nonce | Ice Cream Wala | Essential HttpOnly cookie | Up to 10 minutes; cleared after token verification | Binds the Google credential to this browser's sign-in attempt. |
icw-google-pending | Ice Cream Wala | Essential HttpOnly cookie | Up to 10 minutes; cleared after profile completion | Refers to the temporary Google onboarding record. |
| Cloudflare Turnstile | Cloudflare | Essential, security | Session or short-lived | Bot protection on forms. |
icw-pending-email | Ice Cream Wala | Session storage | Until you clear it or end the browser session | Carries your email into the verification page. |
_ga, _ga_* | Google Analytics / Ice Cream Wala | Optional first-party analytics cookies | Up to 1 year, subject to browser controls | Measures public-page visits after analytics consent. |
| PostHog anonymous identifier | PostHog | Optional in-memory identifier | Current document | Measures public-page visits after consent without person profiles. |
| Cloudflare Web Analytics | Cloudflare | Cookieless performance beacon | Current document | Measures public-page performance independently of cookie consent. |
Exact names and lifetimes may change slightly as our providers update their systems; we will keep this table current.
5. Your Choices
- Banner. Accept or decline Google Analytics and PostHog. Declining does not affect sign-in or forms. Use Cookie Preferences in the footer to change your choice later. Cloudflare's cookieless measurements are independent of this setting.
- Browser controls.
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Safari: Settings → Privacy → Manage Website Data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Edge: Settings → Cookies and site permissions → Manage and delete cookies.
- Blocking essential cookies may stop you signing in or submitting forms, and clearing local storage will reset your local preferences. Browser session restoration may restore session cookies; sign out explicitly on shared devices.
6. Third Parties
Google Identity Services loads on login and signup pages to provide the Google button and authentication. It is separate from Google Analytics and does not require enabling optional analytics to sign in. Email sign-in remains available. See Google's Privacy Policy.
Cloudflare provides bot protection and cookieless performance analytics. Google Analytics and PostHog process analytics data only after consent. Links to WhatsApp or other sites are governed by those sites' own policies.
7. Changes
We will update the date above and the table when we change what we use.
8. Contact
Questions: see the Privacy Policy or write to sales@icecreamwala.com.