Legal
Cookie Policy
Last updated: August 2026
This policy explains the cookies and similar technologies used on www.tanflow.com, and how you control them. It is written to India's Digital Personal Data Protection Act, 2023, which is the law we operate under. The wider picture, including what our forms collect, is in our Privacy Policy.
The tables below are generated from the same list the site itself enforces, so what you read here is what the site may actually set - nothing more and nothing less. They are not a hand-written summary that can drift from the code.
1. Cookies we use
One section per group. A group marked always on is needed to serve this site and its forms securely and has no switch. Every other group sets nothing at all unless you turn it on.
Strictly necessaryAlways on
Required for the site to work: keeping your session, protecting the contact and demo forms against cross-site request forgery, and remembering this cookie choice. These are set on every visit and cannot be turned off, because the site cannot serve a form securely without them.
| Cookie | Set by | Purpose | Kept for |
|---|---|---|---|
| tfsid | tanflow.com (first party) | Holds the server-side session that carries the anti-CSRF token for the demo, contact and resource forms, and the admin console sign-in. | Deleted when you close the browser. |
| tf_consent | tanflow.com (first party) | Records this cookie choice, so you are not asked again on every page and so the choice can be evidenced. | 395 days. |
AnalyticsOptional
Google Analytics, to count visits and see which pages are read. It places identifiers in your browser and sends usage data to Google, including outside India. It is not loaded at all unless you turn this on, and declining costs you nothing on this site.
| Cookie | Set by | Purpose | Kept for |
|---|---|---|---|
| _ga, _ga_* | Google Analytics (third party) | Distinguishes visitors and sessions to produce aggregate traffic reports. | Up to 2 years, set by Google. |
Marketing measurementOptional
Cookies that would let us measure which campaigns bring people here. None are running today - this switch controls whether any may be placed if that changes, and turning it on now grants nothing until then.
| Cookie | Set by | Purpose | Kept for |
|---|---|---|---|
| None at present | - | Reserved for campaign measurement. If this becomes active, the notice version is bumped and everyone is asked again before anything is set. | - |
2. What is actually running today
The optional groups above are disclosed so that nothing can be switched on without having been described first. As things stand, neither is doing anything.
- Analytics is not loaded on this site today. The measurement identifier the
site would need is empty, so the Google Analytics tag is never added to the page and the
_gacookies are never set. Turning the category on right now permits something that does not yet run. - No marketing or advertising cookies are set today, by us or by anyone else. Nothing sits behind that switch yet.
- If either is switched on, the notice version below is raised, you are asked again rather than an old decision being carried forward, and the Privacy Policy is updated to say so.
The two strictly necessary cookies are real and are set on every visit, as the table above describes.
3. Your choices
The notice shown on your first visit offers Accept all, Reject non-essential and Manage preferences. Rejecting takes the same single click as accepting, and it costs you nothing on this site.
- Optional cookies are not written until you turn them on. An analytics tag sets its identifiers the moment it loads, so it is not loaded at all without your consent, rather than loaded and then asked to behave.
- You can change or withdraw your choice at any time, from the button below or the Cookie settings link in the footer of every page. Withdrawing is as easy as giving. Withdrawing analytics also deletes the analytics cookies from your browser, rather than merely ceasing to read them.
- You can also block cookies in your browser. Blocking the strictly necessary ones will stop the forms working, because the token that protects them travels in the session cookie.
4. The record we keep of your choice
Your choice is stored in a cookie in your browser, and we also record it on our server. The server record is short, and this is the whole of it: a reference, the random identifier held in your own cookie, the version of this notice, the time, the categories you allowed, and the categories you were offered and declined.
It contains nothing about you - no IP address in any form, no browser details, no page address, no referring site. Storing an identifier in order to evidence permission to store identifiers would defeat the point, and none of it is needed: "this identifier allowed these categories against this notice at this time" is the whole claim, and the identifier in your own cookie is the other half of it.
A change of mind writes a new record rather than editing the old one, because the history of what was agreed and then withdrawn is the part with any evidential value.
5. Version of this notice
The current notice version is 2026-08-1.
Your choice is stored in a first-party cookie named tf_consent that
lasts 395 days, and it records the version of the notice it was
given against. If we add a category or materially revise this notice, that version is bumped and
you are asked again, rather than an old decision being read as agreement to a new notice.
6. Questions and complaints
Questions about this policy, or about anything else concerning your personal data: contact@tanflow.com, with "Data protection" in the subject. If we do not resolve a grievance to your satisfaction, you may take it to the Data Protection Board of India.