Zero Ad TrackersEffective: 1 November 2026 • Updated: 3 November 2026

Cookie & Session Security Policy

Exact list of strictly necessary security cookies used by RapidShift Labs — with zero third-party advertising trackers.

Plain-English Summary (Key Takeaways)

We use ONLY strictly necessary security cookies required to keep you signed in and protect Google/Meta OAuth handshakes.
We do NOT use third-party advertising pixels, cross-site behavioral tracking cookies, or fingerprinting scripts on our platform.

1. Strictly Necessary First-Party Security Cookies

RapidShift Labs uses minimal, cryptographically signed HttpOnly cookies strictly required to authenticate your session and defend against Cross-Site Request Forgery (CSRF):

Cookie Name	Host Scope	Purpose	Expiry & Flags
`rsl_session`	`app.rapidshiftlabs.in`	Authenticates signed-in workspace users and active business selection	30 days • `HttpOnly`, `Secure`, `SameSite=Lax`
`rsl_google_oauth_ctx`	`app.rapidshiftlabs.in`	Verifies PKCE (`S256`) state during 1-click Google Drive / GBP connection	10 minutes • `HttpOnly`, `Secure`, `SameSite=Lax`
`rsl_staff_session`	`admin.rapidshiftlabs.in` (Host-Only)	Authenticates authorized internal RapidShift Labs operations staff	12 hours • `HttpOnly`, `Secure`, `SameSite=Lax`

2. Payment Gateway Checkout Context

When—and only when—you initiate an online card/UPI recharge via Razorpay Checkout on the Billing page, checkout.razorpay.com may set fraud-prevention session storage or cookies governed by Razorpay's Privacy Policy to complete RBI two-factor authentication.

Registered Entity & Compliance Desk — RSL Marketing Technologies

GSTIN: 27AAACR5055K1Z1 (Maharashtra)

Billing & Refunds: billing@rapidshiftlabs.in Privacy & Grievance: privacy@rapidshiftlabs.inSupport: +91 98200 00000