Last updated:
Introduction
হবে নাকি Coffee? (“we”, “us”, “the platform”) uses cookies and similar technologies to improve your experience, keep the platform secure, and understand platform performance.
This Cookie Policy is prepared in accordance with applicable Bangladesh law, including the ICT Act 2006 (amended 2013), Digital Security Act 2018, and the Personal Data Protection Ordinance 2025 (PDPO 2025) where applicable.
This policy should be read together with our Privacy Policy.
What are cookies and similar technologies?
Cookies: Small text files stored by your browser on your device to (a) maintain sessions, (b) remember preferences/settings, and (c) measure usage.
Local & Session Storage: Browser-based data storage. We typically use this to save UI preferences (e.g., dark/light mode) or partial form data.
Web Beacons & Pixels: Tiny images or code embedded in web pages or emails to measure actions such as page visits or email opens.
Types of cookies we use
1. Strictly Necessary
Legal basis: Contractual necessity and legitimate interests. No separate consent is required for these cookies.
- Login/session management and account security.
- CSRF (Cross-Site Request Forgery) protection.
- KYC session tracking (linking desktop and mobile during identity verification — active for up to 30 minutes).
- Fraud/spam prevention.
- Payment processing security.
2. Functional
Legal basis: Legitimate interests. These can be disabled, but some features may not work correctly.
- Remembering language or theme preferences (dark/light mode).
- Saving partial form data.
3. Performance/Analytics
Legal basis: Consent (per PDPO 2025). These are not loaded until you grant permission via the cookie consent banner on your first visit.
- Google Tag Manager (GTM) & Google Analytics: Traffic analysis. Subject to Google’s privacy policy.
- Microsoft Clarity: Click/scroll heatmap analysis for UX improvement. Subject to Microsoft’s privacy policy.
To withdraw consent, email us or block third-party cookies from your browser settings.
4. Marketing/Tracking
Legal basis: Consent.
We generally do not use cookies for sensitive, personalized ad targeting. However, when third-party tools are active, they may set their own cookies.
Authentication and Payment Gateway Cookies
- Social Logins: If you log in via Google or Facebook, those providers may set their own cookies to authenticate your identity.
- Payment Processing: Payment gateways including SSLCommerz, bKash, Nagad, and Rocket use strictly necessary cookies for security and fraud prevention. We do not control these third-party payment cookies.
Consent
Under PDPO 2025 and applicable Bangladesh law, we seek your separate consent for analytics and tracking cookies (beyond strictly necessary ones). A cookie consent banner may be displayed when you first access the platform.
You may withdraw consent for analytics cookies at any time by emailing support@hobenakicoffee.com or by adjusting your browser settings.
Do Not Track (DNT): Because there is currently no universal standard for recognizing DNT signals, we do not automatically respond to them.
Your controls and choices
You can control or block cookies through your browser settings:
- Google Chrome: Settings › Privacy and security › Cookies and other site data.
- Safari: Preferences › Privacy › Block all cookies.
- Mozilla Firefox: Options › Privacy & Security › Cookies and Site Data.
What happens if you disable cookies: If you block Strictly Necessary Cookies, core features of the platform (login, payments, KYC) may not function properly.
How long cookies last
- Session cookies: Deleted when you close your browser or the session ends. KYC session cookies expire after a maximum of 30 minutes.
- Persistent cookies: May remain for days up to a maximum of 2 years. We aim not to retain cookies longer than necessary.
- Third-party cookies: Google Analytics, Microsoft Clarity — subject to their own retention policies (typically up to 13 months).
Third-party cookies and analytics tools
Third-party services we may use:
- Google Tag Manager (GTM) & Google Analytics: Traffic and interaction analysis. See Google’s Privacy Policy.
- Microsoft Clarity: Heatmap and interaction recording for UX improvement. See Microsoft’s Privacy Policy.
Third-party tools are governed by their own policies. Your consent is obtained before these tools are activated.
Changes to this policy
We may update this Cookie Policy to reflect technological or legal changes. For significant changes, at least 15 days’ notice will be provided. The latest version will always be published on this page.
Contact
For cookie or privacy-related questions, requests, or complaints:
Email: support@hobenakicoffee.com
Website: https://hobenakicoffee.com