Cookie Policy

Last updated: 22 October 2026

A cookie is a small file a website asks your browser to remember between page loads. This page lists every one Crushly uses, what it is for, and how long it lasts. The Privacy Policy covers the personal data side of the same picture.

We use no advertising cookies, no analytics cookies and no cross-site tracking pixels. There is no cookie banner on this app because there is nothing in it to ask you about — the only cookies we set are needed to keep you signed in.

1. The short version

What	How many	Why
Cookies set by Crushly	1 for members, plus 1 for staff previews	To keep you signed in and to keep staff preview sessions separate
Preferences stored in your browser	3	Language, theme, and remembering that you dismissed an announcement
Advertising or analytics cookies	None	We do not run ads and we do not track you across other websites

2. Cookies we set

next-auth.session-token: The session cookie that keeps you signed in. It holds a signed token, not your password, and it is marked httpOnly so page scripts cannot read it. It is set when you sign in and cleared when you sign out. On a secure (https) connection it is stored under the name __Secure-next-auth.session-token instead.
bp_ghost: Set only for staff using the admin preview window, so the preview session is kept separate from the staff member’s own session. It is never set for ordinary members, and it is cleared as soon as the preview window closes.

We do not set any advertising, profiling, analytics, or social-media cookies, and we do not embed third-party trackers on any page of the app.

3. Preferences stored in your browser

These are not cookies — they are values stored in your browser’s local storage on your own device. They never leave your device, and clearing them only resets a preference.

Name	What it remembers	Where it is kept
bp-lang	Whether you chose English or हिंदी	Local storage
theme	Whether you chose the light or dark theme	Local storage
bp-banner-seen	That you have already dismissed an announcement banner	Local storage
admin-tab	Which tab of the admin console was last open	Session storage, staff accounts only

4. Third-party scripts

Two things on this app involve another company’s code, and neither of them runs unless you ask for it:

Payment checkout. When you start a paid-plan purchase, we load Razorpay’s checkout script. Razorpay sets its own cookies under its own policy while the payment window is open. We do not control them, and we do not receive your card number.
Sharing a date plan. The WhatsApp share button opens WhatsApp on your device with the text you chose. WhatsApp may set its own cookies in that tab. Nothing is shared until you press send.

AI companion replies are generated by a language model provider, but that is an API call — not a cookie, and not a script running in your browser. What is sent is described in the Privacy Policy.

5. How to control them

Signing out of Crushly clears the session cookie straight away. If you want to remove everything else, clear site data for this domain in your browser settings — the effect is that you are signed out and your language and theme go back to their defaults.

Every modern browser lets you block or delete cookies for a site. Blocking the session cookie means you will be signed out on every visit, which is the only thing it affects. If you have a question about this, write to us at the contact page.

6. Changes to this policy

If we ever add a cookie that is not strictly necessary, we will update this page first and ask for your consent before setting it. The date at the top always reflects the current version.