Cookie & Storage Disclosure
Clear transparency regarding strictly necessary session cookies and local browser storage inside Rebitto Business OS.
1. Strictly Essential Authentication Cookies
Rebitto uses strictly essential HTTP session cookies (via Better Auth) to preserve authenticated sessions, protect API endpoints against cross-site request forgery, and identify your active workspace cleanly.
2. Offline PWA & IndexedDB Storage
To support offline Point of Sale registers and rapid catalog lookup, our Progressive Web App caches catalog records and signed entitlement tokens inside your browser's local IndexedDB storage until synced.
3. Payment Checkout Cookies
When opening Razorpay Checkout to verify a recurring payment mandate, Razorpay's embedded gateway script operates under Razorpay's own PCI-DSS compliant session and fraud-prevention controls. We do not embed third-party ad tracking pixels on Rebitto.