1Statutory Context & Scope
This Cookie Policy governs the web applications, intern management portal, candidate verification gateways, and digital services operated by Cybrexus Technology LLP (referred to as "Cybrexus Technology", "we", "us", or "our").
We prioritize digital trust, transparency, and data minimization. This policy explains what digital identifiers and cookies are collected when you access our portal, how they are utilized to safeguard system integrity, and how you may exercise full autonomous control over your cookie preferences.
2What Are Cookies?
A cookie is a small text file placed on your computer, tablet, or smartphone by a web browser when you visit an online portal. Cookies allow the website to recognize your device, maintain authenticated login sessions, protect against fraudulent attempts, and store layout preferences (such as university filters or visual theme).
Cookies may be "Session Cookies" (which are deleted automatically as soon as you close your browser) or "Persistent Cookies" (which remain stored on your device until a defined expiry date or until manually cleared).
3Indian Legal Basis (DPDP Act, 2023)
Our digital data handling practices strictly conform to the primary personal data governance legislation in the Republic of India:
-
Digital Personal Data Protection Act, 2023 (DPDP Act):
- Section 6 (Notice & Consent Architecture): Non-essential cookies are placed only following clear, itemized notice and explicit affirmative consent.
- Section 6(4) (Right of Withdrawal): Users retain the absolute statutory right to revoke, modify, or customize their consent at any point with the same ease with which it was granted.
- Section 8 (General Obligations of Data Fiduciary): We employ reasonable security safeguards to prevent personal data breach and unauthorized alterations.
-
Information Technology Act, 2000 & SPDI Rules, 2011:
- Rule 4 compliance for published privacy disclosures and data security policies.
4Cookie Classification & Web Analytics Usage
Benchmarked against enterprise standards (including Wipro Cookie Classification and Hostinger Legal Standards), we classify cookies into four distinct tiers:
Strictly Necessary
Crucial for security, user login, CSRF tokens, and anti-abuse rate limits. Cannot be switched off.
Functionality Cookies
Remembers visual UI themes, collapsed sidebar state, and university table filter presets.
Performance (Analytics)
Monitors page responsiveness and document generation latency without recording PII.
Targeting / Advertising
Zero commercial advertising or cross-site tracking cookies deployed. Strictly prohibited.
5Detailed Technical Cookie Inventory Matrix
In compliance with itemized disclosure mandates under Section 6 of the DPDP Act 2023, the following technical matrix details every cookie placed by our application:
| Cookie Name | Category | Provider | Statutory Purpose | Retention | Opt-Out Status |
|---|---|---|---|---|---|
PHPSESSID |
Essential | Cybrexus (1st Party) | Maintains authenticated user session across Admin, Staff, and Intern consoles. | Session (browser close) | Required |
csrf_token |
Essential | Cybrexus (1st Party) | Cryptographic protection against Cross-Site Request Forgery during form submission. | Session | Required |
cyb_cookie_consent |
Essential | Cybrexus (1st Party) | Preserves user's verified cookie preferences and statutory consent timestamp. | 180 Days | Required |
rl_* (Rate Limiter) |
Essential | Cybrexus (1st Party) | Mitigates brute-force credential stuffing and denial of service attacks. | Up to 1 Hour | Required |
theme_mode |
Preferences | Cybrexus (1st Party) | Remembers the user's preferred light or dark mode visual interface. | 1 Year | User Controlled |
sidebar_collapsed |
Preferences | Cybrexus (1st Party) | Remembers navigation sidebar collapse state for dashboard viewing convenience. | 1 Year | User Controlled |
academic_filter |
Preferences | Cybrexus (1st Party) | Stores recent university/college dropdown filter selections on management tables. | 30 Days | User Controlled |
perf_telemetry |
Performance | Cybrexus (1st Party) | Aggregates anonymous server response and certificate generation latency benchmarks. | 30 Days | User Controlled |
| None Deployed | Targeting / Ads | None (Third-Party Trackers Blocked) | Section 9 DPDP Act prohibits targeted advertising & commercial student profiling. | None | Prohibited |
6Protection of Students & Minors (Section 9 DPDP Act)
In strict compliance with this statutory requirement:
- Zero Third-Party Advertising Cookies: We do not deploy Meta Pixel, Google AdSense, ByteDance/TikTok pixels, or cross-site commercial data trackers on this platform.
- Zero Behavioral Profiling: We do not sell, license, or monetize candidate browsing behavior, academic metrics, or personal contact information under any circumstances.
- Data Minimization: All data stored in cookies is strictly limited to technical functionality, security auditability, and academic verification.
7How to Manage & Withdraw Consent (Section 6(4))
In accordance with Section 6(4) of the DPDP Act, you possess the right to modify, adjust, or withdraw your cookie preferences at any time. When you modify your preferences:
- Any non-essential cookies previously accepted will be immediately removed or deactivated.
- Your updated consent status will be registered with a new cryptographic timestamp in our compliance records.
Direct Preference Center
Click below to open the interactive preference center and configure your choices:
8Browser-Level Cookie Controls
Beyond our on-site Preference Center, all standard modern browsers permit you to inspect, manage, and delete cookies directly:
- Google Chrome: Settings → Privacy and security → Third-party cookies.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Apple Safari: Preferences → Privacy → Manage Website Data.
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Note: Disabling Strictly Necessary cookies via browser settings may prevent login access to the Intern Dashboard and Admin Portal.
9CERT-In Directives & Security Event Logs
Pursuant to CERT-In (Indian Computer Emergency Response Team) cyber security directives of April 28, 2022, enterprise ICT systems operating within Indian cyberspace are mandated to maintain system, network, and access logs securely for a statutory period of 180 days.
Server-side audit logging performed by our centralized logger captures IP addresses, timestamps, and security events strictly on our secure servers for forensic accountability, completely separate from browser cookie identifiers.
10Grievance Redressal & Data Protection Officer
In compliance with Sections 12 and 13 of the Digital Personal Data Protection Act, 2023, Cybrexus Technology has appointed a designated Grievance Officer for data protection and privacy inquiries.