Cookie Policy
Last updated: 30 July 2026. Effective immediately.
1. What are cookies
Cookies are small text files stored in your browser by websites you visit. They are used for things like keeping you signed in, remembering your preferences, and measuring how the site is used. We also use similar technologies (local storage, session storage, ETags) for the same purposes; this policy covers them too.
2. What we use
Nishan uses only the cookies needed to run the product. The marketing site at nishanhq.com does not set advertising cookies and does not run third-party tracking scripts.
3. Essential cookies
These cookies are required for the service to work. They cannot be switched off.
| Cookie | Domain | Purpose | Lifetime |
|---|---|---|---|
nishan_rt |
app.nishanhq.com | Tenant refresh token (httpOnly, SameSite=Strict). Used to issue new access tokens after the access JWT expires. | 30 days, sliding |
nishan_admin_rt |
admin.nishanhq.com | Platform-admin refresh token (httpOnly, SameSite=Strict, path-scoped
to /admin). |
30 days, sliding |
nishan_csrf |
app / admin | Anti-CSRF token for state-changing requests from the dashboard. | Session |
nishan_locale |
nishanhq.com | Stores the visitor's selected language (en / ur) for the marketing site. | 12 months |
4. Analytics (optional)
The marketing site loads Google Fonts over Google's CDN. We do not run Google Analytics, Facebook Pixel, or any third-party analytics by default. If we add privacy-respecting analytics in the future, we will update this page and add a consent banner before any non-essential cookies or scripts are set.
5. Third-party cookies
The marketing site embeds resources from a small set of trusted providers (for example, Google Fonts CSS). These providers may set their own cookies or read identifiers for performance and security purposes. See:
- Google Fonts (policies.google.com/privacy)
6. How to control cookies
You can clear or block cookies in your browser at any time. The exact steps depend on your browser; here are the most common entry points:
- Safari: Preferences → Privacy.
- Chrome: Settings → Privacy and security → Cookies and other site data.
- Firefox: Preferences → Privacy & Security.
- Edge: Settings → Cookies and site permissions.
Blocking essential cookies will sign you out and may prevent the dashboard or admin console from loading.
7. Contact
Questions about cookies: privacy@nishanhq.com. For the full data picture, see our Privacy Policy.