Technical Architecture & Web Storage Governance

Cookie Policy

Effective & Last Updated: August 28, 2026 | DPDP Act 2023 Section 6 & 30-Day Consent Lifecycle

Technical & Statutory Web Storage Notice

This Cookie Policy provides an exhaustive technical and statutory explanation of how Indian Athletes Unified Hub ("IAUH", "Platform", "We", "Us", "Our") deploys HTTP cookies, HTML5 LocalStorage, SessionStorage, and client-side web storage technologies.

Structured in strict alignment with Section 6 of the Digital Personal Data Protection Act, 2023 (DPDP Act 2023) and the Information Technology Act, 2000, this policy governs the technical taxonomy, 30-day persistence lifecycle, purpose limitations, and user management controls for all browser storage on the platform.

1. Technical Taxonomy of Web Storage Technologies

Modern web platforms utilize standardized client-side storage mechanisms to deliver authenticated security and responsive user experiences:

A. HTTP Cookies

Small alphanumeric data strings transmitted via HTTP headers and saved by your browser. We utilize First-Party, Secure, SameSite-configured cookies for authenticated session management and anti-CSRF token verification.

B. HTML5 LocalStorage

Client-side persistent key-value storage accessed directly by JavaScript. LocalStorage enables the platform to remember user interface preferences, tournament filter states, and your 30-day consent selection without transmitting data in HTTP request headers.

C. HTML5 SessionStorage

Ephemeral, tab-isolated browser storage that automatically purges as soon as the active browser tab or window is closed. Used solely for transient navigation state.

2. Non-Invasive Data Privacy & Zero Ad Tracking Guarantee

Zero Commercial Ad Tracking Guarantee

Unlike commercial media portals or advertising aggregators, IAUH DOES NOT deploy third-party advertising pixels, cross-site tracking beacons, social media remarketing tags, or data monetization scripts (e.g., Meta Pixel, Google AdSense, ByteDance web trackers).

Web storage technologies are deployed strictly for authentication, cryptographic anti-CSRF security defense, site latency telemetry, and preserving your explicit statutory consent decisions.

3. Technical Storage Categorization & Purpose Matrix

In compliance with DPDP Act 2023 Section 6 itemized notice requirements, all browser storage deployed on IAUH is classified into distinct functional categories:

1. Strictly Necessary / Essential Storage

Statutory / Always Active

Essential storage technologies are indispensable for security defense, user authentication, session integrity, and platform navigation. Under DPDP Act Section 6, these essential markers are active by default because core services cannot be delivered securely without them.

`iauh_session`: Authenticated user JWT session state (HttpOnly / Secure).

`csrf_token`: Anti-Cross-Site Request Forgery cryptographic validation token.

`iauh_cookie_consent_v2`: Encrypted JSON consent state record (30-day lifecycle).

`_sec_fp`: Keyed HMAC anomaly marker for brute-force login prevention.

2. Performance & Diagnostic Telemetry Storage

User Opt-In Required

Performance storage collects aggregated, anonymized telemetry metrics regarding page render velocity, Core Web Vitals, API response latency, and broken asset diagnostics. Telemetry data is never linked to individual athlete identity.

`iauh_analytics_opt`: Boolean flag recording user telemetry choice (`true/false`).

`perf_metrics`: Aggregated page render timing metrics (Session duration).

3. Personalization & Interface Preference Storage

User Opt-In Required

Personalization storage remembers user interface preferences, such as selected sporting disciplines, high-density data table views, and accessibility high-contrast settings.

`iauh_pref_sport_filter`: Remembers active sports discipline filter in directories.

`iauh_pref_density`: Preserves preferred telemetry density view on dashboards.

4. 30-Day Consent Lifecycle & Persistence Mechanism

IAUH enforces a transparent, automated 30-day consent lifecycle:

  • Consent Capture: When you record your preferences via our interactive consent modal, your selection is saved in browser LocalStorage and encoded with an explicit 30-day lifecycle (`max-age=2592000` seconds).
  • Consent Record Schema:
    {
  "consentId": "iauh_c7f8a92b...",
  "version": "v2.0",
  "necessary": true,
  "analytics": boolean,
  "preferences": boolean,
  "timestamp": "2026-08-28T12:00:00.000Z",
  "expiresAt": "2026-09-27T12:00:00.000Z",
  "source": "cookie_consent_modal"
}
  • 30-Day Suppression Window: During these 30 days, the consent prompt remains dormant, respecting your decision across all pages.
  • Automated Expiration & Re-Affirmation: After 30 calendar days, stored consent automatically expires and is cleared from browser storage, prompting you to review and re-affirm your preferences.

5. Statutory Proof of Consent Audit Trails (DPDP Act Section 6)

Under Section 6(1) of the DPDP Act 2023, Data Fiduciaries must maintain verifiable proof that consent was obtained freely, informedly, and unambiguously. When you submit preferences, IAUH generates a unique `consentId`, dispatches a custom browser event (`iauh_cookie_consent_changed`), and securely logs the affirmative consent record.

This mechanism provides verifiable evidence of statutory compliance without compromising user anonymity.

6. Granular User Consent Management & Browser Controls

You possess full autonomy over your storage preferences. You may update your choices or clear stored cookies at any time:

  • Google Chrome: Settings > Privacy and Security > Third-party cookies > See all site data and permissions.
  • Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data > Manage Data.
  • Apple Safari: Settings > Safari > Advanced > Website Data.
  • Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data.
  • Brave / Opera: Settings > Privacy and security > Site Settings > Cookies.

* Note: Disabling Strictly Necessary cookies will prevent secure login to athlete passports and authenticated dashboard features.

7. Infrastructure Sub-Processor & Edge Network Storage

IAUH utilizes enterprise edge delivery infrastructure (e.g., Cloud CDN and TLS acceleration nodes) to ensure rapid loading across all 28 States and 8 Union Territories in India.

Edge infrastructure sub-processors may deploy temporary security markers to mitigate Distributed Denial of Service (DDoS) attacks and validate TLS handshakes. All edge processing is bound by strict Data Processing Agreements and localized inside Indian sovereign network points of presence.

8. Policy Revisions & Compliance Contact

IAUH may update this Cookie Policy periodically to reflect technological enhancements or statutory guidelines issued by the Data Protection Board of India. Material modifications will be highlighted through updated effective date banners.

For inquiries regarding web storage governance or data protection, please reach our compliance team via our designated contact email or submit an inquiry through our Contact & Support Page.

Indian Athletes Unified Hub (IAUH)

Maintaining Technical Excellence & Transparency in Indian Sports

Privacy PolicyTerms of Service