Important
This policy has been approved for publication by Zappmit LLP. Where an effective date is shown above, it applies from that date. It has not been approved by any government body or regulator, and this page does not say that it has. It does not limit any right you have under law. Online ordering, payment and delivery are currently disabled on this website.
A. What this website uses today
For ordinary visitors this website (zappmit.com) does not set cookies and does not load analytics, advertising or social-media tracking scripts. The single cookie it can set is an essential one used only by the payment test page, described in section B2. Fonts are bundled with the site at build time rather than fetched from a third party when you visit. The only browser-side storage it uses is listed in section B. This statement describes what the website's source code does, and it was checked against the running website on 28 October 2026: its page responses set no cookies, and the browser storage it uses is the list in section B. It is not a promise about future versions. This page will be updated before any change takes effect.
B. Browser storage in use
| Item | Type | Purpose | Lifetime |
|---|---|---|---|
| zappmit_session_token | Local storage | Keeps you signed in between visits. It is the sign-in token for your Zappmit account and is sent only to the Zappmit API with each request you make. | Until you sign out, the server ends the session, or 30 days after sign-in, whichever is first |
| zappmit_delivery_location_v2 | Local storage | Remembers the delivery location you chose and Zappmit confirmed it serves (map position rounded to about 11 metres, plus a short label with the locality, city and PIN code) so nearby stores can be shown without asking again. It is re-checked with Zappmit when you return. | Until you clear it or choose a different location; it has no automatic expiry |
| zappmit_recent_location_searches_v1 | Local storage | Remembers the last few place names or PIN codes you searched for in the delivery-location picker, so you can repeat them. Text only, never sent to Zappmit; the picker's “Clear all” removes it. | Until you press Clear all or clear your browser data; it keeps at most five searches |
| zappmit_guest_cart | Local storage | Keeps the items you add to your basket before signing in, so a page refresh does not empty it. When you sign in, the items move into your account's cart on the server and this item is cleared. | Until you sign in or clear it; it has no automatic expiry |
| zappmit_last_service | Session storage | Remembers which Zappmit service you were last browsing (for example Food and Parcel), so the cart, checkout and payment pages open the right cart. It holds only the service name. | Until the browser tab is closed |
| zappmit_pending_payment | Session storage | While you are sent to the payment provider's page, remembers which payment to check on your return, so the result page can confirm the outcome with the server. | Until the payment is confirmed or the browser tab is closed |
These items exist only to make the pages you ask for work: signing in, remembering your delivery area, holding your basket and confirming a payment you started. You can remove them at any time through your browser's site-data settings; removing the sign-in token simply signs you out.
B2. Cookie used by the payment test page
| Item | Type | Purpose | Lifetime and scope |
|---|---|---|---|
| zappmit_payu_demo | Cookie (HttpOnly, SameSite=Lax, Secure on https) | Shows that the visitor entered the access code for the payment test page, so that page can start a test payment in the payment gateway's sandbox. It holds an expiry time, a random value and a signature, and nothing about you. It is set only when a correct access code is entered, so ordinary visitors never receive it, and it is not used for tracking. | 30 minutes from when the code was accepted; sent to this website only, on every path |
The payment test page is not part of ordering. It creates no order, takes a fixed test amount of ₹10.00 with placeholder details, and moves no real money. It is available only to authorised verifiers. Real orders and payments are not open on this website.
C. What is not used
The website does not use analytics tools, advertising or retargeting pixels, cross-site tracking, or fingerprinting. Because its only cookie is essential and is set only for the payment test page, and it uses no non-essential tracking, it does not show a cookie banner. Indian law does not currently contain a specific cookie-consent rule. Personal data handling more generally is covered by the Privacy Policy.
D. Information received when you use the site
Like any web service, our server receives your IP address and browser details when your browser requests a page. If you use the contact form, the website also sends your IP address and browser identifier to the Zappmit API alongside your message to help prevent abuse. These are described in the Privacy Policy and are not cookies.
E. Third-party pages you may reach
Paying for an order takes you to the payment provider's own hosted page, which has its own cookie and privacy practices that Zappmit does not control. Links to other websites are subject to their own policies.
F. The Zappmit app
The Zappmit mobile apps are separate from this website. They use their own software components, for example for push notifications, maps and location, as described in the Privacy Policy. Analytics components are not enabled in the current app builds.
G. Changes to this policy
If this website begins to use analytics or any other non-essential technology, this page will be updated before the change goes live, and a consent control will be added where the law then in force requires one.
H. Contact
Questions about this policy can be sent to contact@zappmit.com.