Cookie Policy

The few essential cookies and browser settings Banao uses, what each one does, and how long it's kept. No advertising or tracking cookies.

Effective 4 October 2026

1. What cookies are

Cookies are small files a website stores in your browser. Banao uses only strictly necessary cookies: ones needed to sign you in, keep your account secure and remember choices you’ve made. We don’t use advertising, analytics or tracking cookies, so we don’t ask for cookie consent.

2. Cookies we use

All of these are set by Banao itself, sent only over secure connections, and marked HttpOnly so scripts on the page can’t read them.

CookieWhat it’s forKept for
refreshTokenKeeps you signed in between visits.30 days
trustedDeviceLets a device you chose to trust skip the emailed sign-in code.30 days
accountSwitcherRemembers the accounts you chose to keep on this device for Switch account.90 days
oauth_stateProtects sign-in with Google against request forgery.10 minutes
sitePreviewOnly for staff previewing features before they launch.30 days

3. Browser storage

We also keep a few small settings in your browser’s storage. They never leave your device and contain no personal information.

KeyWhat it’s for
banao:tour-seenRemembers that you've seen the dashboard tour, so it isn't shown again.
banao:cache-versionLets the site refresh itself after we publish an update.
banao:stale-build-reloadStops the site reloading more than once after an update (cleared when you close the tab).
banao:marketplace-columnsRemembers how many columns you chose for listings.
banao:blog-draft / banao:monitorStaff only: unsaved blog drafts and staff activity settings.

4. Third-party services

Some features rely on other services, which receive your IP address and may set their own cookies under their own policies:

  • Cloudflare, which hosts and protects the site, may set a strictly necessary security cookie (such as __cf_bm) to tell people from bots.
  • The site’s fonts are served from our own domain, so no font provider sees your visit. Sign in with Google takes you to Google, which applies its own cookie policy.
  • YouTube and Vimeo videos embedded in blog posts load from those services when you play them (YouTube in its privacy-enhanced mode).
  • Zoom, Google Meet and Microsoft Teams apply their own cookies when you join a meeting.

5. Managing cookies

You can clear or block cookies in your browser settings, but because ours are essential, blocking them will stop you from signing in. To remove a trusted device or a remembered account without clearing everything, use your Security settings or the Switch account menu. For how we handle personal information generally, see our Privacy Policy.

Banao.com.pk