Cookie Policy

Cookies are small values a website asks a browser to store and return with later requests. We also use local storage for certain on-device preferences and programme progress. Some storage is necessary to provide a feature. Optional analytics and marketing storage is off unless you choose it.

When a valid preference is not already stored for the current Cookie Policy version, the website presents equally visible Accept All, Reject Optional, and Manage Settings controls.

You can reopen the consent manager using the separate Cookie Settings control in the website footer or legal-page navigation. Your choice lasts for up to 12 months. We ask again when the Cookie Policy version changes.

Rejecting optional storage does not prevent use of the site's essential functions. Withdrawing consent prevents future optional tag loading and removes known first-party analytics or advertising cookies where technically possible. Third-party cookies already created may also need to be removed through browser controls. Withdrawing cookie consent does not delete a Hope Agent chat; use Delete chat for that.

Necessary storage is used without optional analytics or marketing consent because it is required for a requested feature, privacy choice, or security control.

- Name: k2sn_chat_session; Type and provider: First-party, HTTP-only cookie; Purpose: Holds a random opaque Hope Agent session token. The server stores only a versioned HMAC digest. Supports session restoration, expiry, revocation, Quick Exit, and Delete chat.; Duration: Up to 30 days; refreshed with valid use and cleared on Delete chat or Quick Exit. Secure in production and SameSite=Strict.

- Name: k2sn_cookie_consent; Type and provider: First-party cookie; Purpose: Stores the policy version and whether analytics and marketing were accepted. It contains no unique advertising identifier.; Duration: Up to 12 months, or until replaced/cleared. SameSite=Lax and Secure on HTTPS.

- Name: One-time deletion code; Type and provider: Browser-visible value, not a cookie; Purpose: Shown once so a chat can later be deleted if the session cookie is lost. Know2SayNo stores only its keyed digest.; Duration: The digest lasts until chat deletion or retention expiry and never more than 180 days. Save the readable code only if you choose.

Security and rate limiting may also use ephemeral server-side state. It is not used for advertising.

The website may store these first-party values only in the browser:

- Name: completedTrackDays; Purpose: Remembers completed programme days.; Duration: Until cleared in the browser.

- Name: hasAcceptedFirstStepDisclaimer; Purpose: Remembers acceptance of the First Step programme disclaimer.; Duration: Until cleared in the browser.

- Name: completedSteps; Purpose: Remembers completed journey or programme steps.; Duration: Until cleared in the browser.

- Name: completedStepSections; Purpose: Remembers completed subsections.; Duration: Until cleared in the browser.

These values are not Hope Agent credentials and are not sent as chat profile fields. Clearing site data in your browser removes them.

Analytics is optional and maps to Google's analytics_storage consent signal. If enabled after consent, approved Google or other measurement tags may store or read identifiers and send usage events to their configured destinations. This may be used to understand visits, pages, interactions, device/browser characteristics, and aggregate site performance.

The public cookie table will be updated whenever the approved Google Tag Manager inventory introduces or changes an analytics destination, cookie, or retention setting. The container is enabled at the application level but cannot load unless the visitor has opted into analytics or marketing.

Marketing is optional and maps to Google's ad_storage, ad_user_data, and ad_personalization consent signals. If enabled after consent, approved advertising tags may store or read identifiers, measure campaigns, or support advertising personalisation as described by the relevant provider.

No marketing tag may be enabled until its purpose, trigger, destination, cookies, data fields, and retention are documented in the public inventory and approved. Reject Optional keeps all these signals denied.

The site is configured for Google Tag Manager container GTM-549TC5HG. It uses basic consent mode:

- optional categories default to denied;

- no GTM script, iframe, or Google consent-mode request is loaded before opt-in;

- returning visitors with a valid current opt-in may receive GTM early in the document;

- the <noscript> GTM iframe is rendered only where a valid server-readable opt-in already exists; and

- withdrawal prevents future tag loading and reloads the page if needed to stop an already loaded container.

The application enables the container only through these consent controls. Tags inside the container must also use the corresponding consent requirements, and their triggers, destinations, cookies, data fields, and retention settings remain subject to release review.

Google's explanation of basic and advanced consent mode is available at: https://support.google.com/tagmanager/answer/10000067

On withdrawal, the website attempts to remove known first-party optional cookies. These include:

Google Analytics client cookie: _ga

Google Analytics session cookie: _gid

Google Analytics request-rate cookie: _gat

Other Google Analytics and Google Ads cookies with variable suffixes

Google's conversion-linker cookie

Meta browser cookie: _fbp

Browser restrictions, third-party domains, or provider behavior may prevent the website from removing every previously created cookie. You can clear cookies and site data in browser settings for a complete device-side reset.

Most browsers let you inspect, block, or delete cookies and local storage. Blocking all storage may prevent Hope Agent sessions, Cookie Settings, or saved progress from working. Because browser Do Not Track signals are not implemented consistently across the industry, use the website's Reject Optional or Manage Settings controls for the choices described here.

We may update this policy when tags, providers, laws, or website behavior changes. The published page displays its version, effective date, last-updated date, and approval status, and a version change causes the website to request your choice again.

Questions or complaints:

Anand Mathew, Grievance Officer

Urban Restora Foundation

2EC 313, HRBR 3rd Block, Kalyan Nagar, Bangalore 560084, India

webmaster@urbanrestora.com