Cookie Policy

Who we are and the scope of this notice

Ostro is operated by SP STUDIOZ (OPC) PRIVATE LIMITED, a company incorporated in India, with Corporate Identification Number (CIN) U72900PN2022OPC213485. References to “Ostro”, “we”, “us”, and “our” mean that company.

This Cookie Policy explains device storage and related technologies on the public Ostro website at tryostro.com and Help Center at help.tryostro.com. It should be read with our Privacy Policy.

The inventory below covers the public website. Sign-in, verification, and payment services accessed through app.tryostro.com or a financial provider may involve additional technologies. Information for those features must be provided in the relevant service or supplementary notice; the public-site inventory is not a statement that those services use no cookies.

What cookies and similar technologies do

Cookies are small pieces of information a website or service asks your browser to store and send with later requests. They can support activities such as maintaining a session, protecting a service, remembering a choice, or measuring usage.

Other technologies can store or access information on a device without being called cookies, including browser storage and tracking pixels. A session technology generally lasts for the relevant session; persistent storage can remain until its expiry or deletion. The purpose and actual behaviour matter when deciding what notice or permission is required.

Your browser may also cache ordinary page files, such as images or fonts, to load them efficiently. Caching a website asset is different from creating an advertising profile.

Storage used by the public website

The public Ostro pages do not set first-party cookies or save preferences in local storage or session storage. We use Cloudflare Web Analytics to measure visits and page performance. We do not embed Google Analytics, advertising pixels, or live-chat widgets. Hosting and security services may operate separately from these page features.

• Navigation, search, and filters: do not create a persistent visitor profile. A Help Center search opens its search page with your query in the address; that address may appear in browser history and request records.
• Currency previews and country checks: run using information available on the page and do not send your selections to an analytics service.
• Public document, planning and marketing tools: hold your entries and selected logos only in the open page’s memory. These tools do not use cookies, local storage, session storage or a server to save your entries. Refreshing clears the entries. PDF, CSV, calendar, HTML, text and image exports are files you choose to save on your device. QR codes contain your link or contact details directly, without an Ostro tracking redirect.
• Quote enquiries: the selected currency and payout path may appear in the contact-page URL to prefill your request. This is a page address, not a tracking cookie; it may appear in browser history and ordinary request logs.
• Fonts and images: are served with the website rather than through an embedded third-party font or advertising service.

There is no first-party cookie name or expiry to list for these functions because they do not create such cookies. Cloudflare’s measurement service and any hosting or security technologies should be distinguished from the website features listed here. See Cloudflare’s Web Analytics documentation for details about the measurement service.

Contact forms and email delivery

The public website and Help Center use Cloudflare to receive form submissions and Resend to deliver them to Ostro. Opening a form requests a temporary security token. The token and your draft message are held in the open page’s memory; the form does not write them to cookies, local storage, or session storage.

Your written message is sent only when you submit it. Closing or reloading the page can discard an unsent draft. No Resend widget, tracking pixel, or provider-hosted form is embedded in these pages. If JavaScript is disabled, you can use the email addresses on our Contact page.

Technical request information supports abuse prevention and delivery. See our Privacy Policy and Resend’s Privacy Policy for that processing.

Hosting, security, and account services

The servers and network services delivering a website receive technical requests and may maintain access and security logs. That processing can occur without storing a cookie on your device; our Privacy Policy explains the related privacy considerations.

If a delivery or security service uses device storage, its purpose must be assessed separately. A technology is not automatically necessary merely because a provider describes it as a security or performance feature. Required disclosures and any necessary permission must accompany its use.

Account sessions and payment services can require different storage from public pages. Read the notice provided for the relevant app or provider feature. The notice for an account feature should identify the purposes, providers, and storage periods relevant to that feature.

Consent and optional technologies

The public pages do not offer advertising or saved-preference features. Cloudflare Web Analytics is used for traffic and performance measurement. Device storage, notices, and any required choices must reflect the technologies actually enabled and the requirements applicable to their use.

If optional technologies are introduced, we will update the relevant notice and provide the choices required by applicable law before they are activated. Where consent is required, it must be freely given, specific, and withdrawable; simply continuing to browse or accepting the Terms of Service is not that consent.

Strictly necessary technologies and other lawful exceptions are assessed against the service requested and the applicable rules. A business preference for measurement or advertising does not make a technology necessary for your use of the website.

Your browser controls

You can use your browser’s privacy or site-data settings to view and delete cookies, restrict third-party cookies, clear stored site data, or block storage. Controls vary by browser and device.

Blocking storage may affect sign-in or other services that rely on it, even though the public pages do not require a stored preference. Deleting a browser cookie does not erase records already lawfully held by Ostro or a provider. For a personal-information request, use the contact in our Privacy Policy.

Browser history, cached assets, and autofill information may have separate controls. Private browsing does not make a submitted form or a request to a server anonymous.

Changes and contact

We will revise this policy if the relevant technologies or services change. The date above identifies the latest version. Any required notice and consent for a new technology must be handled when it is introduced; an updated policy alone is not a substitute.

For questions about cookies, device storage, or privacy choices, email privacy@tryostro.com or write to SP STUDIOZ (OPC) PRIVATE LIMITED at the company address in section 1.