Cookie Policy

Last updated: 2026-03-19

Cookie Policy

Effective Date: March 19, 2026 Last Updated: March 19, 2026

This Cookie Policy explains how 2BFT Academy (2bft.in), operated by 2 Boys From Town ("2BFT," "we," "us," or "our"), uses cookies and similar technologies on our website. We're Nav and Sujal, and we believe in being transparent about the technologies we use and why.

This policy should be read alongside our Privacy Policy, which provides more detail about how we handle your personal data.

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or smartphone) when you visit a website. They are widely used across the internet to make websites work efficiently, provide a better user experience, and give website owners useful information about how their site is being used.

Each cookie typically contains:

The name of the website that created it
A unique identifier (a string of numbers and letters)
An expiry date (after which the cookie is automatically deleted)

Cookies are not programs and cannot install malware, viruses, or any harmful software on your device. They are simple text data.

2. Similar Technologies

In addition to traditional cookies, we may use similar technologies that serve comparable purposes:

Local Storage: A web storage mechanism that allows websites to store data in your browser. Unlike cookies, local storage data is not sent to the server with every request. We use local storage to remember your preferences and session state.
Session Storage: Similar to local storage, but the data is cleared when you close your browser tab. We use session storage for temporary data during your browsing session.
Pixels / Web Beacons: Tiny, transparent images embedded in web pages that can track whether a page has been viewed. We use these minimally and only for analytics purposes.

When we refer to "cookies" in this policy, we include all of these similar technologies unless otherwise specified.

3. How We Use Cookies

We use cookies for three main purposes: keeping the site running (essential), remembering your preferences (functional), and understanding how people use the site (analytics). We break these down in detail below.

Importantly: We do NOT use advertising cookies, tracking cookies for ad targeting, or any cookies that build profiles about you for the purpose of serving ads. We don't run ads, and we don't sell your data. Our cookies exist to make the site work and to help us improve it.

4. Types of Cookies We Use

4.1 Essential Cookies (Strictly Necessary)

These cookies are required for the basic functionality of our website. Without them, certain features would not work. They cannot be disabled without breaking the site.

| Cookie / Technology | Purpose | Duration | Provider | |---------------------|---------|----------|----------| | Session cookie | Maintains your login session so you don't have to sign in on every page | Session (deleted when you close browser) | 2bft.in | | Authentication token | Securely identifies your account when you are logged in | Up to 30 days | 2bft.in | | CSRF token | Protects against cross-site request forgery attacks — a security measure | Session | 2bft.in | | Cookie consent preference | Remembers your cookie consent choice so we don't ask again on every visit | 1 year | 2bft.in | | Load balancer cookie | Routes your requests to the same server for a consistent experience | Session | Vercel |

Lawful basis: These cookies are strictly necessary for the operation of the website and do not require your consent under most privacy frameworks, including the DPDPA.

4.2 Functional Cookies (Preferences)

These cookies remember your choices and preferences to provide a more personalized experience. They are not strictly necessary for the site to function, but they make your experience smoother.

| Cookie / Technology | Purpose | Duration | Provider | |---------------------|---------|----------|----------| | Theme preference | Remembers your light/dark mode preference | 1 year | 2bft.in | | Language preference | Stores your preferred language (if applicable) | 1 year | 2bft.in | | Dismissed notifications | Remembers which banners or notifications you have dismissed | 90 days | 2bft.in | | Last viewed skill | Remembers the last skill or lesson you were viewing for easy resumption | 30 days | 2bft.in | | Local storage: progress | Stores your learning progress data locally for fast access | Persistent until cleared | 2bft.in |

Lawful basis: Consent. You can disable these cookies, but some personalization features will not work.

4.3 Analytics Cookies

These cookies help us understand how visitors use our website — which pages are popular, how people navigate the site, and where they encounter issues. This information is aggregated and anonymized where possible.

We use analytics cookies solely to improve our platform. We do not use them for advertising or to build advertising profiles. In line with best practices for Indian users under the DPDPA 2023, analytics cookies are strictly consent-first — they are loaded only after you explicitly opt in.

| Cookie / Technology | Purpose | Duration | Provider | |---------------------|---------|----------|----------| | Google Analytics 4 (_ga) | Distinguishes unique users across sessions for aggregate traffic reporting | 2 years | Google (GA4) | | Google Analytics 4 (_gid) | Throttles request rate and distinguishes sessions | 24 hours | Google (GA4) | | Google Analytics 4 (_gat) | Throttles request rate to Google Analytics | 1 minute | Google (GA4) | | GA4 Measurement ID cookie | Associates user behavior with a specific GA4 data stream | Session | Google (GA4) | | Vercel Analytics | Measures page performance, load times, and Core Web Vitals | Session | Vercel | | Vercel Speed Insights | Collects real-user performance metrics to help us optimize page speed | Session | Vercel |

Lawful basis: Consent. You can opt out of analytics cookies through our cookie consent mechanism or your browser settings. No analytics cookies fire before consent is granted.

5. Cookies We Do NOT Use

We want to be clear about the kinds of cookies we do not use:

Advertising cookies: We do not serve ads on 2BFT Academy, and we do not use cookies to track you for advertising purposes. No Google Ads, Facebook Pixel, or similar advertising trackers are present on our site.
Cross-site tracking cookies: We do not use cookies that track your activity across other websites to build a profile about your interests.
Social media tracking cookies: We do not embed social media tracking pixels or cookies from platforms like Facebook, Instagram, or Twitter that would allow those platforms to track your visit to our site.
Retargeting cookies: We do not use cookies to retarget you with ads on other websites after you visit ours.

If we ever introduce any of these cookie types in the future, we will update this policy and request your explicit consent before activating them.

6. Third-Party Cookies

Some cookies on our site are set by third-party services that we use. Here is a detailed breakdown:

6.1 Google Analytics 4 (GA4)

Google Analytics 4 sets cookies (including _ga, _gid, and _gat) that help us understand site usage. These cookies are set by Google and are subject to Google's Privacy Policy. We use GA4 in consent-first mode — the GA4 snippet does not load until you have accepted analytics cookies via our consent banner. This ensures no data is collected from users who have not opted in, which is consistent with India's DPDPA 2023 requirements.

GA4 processes data on Google's servers, which may be located outside India (including in the United States). Google has implemented appropriate safeguards for international data transfers as described in their privacy documentation.

We have configured GA4 to:

Anonymize IP addresses — IP masking is enabled so your full IP address is never stored by Google
Disable advertising features — no data is shared with Google's advertising network; we do not enable Google Signals or advertising reporting features
Set data retention to 14 months (GA4 default), after which event data is automatically deleted
Restrict data processing — we have enabled restricted data processing where applicable

6.2 Vercel

Vercel, our hosting provider, may set cookies related to site performance monitoring and analytics. Vercel Analytics is designed to be privacy-focused, collecting aggregated performance data rather than personally identifiable information.

Vercel's data handling is subject to Vercel's Privacy Policy.

6.3 Payment Processor

When you visit our checkout or payment pages, our third-party payment processor may set cookies necessary for processing your payment securely. These cookies are essential for the payment flow and are governed by the payment processor's own privacy and cookie policies.

7. Cookie Consent

7.1 How We Obtain Consent

When you first visit 2bft.in, you will see a cookie consent banner that informs you about our use of cookies and gives you the option to:

Accept all cookies — enables essential, functional, and analytics cookies
Accept only essential cookies — enables only the cookies strictly necessary for the site to function
Customize your preferences — choose which categories of cookies to enable or disable

7.2 Your Consent Choice

Your consent preference is stored in a cookie on your device for 1 year. After that, or if you clear your cookies, you will be asked again.

You can change your cookie preferences at any time by:

Clicking the "Cookie Preferences" link in our website footer
Clearing your browser cookies and revisiting the site (which will trigger the consent banner again)

7.3 Consent for Analytics

Analytics cookies (Firebase and Vercel) are only activated after you provide consent. If you choose "essential only," no analytics cookies will be set and no usage data will be collected through these tools.

7.4 Pre-Consent State

Before you make a consent choice, only essential cookies are active. We do not pre-load analytics or functional cookies before you consent.

8. How to Manage and Disable Cookies

Beyond our cookie consent mechanism, you can manage cookies through your browser settings. Here is how to do it in the most common browsers:

8.1 Google Chrome

Click the three dots menu (top right) > Settings
Go to Privacy and Security > Cookies and other site data
Choose your preferred setting (block all cookies, block third-party cookies, etc.)
To delete existing cookies: Privacy and Security > Clear browsing data

8.2 Mozilla Firefox

Click the hamburger menu (top right) > Settings
Go to Privacy & Security
Under Cookies and Site Data, choose your preference
To delete existing cookies: click Clear Data

8.3 Safari (macOS / iOS)

Go to Safari > Preferences (macOS) or Settings > Safari (iOS)
Go to the Privacy tab
Choose your cookie blocking preference
To delete existing cookies: click Manage Website Data > Remove All

8.4 Microsoft Edge

Click the three dots menu (top right) > Settings
Go to Cookies and site permissions > Cookies and data stored
Choose your preferred setting
To clear cookies: Privacy, search, and services > Clear browsing data

8.5 Other Browsers

Most browsers allow you to manage cookies through their settings or preferences menu. Look for a "Privacy" or "Security" section. Consult your browser's help documentation for specific instructions.

8.6 Mobile Devices

On mobile devices, you can manage cookies through your mobile browser's settings. Additionally, you can reset your device's advertising identifier through your device settings (though we do not use advertising identifiers).

9. Impact of Disabling Cookies

If you choose to disable or block certain cookies, here is what you can expect:

9.1 Disabling Essential Cookies

If you block essential cookies, key features of the website will not work properly:

You will not be able to stay logged in — you'll be asked to sign in on every page visit
Security features (like CSRF protection) may not function, potentially blocking form submissions
Your session may not persist, causing inconsistent behavior across pages

We strongly recommend keeping essential cookies enabled.

9.2 Disabling Functional Cookies

If you disable functional cookies:

Your theme preference (light/dark mode) will not be remembered — the site will use the default theme on each visit
Your learning progress may not be saved locally for quick access
Dismissed notifications may reappear

The site will still work, but your experience will be less personalized.

9.3 Disabling Analytics Cookies

If you disable analytics cookies:

There is no impact on your experience. The site works exactly the same.
We simply won't collect usage data from your visits, which means we have less information to improve the platform.

This is the safest category of cookies to disable if you are concerned about privacy.

10. Do Not Track (DNT) Signals

Some browsers send a "Do Not Track" (DNT) signal with web requests. There is currently no universal standard for how websites should respond to DNT signals. At present, 2BFT Academy does not respond differently to DNT signals. However, you can control tracking through our cookie consent mechanism as described in Section 7.

11. Cookie Duration

Cookies have different lifespans depending on their type:

Session cookies are temporary and are deleted when you close your browser. They are used for things like maintaining your login during a single browsing session.
Persistent cookies remain on your device for a set period (until they expire or you delete them). They are used for things like remembering your preferences across visits.

The specific duration of each cookie is listed in the tables in Section 4. We aim to set the shortest reasonable expiry period for each cookie based on its purpose.

12. Cookies and Children

Consistent with our Privacy Policy, 2BFT Academy is intended for users aged 18 and above. We do not knowingly set cookies on devices of users under 18 without parental consent. If a parent or guardian becomes aware that cookies have been set on their child's device through our site, they can clear the cookies through browser settings and contact us at [email protected].

13. Cookie Security

We take the following measures to ensure cookies are used securely:

Secure flag: Authentication and session cookies are set with the Secure flag, meaning they are only transmitted over encrypted HTTPS connections.
HttpOnly flag: Sensitive cookies (like session tokens) are set with the HttpOnly flag, preventing them from being accessed by client-side JavaScript. This protects against cross-site scripting (XSS) attacks.
SameSite attribute: Our cookies use the SameSite attribute to prevent cross-site request forgery (CSRF) and reduce cross-site data leakage.
No sensitive data in cookies: We never store passwords, payment information, or other sensitive personal data directly in cookies.

14. Cookie Audit and Review

We periodically audit the cookies used on our platform to ensure:

Only necessary cookies are being set
Cookie durations are appropriate and not excessive
Third-party cookies align with our data processing agreements
New cookies introduced by platform updates are identified and documented
Deprecated or unused cookies are removed

Our most recent cookie audit was conducted in March 2026.

15. Compliance

This Cookie Policy is designed to comply with:

India's Digital Personal Data Protection Act, 2023 (DPDPA): We obtain consent for non-essential cookies and provide clear information about how cookies are used.
Information Technology Act, 2000 (IT Act): Our use of cookies complies with reasonable security practices as prescribed under the IT Act and associated rules.
General best practices: While not directly applicable in India, we follow principles similar to the EU's ePrivacy Directive as a matter of good practice — including providing clear information, obtaining opt-in consent for non-essential cookies, and enabling users to manage their preferences.

16. Your Questions and Concerns

If you have any questions about our use of cookies, want to report a concern, or need help managing your cookie preferences, please contact us:

2 Boys From Town Email: [email protected] Website: 2bft.in

We will respond to your inquiry within 72 hours.

17. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in technology, or changes in applicable law. When we make changes:

We will update the "Last Updated" date at the top of this page.
For significant changes (such as introducing new cookie categories), we will reset the cookie consent banner so you can make an informed choice.
We will not introduce advertising or cross-site tracking cookies without clearly notifying you and obtaining your explicit consent.

We encourage you to review this Cookie Policy periodically.

18. Relationship to Other Policies

This Cookie Policy is part of our overall approach to privacy and data protection. Please also review:

Privacy Policy — comprehensive details on how we collect, use, and protect your personal data
Terms of Service — the legal terms governing your use of 2BFT Academy
Refund Policy — terms for cancellations and refunds

Together, these documents form the complete legal framework for your use of 2BFT Academy.

This Cookie Policy was last updated on March 19, 2026.

Questions about this policy?

Email us at [email protected] — we respond within 72 hours.