Legal Information

Cookie Policy

Ethition Online Examination Platform

Last updated: 8 October 2026

1. Purpose and Scope

1.1 Purpose

The Cookie Policy (the “Policy”) describes the cookies and similar technologies that Cordiia Software Technologies Private Limited (the “Company”) uses on the Ethition online examination platform, which comprises the website at https://ethition.com, the web application, and the mobile applications (together, the “Platform”). It identifies the purposes of each category, names the third parties involved, and explains how a visitor or user can accept, refuse, or withdraw consent. Capitalised expressions that are not defined here carry the meaning given in the Company’s Terms and Conditions.

1.2 Relationship to the Privacy Policy

Where a cookie or similar technology processes personal data, the Privacy Policy explains the purposes, the legal bases, the recipients, and the individual’s rights. The Cookie Policy concentrates on the technologies themselves and on the choices available to the person whose device is used.

1.3 Registered Office

The Company’s registered office is at No-850, Kamalpur, Balighai, Egra, Purba Medinipur, West Bengal, India 721422.

2. Technologies Used

2.1 Cookies

A cookie is a small text file that a website places on a device through the browser. Session cookies expire when the browser is closed, whereas persistent cookies remain on the device until they expire or are deleted. First-party cookies are set by the Platform itself, and third-party cookies are set by another organisation whose service is built into the Platform.

2.2 Similar Technologies

The Platform also uses browser local storage and session storage to keep an assessment session in step with the server, so that a Candidate who suffers an interruption can resume from the point at which the session stopped. Pixel tags and software development kits embedded in a mobile application may collect device and usage information, and an application on a phone or tablet may use a device identifier that is specific to the installation. Every reference to cookies in the Policy includes these technologies, unless the context shows otherwise.

3. Legal Framework

3.1 European Union and European Economic Area

Article 5(3) of Directive 2002/58/EC, as amended, allows the storing of information in a user’s device, or the gaining of access to information already stored there, only on condition that the user has given consent after being given clear and comprehensive information. The rule does not prevent technical storage or access that is strictly necessary in order for the provider of an information society service explicitly requested by the user to provide that service. Consent must meet the standard of the GDPR, meaning that it must be freely given, specific, informed, and unambiguous, and the user must be able to withdraw it as easily as it was given.

3.2 United Kingdom

Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended by the Data (Use and Access) Act 2025 with effect from 5 February 2026, governs the storage of, and access to, information on the device of a user in the United Kingdom. Besides the exceptions for communication and for strictly necessary storage, the regulation now provides exceptions where the sole purpose is to collect statistical information about the use of a service, or to adapt the appearance or function of a service to the user’s preference, provided that the user is given a simple and free means of objecting. The Company nevertheless applies the consent requirement to analytics and preference cookies for all visitors, so that a single standard operates across the Platform.

3.3 India

India has no statute devoted exclusively to cookies. Cookies that identify an individual involve the processing of personal data, and the Company handles them in accordance with section 43A of the Information Technology Act, 2000 and the SPDI Rules for as long as those provisions are in force, and with the notice and consent standards of sections 5 and 6 of the Digital Personal Data Protection Act, 2023 once those provisions become operative.

3.4 Other Jurisdictions

Users in other countries may enjoy additional protections, which the Company honours to the extent that they apply to it.

4. Categories of Cookies

The table below lists the categories in use. The Company does not present a category as strictly necessary unless the Platform cannot supply the function that the user has asked for without it.

Category	Purpose	Provider	Duration	Consent
Strictly necessary	Keeps a user signed in, protects against forged requests, balances traffic, retains the state of a running assessment so that it can be resumed, and remembers the cookie choices made	The Company	Session, or persistent for the shortest period that the function needs	Not required
Preferences	Remembers interface choices such as language, so that they need not be repeated at every visit	The Company	Persistent, for the period shown in the Cookie Settings panel	Required where the function was not explicitly requested
Sign-in	Allows a user who chooses Google or LinkedIn sign-in to authenticate with that provider	Google, LinkedIn	Governed by the provider	Set when the user selects the provider
Payment and fraud prevention	Completes a payment and detects fraudulent use of a payment instrument	CCAvenue, PayPal, Stripe	Governed by the gateway	Not required for the payment function that the user has requested
Analytics	Counts visits, shows which pages and features are used, and helps the Company improve the Platform	Google Analytics 4 (Google) and Mixpanel	Persistent, for the period shown in the Cookie Settings panel	Required

At the date of the Policy, the Company does not use advertising cookies, retargeting technologies, or cross-site tracking technologies. If it introduces any, it will update the Policy and request consent before they are set.

5. Third Parties That Set Cookies

5.1 Google and LinkedIn

When a user selects the option to sign in with Google or with LinkedIn, the provider sets or reads its own cookies in order to authenticate the user and may combine the information with other data it holds under its own notice, to which section 15 of the Privacy Policy gives the references.

5.2 Payment Gateways

The pages of CCAvenue, PayPal, and Stripe use cookies to complete the transaction and to detect fraud. They operate as independent controllers of the data they collect for those purposes, under notices that are referred to in section 15 of the Privacy Policy.

5.3 Analytics

The analytics provider named in the table acts on the Company’s instructions, and the Company configures the service so that it collects only the data necessary for the stated purpose. The provider may retain the data under its own terms for the period stated there.

6. Technologies Used During an Assessment

A Candidate who opens an enrolment link may encounter technologies that differ from those on the website. A session token ties the browser to the assessment, and local storage keeps the answers and the timer state so that the session can be resumed after a connection loss. These are strictly necessary to supply the assessment that the Candidate was invited to take. Where the Organisation has enabled a proctoring feature, the browser or application asks for permission to use the camera, microphone, or screen. That permission is a separate request made through the device, it is not a cookie, and the data collected through it is described in the Privacy Policy. Browser Lockdown settings operate during the session to restrict navigation, copy-and-paste functions, and screen captures.

7. Managing Your Choices

7.1 Cookie Settings

On a first visit, the Platform presents a notice that allows a visitor to accept all categories, to refuse the non-essential ones, or to choose by category. The choice can be changed at any time through the Cookie Settings link that appears in the footer of every page, and withdrawing consent is as simple as giving it. The Company stores the choice so that the notice is not shown at each visit.

7.2 Browser and Device Controls

Most browsers allow cookies to be blocked or deleted through their settings, and the instructions can be found in the help section of the browser concerned. Mobile operating systems provide controls for resetting or limiting device identifiers and for managing application permissions, including the camera and microphone.

7.3 Effect of Refusal

Refusing non-essential cookies does not prevent the use of the Platform. Blocking strictly necessary cookies may prevent sign-in, payment, or the continuity of an assessment, and the Company cannot guarantee that an assessment will function correctly if they are blocked.

8. Updates and Contact

8.1 Updates

The Company revises the Policy when it adds or removes a technology, changes a provider, or when the law changes. The date of the most recent revision appears at the head of the document, and where a revision requires fresh consent, the Platform will ask for it.

8.2 Contact

Questions about the Policy may be sent to privacy@ethition.com or to the Grievance Officer identified in the Privacy Policy. Questions about the Policy may be sent to privacy@ethition.com or to the Grievance Officer identified in the Privacy Policy.