Frunora
Transparent Browser Storage

Cookie Policy

Frunora (operated by Vrushabh Fruits and Vegetables)

Proprietor: Shri Vaibhav Prakash Dalvi

MSME Reg. No.: UDYAM-KR-03-0055845

Effective Date: 1 October 2026·Last Updated: 1 October 2026
Strictly Necessary Only

Only authentication tokens and your guest cart session. We do not use advertising, tracking, or analytics cookies.

HTTP-Only Tokens

Authentication cookies are httpOnly and cannot be inspected by JavaScript or browser extensions, guarding against XSS attacks.

Zero Tracking Pixels

Zero third-party tracking scripts, zero Facebook Pixels, and zero Google Analytics scripts anywhere on our platform.

1. Introduction

This Cookie Policy explains what cookies and similar technologies Vrushabh Fruits and Vegetables (trading as "Frunora", "we", "us", or "our"; Proprietor: Shri Vaibhav Prakash Dalvi, MSME Reg. No. UDYAM-KR-03-0055845) uses when you visit https://frunora.com, why we use them, and what choices you have.

Please read this policy alongside our Privacy Policy and Terms of Service.

2. What Are Cookies?

Cookies are small text files that a website places on your device (computer, phone, or tablet) when you visit. They allow the website to remember your actions and preferences over time so you don't have to re-enter them every time you visit.

Cookies can be:

  • Session cookies — deleted automatically when you close your browser.
  • Persistent cookies — remain on your device for a set period or until you delete them.
  • First-party cookies — set by the website you are visiting (frunora.com).
  • Third-party cookies — set by a domain other than the one you are visiting.

3. What We Use Instead of Cookies for Profile Data

Before listing cookies, it is important to understand that Frunora stores your public profile (name, email address, and account role) in your browser's localStorage, not in a cookie. This is so your signed-in state appears instantly when you load any page.

StorageKeyContentsCleared
localStoragefrunora_authName, email, account roleOn logout, or if you clear browser site data

localStorage is not transmitted to our servers with every request (unlike cookies). It is only read by our JavaScript to display your name in the header and to decide which pages you can access.

4. Cookies We Use

Frunora uses only strictly necessary, functional cookies. We do not use advertising, tracking, or analytics cookies.

4.1 Authentication Cookies

When you log in, our backend sets two httpOnly cookies. Because they are httpOnly, JavaScript running on the page cannot read them — they are invisible to browser extensions and any third-party scripts. This design choice protects your session from cross-site scripting (XSS) attacks.

Cookie NameTypePurposeLifetime
Access tokenFirst-party, httpOnly, SecureAuthenticates your requests to the Frunora API (sent automatically with every API call)15 minutes
Refresh tokenFirst-party, httpOnly, SecureUsed to silently obtain a new access token when the current one expires, keeping you signed in without re-entering your emailConfigured by server (session-length)

Note: Customers do not create passwords. The refresh token is the mechanism that keeps a customer's session alive after OTP login.

When you log out, both cookies are revoked on the server (the refresh token is invalidated) and cleared from your browser.

4.2 Cart Cookie

Frunora's shopping cart works without an account. Your cart is stored server-side and linked to your browser via a session cookie.

Cookie NameTypePurposeLifetime
Cart session cookieFirst-party, httpOnlyIdentifies your cart across page loads so items persist without requiring a login. When you log in, your guest cart is merged with your account cartBrowser session

5. Third-Party Scripts

5.1 Payment Gateway Checkout (PhonePe or Razorpay)

When you proceed to the payment step at checkout, we load the payment script of our current payment gateway, one of:

https://mercury.phonepe.com/web/bundle/checkout.js
https://checkout.razorpay.com/v1/checkout.js

This script is loaded only on the checkout page and only when you are ready to pay. It is loaded asynchronously, meaning it does not block your page from loading.

The gateway's script opens a secure payment window in which you enter your payment credentials. The gateway may set its own cookies or use browser storage for fraud detection and payment processing purposes. These are governed by that gateway's privacy policy.

Frunora does not control the payment gateway's cookies. PhonePe and Razorpay are PCI-DSS compliant payment gateways, and the gateway's checkout script is the only third-party script loaded on the Frunora website.

6. What We Do NOT Use

We want to be explicit about what Frunora does not do:

TechnologyUsed by Frunora?
Google Analytics No
Google Tag Manager No
Facebook Pixel No
Advertising or retargeting cookies No
Third-party tracking pixels No
Cross-site tracking No
Fingerprinting scripts No

The only external script loaded on our site is the payment gateway's checkout script (PhonePe or Razorpay), and only on the payment pages.

7. Summary Table

Name / StorageFirst or Third PartyCategoryLifetimeCan JavaScript Read It?
Access token cookieFirst-partyStrictly necessary15 minutesNo (httpOnly)
Refresh token cookieFirst-partyStrictly necessarySession-lengthNo (httpOnly)
Cart session cookieFirst-partyStrictly necessaryBrowser sessionNo (httpOnly)
localStorage — frunora_authFirst-partyStrictly necessaryUntil logout / browser clearYes (our own JS only)
PhonePe / Razorpay cookies (if any)Third-party (payment gateway)Functional / fraud preventionPer gateway policyPer gateway policy

8. Your Choices & How to Manage Cookies

8.1 Browser Controls

You can control and delete cookies through your browser settings. Here are direct links to the cookie management pages for the most common browsers:

  • Google Chrome — Settings → Privacy and Security → Cookies and other site data
  • Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data
  • Microsoft Edge — Settings → Cookies and site permissions → Cookies and site data
  • Safari — Preferences → Privacy → Manage Website Data
Important: Blocking or deleting Frunora's strictly necessary cookies will break core functionality. Specifically:
  • Deleting authentication cookies will sign you out immediately.
  • Deleting or blocking the cart cookie will cause your cart to be lost.

8.2 Opting Out of Payment Gateway Cookies

The payment gateway's checkout script is loaded on the checkout and order pages. If you choose Cash on Delivery (where available), the script is still loaded to enable the Pay Online button, but no payment window is opened unless you choose online payment.

To manage the gateway's cookies, please refer to its privacy policy: PhonePe, Razorpay.

8.3 Clearing localStorage

You can clear localStorage data for frunora.com through your browser's developer tools or by logging out (logout clears the frunora_auth key automatically).

10. Changes to This Policy

We may update this Cookie Policy from time to time. When we do, we will update the "Last Updated" date at the top. For material changes, we will notify you by email. Continued use of Frunora after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about how we use cookies or similar technologies, please contact:

Frunora (operated by Vrushabh Fruits and Vegetables)

Proprietor: Shri Vaibhav Prakash Dalvi

Flat 303, DS MAX STARRY, Shikaripalya Main Road, Maragondanahalli, Bommasandra, Bengaluru (Urban), Karnataka - 560105

MSME Reg. No.: UDYAM-KR-03-0055845

© 2026 Frunora by Xrovo. All rights reserved.

Frunora — Fresh fruit, pre-ordered and delivered on your day in Bengaluru

© 2026 Frunora by Xrovo. All rights reserved.