Essentials first
Only the cookies that keep iPay safe and signed-in load by default. Anything optional is opt-in.
Cookie policy
Cookies, the digital kind.
Tiny files our site asks your browser to keep — so you stay signed in, your forms don’t replay, and we can fix the page that just loaded slowly. We use the fewest we can, and never the kind that chase you around the web.
- Effective from
- 30 August 2016
- Scope
- ipay.com.bd · ipaytk.com
- Questions
- privacy@ipay.com.bd
The crumbs we keep
No ad tracking
We don’t set advertising cookies and don’t share your activity with ad networks for retargeting.
You stay in control
Disable optional cookies in your browser — or clear what we’ve already set — without losing your account.
What we set
Three jars, labelled honestly.
Every cookie iPay sets falls into one of three categories. The first keeps the site working; the others are conveniences you can turn off without losing access to your account.
Strictly essential
These keep iPay working — signing you in, holding your session, and protecting requests against forgery. Without them, the site can’t function.
Typical examples
- Session ID — keeps you logged in across pages.
- CSRF token — ensures form submissions came from you.
- Auth state — remembers a verified device for re-entry.
Functional
Small preferences that make iPay feel like yours — language, currency display, the panel you last left open. Turning these off is fine; the site just resets to defaults.
Typical examples
- Locale — remembers “English” or “বাংলা” between visits.
- UI state — keeps a sidebar collapsed or expanded.
- Recent contacts — speeds up the “send” flow.
Performance & analytics
Aggregated, anonymous data that helps us see which pages are slow, where flows break down, and what to fix next. We don’t use this for advertising or to build a profile of you.
Typical examples
- Page-load timings — what’s slow on which device.
- Drop-off points — where users abandon a flow.
- Anonymous heatmaps — coarse interaction patterns.
We currently do not set advertising or cross-site tracking cookies. If that ever changes, we’ll publish the change here and ask for your consent before loading any.
Your controls
Clear, block, or just leave them.
Every modern browser lets you view, delete, or block cookies on a per-site basis. Disabling strictly essential cookies will sign you out and break the checkout flow; the others can be turned off without consequence.
If you use the iPay mobile app, similar identifiers are stored as local app data — manage them by clearing app data in your phone’s settings or reinstalling the app.
Where to look in your browser
- ChromeSettings → Privacy and security → Cookies and other site data
- SafariSettings → Privacy → Manage Website Data
- FirefoxSettings → Privacy & Security → Cookies and Site Data
- EdgeSettings → Cookies and site permissions → Manage and delete cookies
Browser menu paths shift between versions — these are the broad locations as of this writing.
Privacy desk · open
Curious what we’ve set? Ask us.
We’ll tell you which cookies are active for your account, why, and for how long. Reach the privacy desk and we’ll route it to the right team — usually within one working day.
At a glance
- Categories used
- 3
- Advertising cookies
- 0
- Cross-site tracking
- none
- Default duration
- session
⬡ Licensed PSP — Bangladesh Bank