Cookie Policy
Orlin — operated by MUAWI Technologies LLP
Last updated: [DD Month YYYY]
1. Scope
This Cookie Policy explains how MUAWI Technologies LLP uses cookies and similar technologies across:
https://orlin.social— our marketing website;https://app.orlin.social— the Orlin application;[BIO_DOMAIN]— link-in-bio pages published by Orlin customers.
Read it alongside our Privacy Policy.
A note on link-in-bio pages. If you arrived at a page hosted on [BIO_DOMAIN], that page belongs to an Orlin customer, not to us. We set only the cookies and local storage described in Section 4 in order to serve the page and count visits for the page owner. The page owner may also add their own tracking — that is their responsibility and is covered by their privacy notice, not ours.
2. What cookies and similar technologies are
A cookie is a small text file placed on your device when you visit a site. It lets the site recognise your browser on later requests.
We also use these related technologies, and "cookies" in this policy covers all of them:
| Technology | What it is |
|---|---|
| Local storage / session storage | Browser storage that keeps data (like a visitor identifier or draft state) on your device without sending it with every request |
| Pixels / web beacons | A tiny transparent image or script that records that a page was opened |
| Software Development Kits (SDKs) | Vendor code embedded in a page that can read and write device identifiers |
First-party cookies are set by the site you are visiting. Third-party cookies are set by another domain, such as an analytics provider.
Session cookies are deleted when you close your browser. Persistent cookies stay until they expire or you delete them.
3. Our approach
- We use no advertising cookies and run no ad-network trackers on our own properties.
- We do not sell or share data collected through cookies for cross-context behavioural advertising.
- We do not use cookies to collect data from Instagram or Meta. Instagram data reaches us through Meta's APIs, not through cookies — see Section 3.2 of the Privacy Policy.
- We do not currently run any first-party or third-party analytics on
https://orlin.socialorhttps://app.orlin.social. If that changes, we will update this Policy and our consent banner before any analytics cookie is set. - Non-essential cookies are set only after you consent, where consent is required.
4. Cookies and local storage we use
4.1 Strictly necessary — always on
These are required for the Service to function. They cannot be switched off through our consent banner, because turning them off would break sign-in and navigation. They are set on the basis of legitimate interest / necessity for a contract, not consent.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| Session cookie (issued by our authentication provider) | Keeps you signed in to the Orlin app across pages | First-party, HttpOnly, Secure — https://app.orlin.social only | Session, refreshed while you're active |
NEXT_LOCALE | Remembers your chosen language | First-party | Persistent |
consent | Records your cookie banner choice so we don't ask again | First-party | 30 days |
4.2 Functional — local storage, no consent prompt needed
These stay on your device only and are never sent to us as request headers the way a cookie is; we read them only when you use the specific feature they support. Because they don't track you across sites and store no cookie, we treat them as strictly necessary to the feature rather than as cookies requiring a consent choice — consistent with Section 2 above.
| Storage key | Purpose | Type | Duration |
|---|---|---|---|
bio_visitor_id | A random identifier stored in your browser's local storage so a link-in-bio page owner can see de-duplicated visits and clicks rather than repeat page loads. Contains no name, email, or other identifying information. | First-party local storage, set on [BIO_DOMAIN] | Until you clear your browser's site data |
4.3 Analytics
None today. We do not currently run product or website analytics on https://orlin.social or https://app.orlin.social. If we turn on an analytics provider, we will list it here with its cookie names, purpose, and duration, add it to our consent banner as an opt-in category, and only set it after you consent where consent is required.
4.4 Marketing / advertising
None. We do not currently set advertising or retargeting cookies on https://orlin.social, https://app.orlin.social, or [BIO_DOMAIN].
If this changes, we will update this Policy, add the category to our consent banner, and obtain your consent before setting any such cookie.
5. Third-party cookies and pixels on customer link-in-bio pages
Orlin customers can add their own tracking pixels to their link-in-bio page — currently a Meta Pixel and/or a Google Analytics tag, configured by the page owner in their Orlin dashboard. Orlin loads exactly the pixel the page owner configured, and only on their page.
- Those tags are placed by the page owner, not by MUAWI.
- The page owner is responsible for disclosing them, obtaining consent where required, and answering data requests about them.
- We do not control what those third parties collect or how they use it.
If you have questions about tracking on a specific link-in-bio page, contact the business or creator who owns that page. If you cannot reach them, write to privacy@orlin.social and we will try to put you in touch or help you exercise your rights.
6. Your choices
6.1 Our consent banner
On your first visit from a region where consent is required (including the EEA, UK, and jurisdictions with equivalent rules), we show a banner letting you Allow or Decline. You can change your choice at any time from the Cookie settings link in the footer of https://orlin.social and https://app.orlin.social.
Because the strictly necessary items in Section 4 have no opt-out — declining only determines whether we set any future non-essential cookie, such as an analytics cookie described in Section 4.3. Withdrawing consent takes effect immediately for future cookie writes. It does not delete cookies already stored — use your browser controls for that.
6.2 Browser controls
Every major browser lets you view, block, and delete cookies:
- Chrome: Settings → Privacy and security → Third-party cookies / Site data
- Safari: Settings → Privacy → Manage Website Data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Edge: Settings → Cookies and site permissions
Blocking all cookies, including strictly necessary ones, will prevent you from signing in to Orlin.
6.3 Mobile devices
- iOS: Settings → Privacy & Security → Tracking, and Settings → Safari → Block All Cookies
- Android: Settings → Google → Ads → Delete advertising ID
6.4 Do Not Track and Global Privacy Control
Browsers send different and inconsistent "Do Not Track" signals, and there is no agreed standard for responding to them, so we do not respond to DNT. We do honour the Global Privacy Control (GPC) signal where we are legally required to, treating it as a request to decline non-essential cookies.
7. How long cookies last
Duration is listed per cookie in Section 4. In general: session cookies expire when you close your browser or sign out; the consent and locale cookies persist until you clear them or change your choice. We review cookie and storage lifetimes annually and set them to the shortest period that still serves the purpose.
8. Legal basis
| Category | Basis |
|---|---|
| Strictly necessary | Necessary to provide a service you requested (GDPR Art. 6(1)(b); ePrivacy Directive Art. 5(3) exemption) |
| Functional, analytics | Your consent (GDPR Art. 6(1)(a); DPDP Act Section 6) |
9. Changes to this Policy
We will update this Policy when our cookie use changes and revise the "Last updated" date. If we add a new category — particularly analytics or advertising — we will re-prompt for consent before setting those cookies.
10. Contact
Questions about cookies, or a request to see what we hold about you:
MUAWI Technologies LLP
[REGISTERED_ADDRESS]
Email: privacy@orlin.social
Grievance Officer details and your full data rights are in Sections 11 and 17 of the Privacy Policy.