Cookie Policy
Last updated 9 September 2026
No advertising or analytics tracker runs on this website until you press Accept. If you decline, or simply ignore the banner, nothing loads.
Changed your mind? Use the Cookie settings link at the bottom of the home page to accept or decline again at any time. Declining after having accepted stops any further tracking immediately; clearing your browser's site data for this domain removes what was already stored.
What is actually set
Strictly necessary - always active
| Name | Set by | What it does | How long |
|---|---|---|---|
malmal_consent | This website (browser storage, not strictly a cookie) | Remembers whether you accepted or declined, so you are not asked on every page | Until you clear your browser data |
__cf_bm and similar | Cloudflare, our host | May be set to tell real visitors from bots and keep the site up | Around 30 minutes |
These are needed for the site to work and to remember your choice, so they are not part of the consent question. We do not use them to track you across other websites.
Advertising and measurement - only after you accept
| Name | Set by | What it does | How long |
|---|---|---|---|
_fbp | Meta Platforms | Identifies your browser so Meta can tell us which advertisement led to a waitlist signup | About 3 months |
fr and related | Meta Platforms, on their own domains | Meta's own advertising identifiers, if you are signed in to Facebook or Instagram | Set and controlled by Meta |
Why we ask at all
Malmal is running a short advertising test to find out whether enough parents in Delhi NCR actually want this product. The Meta pixel is how we tell the difference between an advertisement that brought curious people and one that brought people who would buy. That is genuinely useful to us - but it is tracking, it is not necessary for you to use this site, and under India's Digital Personal Data Protection Act, 2023 it is a choice that belongs to you, made before the tracking starts rather than after.
What Meta receives if you accept
That someone visited the page, that a signup happened, and which one of the four launch-intent options was chosen. That is deliberately the whole list. We do not send Meta your email address, your pincode or your WhatsApp number, and we have not switched on any of the features that would match you to a Facebook or Instagram account by those details.
If you decline
Everything on this site keeps working. You can read every page, and you can join the waitlist exactly as anyone else does - the form and the waitlist are first-party and run on the separate consent you give with the checkbox on the form itself. All that changes is that we lose the ability to connect your signup back to an advertisement.
Other third parties on this site
- Google Fonts serves the typefaces on the home page, which means Google receives your IP address when that page loads. It sets no cookies. The policy pages, including this one, use your own device's fonts and make no request to Google at all.
- Google Forms receives your answers when you submit the form, because the waitlist is a Google Form. The submission is sent without your Google session attached, so it is not linked to your Google account by us.
- Cloudflare hosts the site and sees your IP address in ordinary server logs.
- Cloudflare Web Analytics is switched on by our host and counts page views. It
loads a small script from
static.cloudflareinsights.com, sets no cookies, does not fingerprint your device and does not follow you to other sites - but Cloudflare does process your IP address and browser type to produce the counts. We disclose it here because it is a third party, even though it is not the kind that needs a consent gate.
Beyond those, there is no Google Analytics on this site, no advertising network other than Meta, no session recording, no heatmaps, no chat widget and no embedded video.
Do Not Track
Because nothing loads before consent, a browser sending a Do Not Track or Global Privacy Control signal is already respected by default: we ask, and if you do not accept, no tracker runs.