Cookie Policy
Last Updated: 25 October 2026
What cookies are
Cookies are small text files that a website stores in your browser. They let a site remember things between pages and visits — most importantly, that you are signed in. Some information can also be kept in your browser’s local storage, which works similarly and stays on your device unless a section below says otherwise.
This policy explains exactly which cookies LawWorld uses, why, and what your choices are. It is deliberately short, because we use very few.
The cookies we use
Essential cookies support sign-in. The lw_touch cookie records how you reached LawWorld for your customer record. Optional measurement cookies are used only after you select the relevant provider in Cookie settings and save your choices:
- accessToken (essential, 15 minutes). Set when you sign in. A secure, httpOnly cookie that identifies your session for each request — it is what lets you comment on videos, react to content, and move into the app without logging in again.
- refreshToken (essential, 7 days). Set when you sign in. A secure, httpOnly cookie used only to renew the access token so you are not asked to sign in again every few minutes.
- lw_has_session (essential, 7 days). A simple flag on lawworld.ai that tells the website and the app that you are signed in. It contains no personal data.
- Preference storage and lw_meta_consent (up to 180 days). Your versioned marketing choice is stored in this browser’s local storage and a secure cookie shared across lawworld.ai and its app/API subdomains. This lets the server honour the same choice for completed registrations and paid plan purchases. A previous notice acknowledgement does not grant conversion consent. Public-page browsing history is not recorded for signup.
- lw_touch (first-party, 90 days). Stores how you reached LawWorld: the campaign parameters in the link you followed (such as utm_source and utm_campaign), the page you landed on and the referring website’s name (never its full address). Ad click identifiers are added only if you allowed Meta or Google measurement in Cookie settings. A later visit from another link or website replaces it; visiting directly leaves it unchanged. If you create an account, we add this to your customer record in Zoho CRM as how you found LawWorld. The cookie applies across lawworld.ai and app.lawworld.ai.
Third-party cookies
Three features hand over to trusted third parties, who set their own cookies while you use them:
- Razorpay (payments). When you purchase a plan or training, checkout is processed by Razorpay, which sets cookies needed to complete the transaction securely. These are governed by Razorpay’s own privacy and cookie policies.
- Google (sign-in). If you choose “Sign in with Google”, Google sets cookies on its own domains to authenticate you. These are governed by Google’s privacy policy.
- Vimeo (workshop videos). When a workshop page embeds a promotional video, it is played from Vimeo with “do not track” enabled; Vimeo may still set cookies needed to play the video, governed by Vimeo’s privacy policy.
Pages you view
We do not maintain a browsing-history list as part of signup. The separate optional Meta and Google measurement described below can associate selected product-page visits with completed registrations and purchases to measure advertising results. Previously stored page-visit lists are removed from this browser when you revisit the website.
Activity-based follow-up in our CRM is switched on when you accept the Terms at signup, and you can switch it off at any time in Privacy & Data (app.lawworld.ai/account/privacy). It does not switch on a public-website tracker.
Optional Meta advertising measurement
With Meta measurement enabled, the lw_meta_ads cookie retains the campaign, ad set, ad and source identifiers from an approved advertising link for up to 24 hours. When the link contains a Meta click identifier, we also retain it in _fbc for up to 24 hours. A completed signup can retain the campaign identifiers encrypted for the remainder of that period. They are transferred to your Zoho CRM lead only if you separately enable CRM personalisation. These link parameters are not proof that Meta has verified a paid click. The encrypted copy is removed after transfer or expiry; a consent fingerprint remains for up to 180 days to handle withdrawal. Turning off Meta measurement or CRM personalisation stops pending transfers and queues removal of these Meta attribution fields.
Meta measurement is off by default. If you select Meta measurement and save your choices, the Meta Pixel sends selected public product-page visits, and our server sends completed registrations and confirmed plan purchases through Meta’s Conversions API. Purchase events include the amount paid in INR, including GST. Meta receives permitted campaign identifiers, IP address, browser/device information and cookie identifiers, and may associate them with your Meta account. Meta may process this information outside India under its own privacy and retention policies.
The Pixel may set _fbp (a browser identifier) and _fbc (an ad-click identifier, when applicable). Cookie expiry is controlled by Meta and your browser; choosing Essential only removes the website’s Meta cookies immediately. Automatic advanced matching, automatic events and detailed page-content collection are disabled. We do not send names, email addresses, phone numbers, form fields, legal content, searches or documents. The browser Pixel is excluded from news, blogs, articles, account and checkout routes, and paused during sign-in forms and for signed-in visitors. Browser privacy signals, including Global Privacy Control and Do Not Track, keep measurement off.
The browser Pixel remains excluded from account, verification and checkout screens. The server shares only a completed-registration event or confirmed purchase amount, a one-way event fingerprint, and the consented browser matching information. It sends a fixed public website address instead of an account/verification URL. Wallet deposits, zero-cost activations, failed payments and uncaptured mandate authorisations are not plan purchases. Rejecting marketing stops new conversion measurement too.
A fresh marketing choice also covers captured automatic subscription renewals. LawWorld encrypts the permitted Meta browser/click IDs and saves a random consent receipt for up to 180 days from your choice; renewals do not reuse an old IP address or browser agent. Interrupted deliveries are encrypted and retried for up to six days with their original event time and amount. Matching data is removed when delivery succeeds, is rejected, expires or is suppressed. Minimal event fingerprints and delivery status remain for duplicate prevention; queue status records expire 30 days after the delivery deadline. Essential only also updates our servers to suppress pending events and future renewals linked to this browser receipt. If that update fails, the website shows a pending message and retries while open. Clearing browser data alone cannot notify our servers; withdraw first or contact our privacy team. Choices on a different browser receipt remain separate.
Optional Google measurement
With Google measurement enabled, the lw_google_ads cookie retains a validated campaign ID, ad group ID, bid keyword and Google click identifier for up to 24 hours, including future LawWorld campaigns. It never captures your search query. Some campaign types do not supply a bid keyword. A completed signup can retain this information encrypted for the remainder of that period. It is sent to your Zoho CRM lead only when you also enable CRM personalisation in account preferences. The campaign and keyword captured from the landing link are distinct from a click verified by Google. The encrypted copy is removed after successful transfer or expiry; a consent fingerprint remains for up to 180 days to handle withdrawal. Turning off Google measurement or CRM personalisation stops pending transfers and queues removal of these attribution fields. CRM records otherwise follow our account privacy and deletion procedures.
For these consented signup records, CRM personalisation also links your current plan purchase total and confirmed refunds to the signup source. Aggregate Google Ads media costs are imported separately to calculate cost per recorded signup by campaign and bid keyword. This measure includes only instrumented signups with the required choices and uses the landing date in India time. Media cost excludes GST; plan revenue includes GST less confirmed refunds. Wallet deposits, failed, held and test payments are excluded. Missing or outdated cost data and zero-signup periods do not produce a cost-per-signup figure. These reports do not enable customer messages or advertising campaigns.
Google measurement is a separate choice and is off by default. Selecting Google measurement and saving your choices allows Google Analytics and Google Ads to measure selected public product-page visits and ad clicks. An existing Meta choice does not grant Google consent. The Google tag is not loaded until this choice is made.
Google receives the permitted public product-page address, validated campaign and ad-click identifiers, and browser/device information. We send a fixed product-site title and an empty referrer rather than the document title or incoming referrer. We do not enable personalized advertising, Google signals or tag-based enhanced conversions that collect contact details on this website. The separate, optional sign-up tick box described in the Privacy Policy (Optional Google Ads sign-up measurement) uses no cookie: if you tick it, LawWorld itself later shares a one-way hash of your email address and mobile number with Google Ads. Legal-content, search, account and checkout routes, unknown URL parameters, fragments, signed-in visitors and sign-in forms are excluded from page measurement.
Your Google choice is saved in local storage and the lw_google_consent cookie for up to 180 days. Google may set _ga and _ga_* analytics identifiers and _gcl_* ad-click identifiers. Our tag configuration limits analytics cookie expiry to 180 days without extending it on each visit; other Google cookie lifetimes depend on Google and browser controls. Google may process measurement data outside India under its own policies. With your Google choice, our server also sends completed registrations and confirmed plan purchases, their amounts in INR including GST, anonymous browser/session identifiers and a one-way transaction fingerprint. The lw_google_attribution cookie retains matching identifiers for at most 24 hours from the measured website session. These cookies apply across lawworld.ai and app.lawworld.ai. Automatic off-session renewals, wallet deposits, failed or test payments and mandate authorisations are excluded. Pending delivery data is encrypted and expires within 24 hours of the measured session; duplicate-prevention fingerprints remain for up to 180 days. An interrupted registration submission is not automatically replayed because its acceptance can be uncertain.
Essential only stops Google measurement, removes these first-party Google measurement cookies and reloads the page to unload the tag. Browser privacy signals keep measurement off. Withdrawing consent does not erase information Google previously received; contact our privacy team for help with a deletion request.
Managing cookies
You can view, block, or delete cookies at any time through your browser settings — every major browser (Chrome, Safari, Edge, Firefox) offers per-site controls.
Rejecting optional marketing cookies has no effect on sign-in or product access. Blocking essential sign-in cookies through your browser means you will not be able to stay signed in, which disables commenting, reactions, and moving into the app. Everything else on lawworld.ai — news, blogs, articles, videos, shorts, and e-books — works fully without any cookies at all.
Your consent
Choose Essential only to keep optional measurement off, or select Meta measurement and/or Google measurement and choose Save choices. Cookie settings is always available at the bottom of the page. Choosing Essential only later stops new measurement, deletes the website’s measurement cookies and reloads the page to unload the tags. It does not erase information previously received by those providers; contact our privacy team for help with a deletion request. If preference storage is unavailable, measurement stays off. Consent is requested again after 180 days or a new notice version. Essential sign-in cookies are separate and necessary for the service you request.
We process personal data in line with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. See our Privacy Policy for the full picture of how we handle your data.
Updates & contact
We may update this policy as the site evolves; the date at the top always reflects the latest revision, and material changes will be announced on the site.
Questions about cookies or your data? Write to us at complaints@lawworld.ai (the address in our Privacy Policy for data requests) or use the contact page — we respond within a working day.