Cookie Policy

Cookies are small data files placed on your browser or device. Similar technologies include local storage, session storage, pixels, and analytics tags that help websites understand traffic and remember settings.

The cookies PayBridgeNP itself sets when you interact with it. Third-party services we embed set their own cookies; those are covered under Third-party cookies below.

• __cf_bm (Cloudflare, all domains) - bot management, ~30 minutes. Strictly necessary; helps Cloudflare distinguish humans from automated traffic.
• cf_clearance (Cloudflare, all domains) - set when a visitor passes a Cloudflare challenge. Strictly necessary.
• _ga, _ga_* (Google Analytics, paybridgenp.com) - pseudonymous visitor and session identifiers for traffic measurement, two-year expiry by default. We use Google Analytics to understand which marketing pages perform and how often each free tool is used (the tool and the action only, never what you enter); no cross-site tracking is enabled.
• _gcl_* (Google, paybridgenp.com) - set by Google's tag when you arrive from a Google ad, 90-day expiry. Read by the dashboard's single sign-up conversion event so a sign-up can be attributed to the ad; no other dashboard activity reaches Google.
• _fbp, _fbc (Meta Pixel, paybridgenp.com) - set by the Meta (Facebook) Pixel on the marketing site so we can measure how our Facebook and Instagram ads perform and show relevant ads to previous visitors. 90-day expiry. _fbc is only set when you arrive through a Facebook or Instagram ad link. Marketing site only - never on the merchant dashboard or the hosted checkout.
• pb_refresh (merchant dashboard, dashboard.paybridgenp.com) - keeps you signed in to the dashboard. Set when you sign in and cleared when you sign out. Strictly necessary; not used for tracking.
• pb_sid, pb_setup_done (merchant dashboard) - readable markers that only tell the app whether to send you to the sign-in or the onboarding screen. They hold the value 1 and no data; cleared on sign-out.
• pb_oauth_state (merchant dashboard sign-in) - a short-lived token that protects Continue with Google against forged sign-in responses. Lives for minutes and is cleared as soon as sign-in completes.
• intercom-id-*, intercom-session-*, intercom-device-id-* (Intercom, merchant dashboard) - set by the Intercom support messenger so we can keep your support conversation going across visits. Set when the dashboard loads for a signed-in merchant.
• __pb_last_provider (PayBridgeNP hosted checkout) - remembers which payment method (eSewa, Khalti, or Fonepay) you last chose, so the next checkout on the same domain shows it as "Used last time". 90-day expiry. On a merchant's own checkout domain it applies to that merchant only; on checkout.paybridgenp.com it applies to every merchant using that address. No personal data - only the provider name.
• __pbid_session (PayBridgeNP hosted checkout) - set when you confirm your phone with a PayBridgeNP ID code, at checkout or after a successful payment (when you save a new PayBridgeNP ID after payment, only if "Remember this browser" stays ticked). Marks the browser as a recognised device for 30 days so you can skip the form on future PayBridgeNP-powered checkouts. Optional; to forget a remembered browser, untick Remember at checkout or tap "Not you?".
• __pbid_optout (PayBridgeNP hosted checkout) - set when you dismiss the "Save with PayBridgeNP ID" prompt on the success page. Suppresses the prompt for 90 days. No personal data.
• __pbid_bridged_* (PayBridgeNP hosted checkout) - supports optional PayBridgeNP ID sign-in on a merchant's own checkout domain for a single payment. Cleared automatically when the session ends.

Signing out of the dashboard clears its sign-in cookies immediately.

The hosted checkout (pay.* or merchant custom domains) only sets the buyer-experience cookies listed above when the relevant interaction happens - for example, __pb_last_provider is set when you choose a payment method, and __pbid_session when you sign in to PayBridgeNP ID or choose to be remembered. None of these cookies are required to complete a payment; declining or clearing them simply removes the autofill and pre-selection conveniences.

Local storage: the hosted checkout remembers your language choice and, for Fonepay, the bank app you last used; the dashboard remembers display preferences and PostHog's device identifier; the free invoice generator keeps your own business details only if you tick Remember my business, and deletes them when you untick it. These stay in your browser, and the PostHog identifier travels only with the dashboard analytics events described below.

• Cloudflare sits in front of every PayBridgeNP domain for DNS, WAF, and CDN. The __cf_bm cookie above is set by Cloudflare directly.
• Google Analytics on paybridgenp.com (the marketing site). The merchant dashboard sends Google a single sign-up conversion event and no page views. We use a separate product-analytics tool, PostHog, on the merchant dashboard.
• Meta (Facebook) on paybridgenp.com (the marketing site only). The Meta Pixel reports page visits to Meta so we can measure our Facebook and Instagram ads and reach previous site visitors with relevant ads. Meta processes this data under its own privacy policy. Not present on the merchant dashboard or the hosted checkout.
• PostHog (merchant dashboard) - product analytics and error monitoring. Stores a device identifier in local storage (not a cookie) and records page views (with search terms and record IDs removed from the address), which named dashboard buttons are used (such as copy, export or upgrade; the button is named, never what you type or copy), failed requests by error code, and exception details so we can keep the dashboard reliable and improve it. The dashboard also sends the same page and button counts to our own servers, as daily totals per account, without cookies.
• Intercom (merchant dashboard) - support messenger. Sets its own cookies (listed in the inventory above) to maintain your support conversation.

PayBridgeNP is operated from Nepal and primarily serves Nepali merchants. We do not currently display a cookie consent banner. If you are visiting from a jurisdiction with stricter cookie consent rules (EU/UK), you can block cookies in your browser settings before continuing.

The cookies above support sign-in, security, checkout preferences, support, measurement, and advertising. The preference, measurement, and advertising cookies are not needed to complete a payment.

Most browsers allow you to clear existing cookies, block future cookies, or notify you before storage is set. If you disable strictly-necessary cookies (__cf_bm, cf_clearance), parts of the platform may stop working - Cloudflare may serve a challenge on every request.

You can opt out of Google Analytics across every site that uses it by installing Google's official opt-out browser extension.

You can control how Meta uses Pixel data about you from your Facebook or Instagram account under Settings > Accounts Centre > Ad preferences, or block the Pixel entirely with a browser content blocker. The marketing site works exactly the same without it.

For questions about analytics or website tracking, contact support@paybridgenp.com.