Cookie Policy
Last updated: [DATE] · Operator: [COMPANY NAME] Ltd · Questions: [EMAIL]
We use as little storage on your device as possible. Essential items keep you signed in and remember your choices; anything optional (analytics, marketing) is off until you opt in via the cookie banner or "Cookie settings" in the footer. You can change or withdraw consent at any time — withdrawing consent does not affect the lawfulness of processing before withdrawal.
1. Necessary (always active — no consent needed)
| Name | Category | Purpose | Duration |
|---|---|---|---|
| fs_session | HTTP cookie (necessary) | Signed, HTTP-only session cookie that keeps you signed in. Contains a user ID reference only — no personal data inside the cookie itself. | Session (deleted on logout) |
| fundisasa_cookie_consent | localStorage (necessary) | Stores your cookie choices and the time you made them, so we do not ask again. | Until you clear it (12 months, then we re-ask) |
| fundisasa_lang | localStorage (necessary) | Remembers whether you use English or Kiswahili. | Until you clear it |
| __Host-next-csrf / Next.js runtime | HTTP cookie (necessary) | Security tokens used by the Next.js framework (CSRF protection, routing state). | Session |
2. Analytics (only with consent — currently none configured)
| Name | Category | Purpose | Duration |
|---|---|---|---|
| — (slot reserved) | localStorage / script (analytics) | If we enable an analytics provider, it would receive anonymized page views, referrer, device type and a coarse country (no cross-site tracking, no ad profiles). The script only loads after you opt in. | 13 months max |
3. Marketing (only with consent — none used today)
| Name | Category | Purpose | Duration |
|---|---|---|---|
| — (slot reserved) | Cookies / pixels (marketing) | Ad personalization or campaign measurement, if ever introduced, would only load with this consent and would be listed here by name before you choose. | Per vendor, max 13 months |
4. Managing your choices
- Cookie settings in the site footer or account menu — switch categories on/off at any time.
- Clearing your browser storage removes all items above; the app then treats you as a new visitor.
- Blocking necessary items in your browser will prevent sign-in from working.
5. Third parties that could set storage
Today: none besides the first-party items above (fonts are self-hosted via next/font, so no font-vendor requests). If we add vendors (payment, SMS, analytics), they will be listed in the Privacy Policy with the data each one receives, and optional ones will stay behind consent.