🍪 Legal Document

Cookie Policy

Effective: 1 January 2026 · Last Updated: 25 March 2026

Table of Contents

1. What Are Cookies?
2. Cookies We Use
3. Local & Session Storage
4. Third-Party Cookies
5. Managing Cookies
6. Changes to This Policy
7. Contact

Section 1

What Are Cookies?

Cookies are small text files stored on your device when you visit a website or web application. They help the Platform remember your preferences and keep you securely logged in.

Section 2

Cookies We Use

The Platform uses only the cookies strictly necessary for its operation. We do not use advertising, tracking or analytics cookies.

Cookie Name	Type	Purpose	Duration
auth_token	Essential	Keeps you securely logged in to your member account	Session / 7 days
csrf_token	Essential	Protects against cross-site request forgery attacks	Session
push-banner-dismissed	Functional	Remembers if you dismissed the push notification banner	Session (sessionStorage)
next-auth.*	Essential	Next.js authentication session management	Session

Section 3

Local & Session Storage

In addition to cookies, the Platform uses browser sessionStorage to remember temporary UI preferences (such as whether you dismissed the notification banner). This data is cleared automatically when you close your browser tab and is never transmitted to our servers.

Section 4

Third-Party Cookies

We do not load any third-party advertising or analytics scripts. However, the following third-party services may set their own cookies or tokens when you interact with them:

Service	Why	Their Policy
Cloudinary	Document viewer (claim attachments)	cloudinary.com/privacy
Safaricom M-Pesa	STK Push payment flow	Safaricom Privacy Policy

Section 5

Managing Cookies

Essential cookies cannot be disabled as they are required for the Platform to function securely. Disabling them will prevent you from logging in.

You can manage cookies through your browser settings:

Chrome

Settings → Privacy and Security → Cookies

Firefox

Settings → Privacy & Security → Cookies and Site Data

Safari

Preferences → Privacy → Manage Website Data

Edge

Settings → Cookies and Site Permissions

Push notifications can be disabled at any time through your browser's notification settings or via the Platform's notification preferences.

Section 6

Changes to This Policy

We may update this Cookie Policy as the Platform evolves. Changes will be noted with an updated "Last Updated" date at the top of this page.

Section 7

Contact

For questions about cookies or your data, contact your Society administrator or write to: Crater SDA Welfare Society, Crater SDA Church, Nakuru, Kenya.

Email: doanemusa561@gmail.com