Skip to content
pokopay

Draft — pending counsel review

This page is a placeholder we're publishing early for transparency. It has not been reviewed by qualified Nigerian legal counsel and does not yet form part of any binding agreement. Commercial terms are governed by your executed contract with Pokopay.

Legal

Cookies policy

Last updated 12 September 2026

This Cookies Policy explains what cookies are, which ones Pokopay uses on the marketing site at pokopayng.com and on the dashboard, and how you can control them. It sits alongside our Privacy Policy.

1. What cookies are

A cookie is a small text file a website stores on your device so it can recognise your browser on your next request. Cookies can be first-party (set by the site you're visiting) or third-party (set by another domain the page embeds). They can be session cookies (deleted when you close the browser) or persistent (kept until they expire or you clear them).

2. What we use them for on the marketing site

The marketing site uses essential cookies only. These are limited to the small set of first-party cookies needed for the site to render correctly — for example, preserving your theme or dismissing a notice. We do not run advertising cookies, cross-site trackers, or third-party marketing pixels on the marketing site.

3. What the dashboard uses them for

The dashboard at dashboard.pokopayng.com uses cookies strictly to keep your session secure:

  • An authentication cookie carrying the JWT for your session, flagged HttpOnly, Secure and SameSite=Strict.
  • A CSRF token cookie used to protect state-changing requests.
  • A short-lived session identifier used by our idle-timeout and cross-tab logout logic.

The dashboard does not run third-party analytics or advertising cookies. If we ever add product analytics we will list them here and, where they are not strictly necessary, ask for your consent first.

4. Third-party services & their cookies

Currently, none. If we adopt a hosting-level analytics tool (for example, Vercel's first-party analytics on the marketing site) we will name it here and describe what it collects. This section is the source of truth: if it says "none", that is what is deployed.

5. How to control cookies

You can block or delete cookies at any time using your browser settings. Most browsers let you refuse third-party cookies wholesale, clear cookies on close, or exempt specific sites. Because we don't use non-essential cookies, clearing our cookies won't affect analytics you don't want — it will just log you out of the dashboard. We honour the Do Not Track (DNT) signal where it is meaningful for our stack.

6. Contact

Questions — privacy@pokopayng.com.