1. What Cookies Are
1.1 A cookie is a small data file placed on your device (computer, tablet, or mobile) when you visit a website or open an application. Cookies allow the website to recognise your device and remember information about your visit.
1.2 We also use related technologies, including local storage, session storage, pixels, software development kits (SDKs), and similar identifiers. References to "cookies" in this Policy include these technologies.
1.3 Cookies may be "session" cookies (deleted when you close your browser) or "persistent" cookies (kept for a defined period). They may be "first-party" (set by Domesty) or "third-party" (set by a service we use, such as an analytics provider).
2. Our Lawful Basis
2.1 We set strictly necessary cookies on the basis of our legitimate interest in operating the Platform. These cannot be turned off through our cookie banner because the Platform will not function without them.
2.2 We set all other cookies (functional, analytics, marketing) only with your consent under the NDPR/NDPA. You can give, refuse, or withdraw consent at any time through our cookie banner, or by clearing the Domesty cookies in your browser or using the provider opt-outs in section 6.5.
3. Categories of Cookies We Use
We group cookies into four categories. The categories match section 9 of the Privacy Policy.
3.1 Strictly Necessary
Required for the Platform to function. Without these cookies, services such as login, account security, escrow checkout, and abuse prevention will not work.
3.2 Functional
Domesty does not currently set functional cookies (such as language, time-zone, or saved-filter preferences). If we introduce them, they will appear here and be set only with your consent.
3.3 Analytics
Help us understand how Users find and use the Platform, what is working, and what is not. Analytics cookies are set only after you consent.
3.4 Marketing
Used where you have consented, to measure the performance of marketing campaigns and to limit the number of times you see a given message. Marketing cookies are set only after you consent.
4. Cookies We Set
The table below lists the principal cookies and similar identifiers used on the Platform. Specific cookie names may change as we update the Platform; the categories and purposes remain as described.
4.1 Strictly necessary (set by Domesty)
Authentication and session cookies, used to keep you logged in and to protect your account.
Cookie-consent record, used to remember your cookie preferences. Retention: up to twelve (12) months.
Load-balancing identifiers, used to deliver the Platform reliably.
4.2 Functional (set by Domesty)
None currently set.
4.3 Analytics (set by third parties on our behalf)
Google Analytics 4 (_ga, _ga_*) loaded via Google Tag Manager. Used to understand aggregated usage patterns. Standard retention: fourteen (14) months.
PostHog (ph_*) used for product diagnostics, feature usage, and error tracking.
4.4 Marketing
Where you have consented, we may set or allow marketing cookies and pixels to measure campaign performance. We do not currently sell or share your personal data for cross-context behavioural advertising.
5. Third-Party Services That May Set Cookies
The following third parties may set cookies or similar identifiers when you use parts of the Platform that integrate with their services. Each third party processes data under its own privacy policy.
5.1 Google LLC - Google Analytics 4 and Google Tag Manager (analytics).
5.2 PostHog Inc - product analytics and diagnostics.
5.3 Google LLC and Meta Platforms, Inc - only if you choose to sign in with Google or Facebook (authentication).
5.4 Flutterwave Technology Solutions Limited and Paystack Payments Limited - during checkout, for fraud prevention and to process your payment.
5.5 Cloudinary Limited - for delivery of images and other media.
5.6 Dojah Inc - during identity verification flows.
5.7 Twilio Inc - does not set browser cookies; included for completeness in respect of OTP delivery.
We require these third parties to use the data only for the purpose for which it was shared with them.
6. Managing Your Cookie Preferences
6.1 Cookie banner. The first time you visit the Platform you will see a cookie banner. You can accept all cookies, reject all non-essential cookies, or choose by category.
6.2 Renewing your choices. You can change your choices at any time by clearing the Domesty cookies in your browser, which brings the cookie banner back, or by using the provider opt-outs in section 6.5.
6.3 Browser controls. Most browsers let you block or delete cookies through their settings. Disabling cookies may break parts of the Platform, including login and escrow checkout.
6.4 Mobile devices. On iOS and Android, you can reset your advertising identifier or limit ad tracking through the device's privacy settings.
6.5 Provider opt-outs. Some third parties offer their own opt-out tools, including:
Google Analytics: tools.google.com/dlpage/gaoptout.
PostHog: see PostHog's privacy controls.
7. Do Not Track
We do not respond to "Do Not Track" browser signals because there is no agreed industry standard for them. You can manage your preferences through the cookie banner, your browser, or the provider opt-outs in section 6.5.
8. International Transfers
Some third-party cookie providers (for example, Google, PostHog, Cloudinary) operate outside Nigeria. Where data set through these cookies is transferred outside Nigeria, we rely on the safeguards described in section 7 of the Privacy Policy.
9. Changes to This Policy
9.1 We may update this Policy when we add or change cookies, when we change processors, or when law or guidance changes.
9.2 Material changes will be communicated through the Platform or by email at least thirty (30) days before they take effect, in line with the Terms and Conditions, section 23.
9.3 Continued use of the Platform after a change takes effect constitutes acceptance of the updated Policy.
10. How to Contact Us
For questions about this Policy, the cookies we use, or your choices, contact us at hello@domesty.co. You can also lodge a complaint with the Nigeria Data Protection Commission as set out in section 11.9 of the Privacy Policy.