Cookie Policy
Last updated: [To be supplied: Effective date]
This notice lists every cookie and item of browser storage OgaLandlord uses, why we use it and how long it lasts. It is written to meet the Nigeria Data Protection Regulation.
Draft wording
This page is a draft. It must be reviewed and approved by legal counsel before OgaLandlord is used in production. Text marked “To be supplied” is still missing.
1. What cookies and browser storage are
A cookie is a small file a website stores in your browser. Local storage is a similar space in your browser that a website can write to and read from. Both let a site remember things between visits, such as the fact that you are signed in.
2. What we use
OgaLandlord uses two cookies to sign you in and keep you signed in, plus one more cookie only if you ask a device to skip the two-factor code. We do not keep sign-in tokens in your browser's local storage.
| Name | Purpose | Type | How long it lasts |
|---|---|---|---|
ol_deviceCookie (HttpOnly, set by our server) | Identifies the device you sign in from, so each sign-in is tied to a device session that can be ended. It holds a random identifier with a signature our server checks. Page scripts cannot read it. | Strictly necessary | 365 days |
ol_2fa_trustCookie (HttpOnly, set by our server) | Set only if you tick “Trust this device” when signing in with two-factor authentication, so this device is not asked for a code again. It holds a random token that works only for your account. Page scripts cannot read it. | Strictly necessary (only when you ask for it) | 30 days, or until you reset your password |
ol_refreshCookie (HttpOnly, set by our server) | Keeps you signed in. It gets a new short-lived access token when the old one runs out, so you are not signed out every 30 minutes. Page scripts cannot read it; the access token itself is held in memory only and is gone when you close or reload the page. | Strictly necessary | Removed when you sign out. It stops working after 7 days. |
When the platform runs in production mode, the ol_device and ol_refresh cookies are marked Secure, so the browser only sends it over an encrypted connection. It is also marked SameSite=Lax, which stops most other websites from sending it with their requests.
3. No analytics or advertising cookies
OgaLandlord does not use analytics, advertising or social media tracking cookies. We do not load third-party tracking scripts. We do not use cookies to build a profile of you for advertising.
We do not use cookies or storage to remember preferences. Your notification settings and your organisation's branding are kept on our servers and loaded from there.
The marketplace counts how often a listing is viewed. This does not set a cookie. See our Privacy Policy for what is recorded.
4. Paying through Paystack
When you pay rent, a subscription or a fee, you are sent to Paystack's payment page. Paystack may set its own cookies there. Those cookies are covered by Paystack's own cookie and privacy policies, not this one.
5. How to control cookies and storage
Your browser settings let you see, block and delete cookies and site data. Look for “Cookies and site data” or “Privacy” in your browser's settings.
Everything we use is strictly necessary. If you block it, signing in to OgaLandlord will not work properly. Deleting the sign-in cookies signs you out, and signing out removes them. The public pages of the site, such as listings and pricing, work without them.
6. Changes to this policy
If we start using a new cookie or storage item, we will update this page and the “Last updated” date first. If it is not strictly necessary, we will ask for your consent before we use it.
7. Contact us
Questions about this policy can go to [To be supplied: Privacy contact email] or through our contact page.