LEGAL · PRIVACY
Cookie & Tracking Technologies Policy
A clear register of the cookies, pixels, SDKs, and storage technologies Kofa uses, why they exist, and how you control them.
You are in charge:Non-essential analytics and marketing cookies stay off until you choose to enable them. Declining them does not block access to Kofa core services.
Document type
Cookie and tracking technologies policy
Version
1.0
Effective date
Q4 2026
Covers
Kofa web platform and mobile apps
Cookie manager
kofa.africa/cookies
This page is the readable web version of Kofa's Cookie and Tracking Technologies Policy. The downloadable PDF includes the full formal register and version record.
01Scope & Transparency
This policy explains how Kofa Africa uses cookies, pixel tags, web beacons, device identifiers, local storage, mobile SDKs, and similar tracking technologies across the website and mobile apps.
It should be read together with the Privacy Policy and Terms of Service, which form Kofa's broader data transparency framework.
The policy is designed around ePrivacy, UK PECR, GDPR, NDPR 2019, the Nigeria Data Protection Act 2023, and CCPA/CPRA disclosure expectations.
02Technologies We Use
Cookies are small text files stored by your browser so the platform can remember session state, preferences, and certain security details.
Kofa also uses local storage, session storage, pixel tags, limited fraud-prevention device fingerprinting, and mobile SDKs for app analytics, crash reporting, push notifications, and on-device app state.
Cookies cannot install software, execute code, read files on your device, or read cookies set by other websites.
03Cookie Categories
Kofa uses four main categories: strictly necessary, functional, analytics and performance, and marketing and retargeting.
Strictly necessary cookies support login, booking, payment, CSRF protection, load balancing, and storing consent choices. They cannot be disabled through the preference centre.
Analytics and marketing cookies require consent. Non-essential categories default to off until you make an affirmative choice.
04Consent Standards
The consent banner describes each category, provides granular toggles, keeps non-essential choices off by default, and gives Decline All equal prominence with Accept All.
Consent must be freely given, specific, informed, unambiguous, withdrawable, and auditable.
Kofa stores consent preferences for 12 months in the strictly necessary kfa_consent cookie and may refresh consent when cookie purposes materially change.
05Managing Preferences
You can update cookie choices from this page or the Cookie Settings link in the footer. Withdrawal stops new non-essential collection from that point onward.
You can also manage cookies through browser settings in Chrome, Safari, Firefox, Edge, Opera, or Brave. Blocking all cookies may prevent login, bookings, and payments from working correctly.
Mobile tracking preferences can be managed through iOS Tracking settings, Android advertising ID controls, and in-app privacy toggles when the Kofa app is available.
06Third Parties
Third-party scripts and pixels are loaded only after consent where required. Analytics providers operate under data processing terms, while advertising platforms may act as independent controllers.
Kofa reviews third-party cookies quarterly and removes services that are no longer in use.
Embedded content such as video or map providers may set their own cookies when you interact with that content, under their own policies.
07DNT & Global Privacy Control
Kofa voluntarily respects browser Do Not Track signals by not activating analytics or marketing cookies in that session.
Global Privacy Control signals are treated as declining marketing and retargeting cookies, and as a Do Not Sell or Share request for California residents.
These browser signals affect Kofa's own cookie deployment, but do not control third-party platforms when you visit those platforms directly.
08International Transfers
First-party cookie data is processed primarily in Nigerian and African-region cloud infrastructure.
Third-party tools such as Google, Meta, TikTok, and Firebase may process cookie or SDK data on global infrastructure, including outside Nigeria and the EEA.
Where first-party data is transferred internationally, Kofa applies the safeguards described in the Privacy Policy, including NDPR cross-border rules and contractual safeguards where applicable.
09Updates & Contact
Kofa updates the policy when cookies are added, removed, materially repurposed, or when applicable law and regulatory guidance changes.
Material changes may trigger a new consent banner notice and email notification to registered users where appropriate.
Cookie enquiries can be sent to info@kofa.africa, and data protection enquiries can be sent to info@kofa.africa.
Cookie Categories at a Glance
| Category | Consent | Purpose |
|---|---|---|
| Strictly necessary | No consent required | Login, booking, payment flow, CSRF protection, consent records |
| Functional | No consent required | Currency, language, recently viewed listings, usability preferences |
| Analytics & performance | Consent required | Pseudonymised usage analysis, conversion funnels, performance improvements |
| Marketing & retargeting | Consent required | Kofa retargeting campaigns across third-party ad and social platforms |
Strictly Necessary Cookie Register
| Cookie | Set by | Purpose | Retention |
|---|---|---|---|
| kfa_session | Kofa Africa | Authenticated session state | Session |
| kfa_auth_token | Kofa Africa | Encrypted login persistence | 30 days |
| kfa_csrf | Kofa Africa | Form and checkout CSRF protection | Session |
| kfa_cart | Kofa Africa | Booking basket state during checkout | Session / 2 hours |
| kfa_pay_state | Kofa Africa | Payment flow recovery and duplicate-charge prevention | Session / 1 hour |
| kfa_consent | Kofa Africa | Cookie consent preferences by category | 12 months |
| __Secure-pstk | Paystack | Payment session token on checkout pages | Session |
| __Secure-fwpay | Flutterwave | Alternative payment session token | Session |
Functional, Analytics, Marketing & App Technologies
| Technology | Category | Purpose | Control |
|---|---|---|---|
| kfa_currency | Functional | Selected display currency | 12 months |
| kfa_lang | Functional | Language preference | 12 months |
| kfa_recent_views | Functional | Recently viewed listings | 30 days |
| Google Analytics | Analytics | Aggregate usage and funnel analysis | Consent controlled |
| Meta Pixel | Marketing | Retargeting and campaign measurement | Consent controlled |
| TikTok Pixel | Marketing | Campaign measurement and retargeting | Consent controlled |
| Firebase Analytics | Mobile app | App events, onboarding, crash context | App settings |
| Push token | Mobile app | Booking and trip notification delivery | Device settings |
THIRD-PARTY CONTROLS
Advertising choices outside Kofa.
You can also opt out of interest-based advertising directly with major advertising choice tools. These controls sit alongside Kofa's own cookie preferences.
COOKIE PREFERENCE CENTRE
Change your choices at any time.
Kofa's cookie preference centre is available from this page and from the footer. Changes take effect immediately for future non-essential cookie collection.