Cookie Policy

1. What are cookies?

A cookie is a small text file that a website stores on your device. Cookies help the site remember things — like whether you're logged in or which theme you prefer — between visits.

"Cookies" in this policy also covers similar technologies such as localStorage, sessionStorage, and pixel tags, which serve comparable purposes. Most browsers let you delete or block cookies — see Section 8.

2. Your consent

When you first visit the Services, we show a cookie banner that lets you:

Accept all cookies.
Reject all non-essential cookies.
Customize which categories of cookies you allow.

Essential cookies are set automatically because the Services cannot function without them. All non-essential cookies — including analytics and preference cookies — are set only after you give consent. Your choice is stored so you are not asked on every visit, and you can change it at any time (Section 7).

3. Essential cookies

These are necessary for AlonyoCloud to work. They cannot be turned off. We set the following:

session — Keeps you logged in during a session. Contains an encrypted session ID, no personal data. Expires when you close the browser or after 7 days with "remember me".
csrf_token — Protects against cross-site request forgery. Contains a random token. Expires with the session.
remember_token — If you choose "remember me", this cookie keeps you logged in across sessions. Contains a hashed token. Expires after 7 days.
_cf_bm — Set by Cloudflare for bot management. Contains a challenge response. Expires after 30 minutes.
__cf_bm — Set by Cloudflare for additional bot protection. Expires after 30 minutes.

The exact cookie names emitted by our application are verifiable by inspecting the browser's DevTools. If you believe the list above does not match what you observe, contact [email protected] and we will investigate.

4. Preference cookies

These remember choices you make so you don't have to repeat them. They are set only with your consent:

theme — Stores your light/dark mode preference. Uses browser localStorage (not a traditional cookie). Persists until cleared.
language — Stores your preferred display language. Uses browser localStorage (not a traditional cookie). Persists until cleared.
sidebar_collapsed — Remembers whether you've collapsed the dashboard sidebar. Uses browser sessionStorage. Expires when the tab closes.

We deliberately use localStorage/sessionStorage where possible rather than cookies, since they never travel to our servers and therefore have a smaller privacy footprint.

5. Analytics

We use Plausible Analytics, a privacy-first analytics tool that does not use cookies and does not collect any personal data. No consent is required for this because no personal data is processed.

If we ever switch to an analytics tool that does use cookies (such as Google Analytics), we will update this policy, request your consent, and comply with GDPR Consent Mode v2.

6. Third-party cookies

Some cookies are set by third-party providers whose services we use. We keep these to a minimum:

Pesapal — may set session and fraud-prevention cookies during the payment flow. Pesapal's exact cookie set is verifiable by inspecting browser DevTools when a payment form is opened. Refer to Pesapal's privacy policy for details.

These providers have their own privacy and cookie policies. We only work with providers that meet our security and privacy standards. A current list of third-party processors is available in our Data Processing Agreement at https://alonyocloud.com/dpa.

7. Managing your cookie preferences

You can change or withdraw your cookie consent at any time by clicking "Cookie preferences" in the footer of any page, or by visiting https://alonyocloud.com/cookies.

Withdrawing consent is as easy as giving it. After you withdraw:

We stop setting the non-essential cookies you rejected.
We remove any non-essential cookies already stored on your device when possible (some browsers may cache them until you clear them manually).
The Services continue to work — only personalized preferences and analytics are lost.

If you disable essential cookies, you will not be able to log in or use most of the Services. If you disable preference cookies, your theme and language choices will reset on every visit.

8. Browser controls

Beyond our own cookie banner, you can control cookies through your browser. Most browsers let you:

See what cookies are stored on your device.
Delete individual cookies or all cookies.
Block third-party cookies entirely.
Set exceptions for sites you trust.
Browse in "private" or "incognito" mode, which clears cookies when you close the window.

For step-by-step instructions, see your browser's help pages: Chrome, Firefox, Safari, Edge, and Brave all provide them. Note that browser settings may affect essential cookies too — and disabling them will break login.

9. Changes to this policy

We may update this policy when we add or remove cookies, or when legal requirements change. Material changes will be notified via the cookie banner, by email to registered users, or both.

10. Contact us

If you have any questions about cookies or this policy:

Privacy: [email protected]
General: [email protected]
Mail: Kampala, Uganda (full address to be published upon completion of registration)