Legal
Cookie policy
Last updated 21 October 2026
Cookie Policy
Last Updated: 21 October 2026
Version: 1.0.0
1. What Are Cookies
Cookies are small text files stored on your device (computer, phone, tablet) when you visit our website. They enable functionality, security, analytics, and personalization. Similar technologies include localStorage, sessionStorage, IndexedDB, and tracking pixels -- this Policy covers all.
Legal Basis: GDPR ePrivacy Directive (2002/58/EC as amended), Nigeria Data Protection Act 2023, Nigerian Cybercrimes Act 2015.
2. Consent Management
2.1 Essential Cookies (No Consent Required)
Strictly necessary for Service operation (Art. 5.3 ePrivacy, GDPR Art. 6.1.b/f). Cannot be disabled via banner.
2.2 Optional Cookies (Consent Required)
Analytics, preferences, marketing. Default: OFF. You must opt-in via cookie banner or Dashboard → Privacy Settings.
2.3 Consent Records
We log: timestamp, IP (hashed), user agent, categories accepted, banner version. Retained 13 months (GDPR accountability).
2.4 Withdrawing Consent
Anytime via:
- Dashboard → Privacy Settings → Cookies
- Cookie banner "Reject All" / "Manage"
- Browser settings (deletes cookies, prevents future)
Withdrawal does not affect prior processing lawfulness.
3. Cookie Categories
3.1 Essential (Strictly Necessary)
| Name | Purpose | Duration |
|---|---|---|
nc_access | Authentication token for API access | 15 min |
nc_refresh | Session persistence | 30 days |
nc_csrf | Protection for state-changing requests | Session |
Why Essential: Without these, you cannot log in, maintain sessions, or securely use the dashboard/API.
3.2 Analytics (Optional — Consent Required)
| Name | Purpose | Duration | Data Collected |
|---|---|---|---|
| analytics | Understand aggregate site usage | Up to 2 years | Pseudonymous ID, pages, events |
3.3 Preferences (Optional — Consent Required)
| Name | Purpose | Duration |
|---|---|---|
theme | UI theme (light/dark/system) | 1 year |
language | Preferred language | 1 year |
sidebar_collapsed | Dashboard UI state | Session |
Stored in localStorage (not cookies) — no network transmission.
3.4 Marketing (Not Currently Used)
We do not use advertising/marketing cookies. If added, they will require explicit consent.
4. Cookie Details Table
| Cookie | Type | Category | Duration |
|---|---|---|---|
| nc_access | HTTP Cookie | Essential | 15 min |
| nc_refresh | HTTP Cookie | Essential | 30 days |
| nc_csrf | HTTP Cookie | Essential | Session |
| theme | localStorage | Preferences | 1 year |
| language | localStorage | Preferences | 1 year |
5. Third-Party Context
5.1 Our Domains
Our website and API are served under nairacloud.xyz and its subdomains.
5.2 Third-Party Services (No Third-Party Cookies)
Payment, email delivery, and monitoring are handled by vetted providers. We do not allow advertising networks, social pixels, or third-party analytics cookies on our domains.
6. Managing Cookies
6.1 Cookie Banner (First Visit)
- Accept All: Enables analytics + preferences
- Reject All: Only essential cookies
- Manage: Granular toggles per category
- Banner: Reappears annually or on policy change
6.2 Browser Controls
- Chrome: Settings → Privacy → Cookies
- Firefox: Options → Privacy → Cookies
- Safari: Preferences → Privacy
- Edge: Settings → Cookies
Blocking essential cookies breaks login, dashboard, and API access.
6.3 Dashboard Controls
Settings → Privacy → Cookies:
- Toggle preferences
- View consent log
- "Delete All Cookies" button (logs you out)
7. Security
All cookies are transmitted over encrypted connections and protected against unauthorized script access and cross-site request forgery.
8. Data Processing & Transfers
| Cookie | Personal Data? | Transfer | Safeguard |
|---|---|---|---|
| nc_access/nc_refresh | Yes (user ID in token) | Nigeria, EU | Encryption, Standard Contractual Clauses |
| nc_csrf | No (random token) | Nigeria | — |
| theme/language | No | Local only | — |
9. Retention & Deletion
| Category | Max Retention | Deletion Trigger |
|---|---|---|
| Essential | Per duration above | Logout, expiry, account deletion |
| Preferences | 1 year | Consent withdrawal, manual clear |
Account Deletion: All cookies purged within 30 days (grace period for recovery).
10. Children
Services not for under 18. No cookies knowingly set for children. If detected, purged immediately.
11. Changes
Material changes: 30-day notice via banner + email. Version history available on request.
12. Compliance References
- GDPR: Art. 4(1), 6, 7, 12-22, 30, 32, 33, 35; Recitals 30, 32, 33
- ePrivacy Directive: Art. 5.3 (consent), Art. 13 (information)
- NDPA 2023: cookies, data-subject rights, and breach notification
- UK PECR: Reg. 6 (consent), Reg. 5 (security)
13. Contact
Cookie Questions: cookies@nairacloud.xyz
DPO: dpo@nairacloud.xyz
Privacy: privacy@nairacloud.xyz