1. What Cookies Are
1.1 A cookie is a small data file placed on your device (computer, tablet, or mobile) when you visit a website or open an application. Cookies allow the website to recognise your device and remember information about your visit.
1.2 We also use related technologies, including local storage, session storage, pixels, software development kits (SDKs), and similar identifiers. References to "cookies" in this Policy include these technologies.
1.3 Cookies may be "session" cookies (deleted when you close your browser) or "persistent" cookies (kept for a defined period). They may be "first-party" (set by Domesty) or "third-party" (set by a service we use, such as an analytics provider).
2. Our Lawful Basis
2.1 We set strictly necessary cookies on the basis of our legitimate interest in operating the Platform. These cannot be turned off through our cookie banner because the Platform will not function without them.
2.2 We set analytics and measurement cookies, including the session recording described in section 3.3, on the basis of our legitimate interest under the NDPA in understanding how the Platform is used, diagnosing faults, and measuring whether our marketing reaches the people it is intended to reach. We have assessed that this interest is not overridden by your rights and freedoms because the data is used to operate and improve the Platform, is not sold, is not shared for cross-context behavioural advertising, and is not used to make any decision about you individually.
2.3 We set marketing cookies only with your consent. You may give, refuse, or withdraw that consent at any time through our cookie banner.
2.4 Your right to object. You may object to our use of analytics and measurement cookies at any time by writing to hello@domesty.co, and we will stop processing your data for that purpose. You may also block them using your browser controls (section 6.3) or the provider opt-outs in section 6.5.
3. Categories of Cookies We Use
We group cookies into four categories. The categories match section 9 of the Privacy Policy.
3.1 Strictly Necessary
Required for the Platform to function. Without these cookies, services such as login, account security, escrow checkout, and abuse prevention will not work.
3.2 Functional
Domesty does not currently set functional cookies (such as language, time-zone, or saved-filter preferences). If we introduce them, they will appear here and be set only with your consent.
3.3 Analytics and measurement
Help us understand how Users find and use the Platform, what is working, and what is not. This category includes session recording, which reconstructs the pages you viewed and the actions you took, such as clicks, scrolling and navigation, and replays them as a video. Text you type into form fields is masked, and recording does not run on administrative pages. These cookies are set for all Users on the basis described in section 2.2 and are not controlled by the cookie banner. You may object as described in section 2.4.
3.4 Marketing
Used where you have consented, to measure the performance of marketing campaigns and to limit the number of times you see a given message. Marketing cookies are set only after you consent.
4. Cookies We Set
The table below lists the principal cookies and similar identifiers used on the Platform. Specific cookie names may change as we update the Platform; the categories and purposes remain as described.
4.1 Strictly necessary (set by Domesty)
Authentication and session cookies, used to keep you logged in and to protect your account.
Cookie-consent record, used to remember your cookie preferences. Retention: up to twelve (12) months.
Load-balancing identifiers, used to deliver the Platform reliably.
4.2 Functional (set by Domesty)
None currently set.
4.3 Analytics (set by third parties on our behalf)
Google Analytics 4 (_ga, _ga_*) loaded via Google Tag Manager. Used to understand aggregated usage patterns. Standard retention: fourteen (14) months.
PostHog (ph_*) used for product diagnostics, feature usage, error tracking, and session recording. Recordings mask text entered into form fields. Retention is as configured in our PostHog project.
4.4 Marketing
Where you have consented, we may set or allow marketing cookies and pixels to measure campaign performance. We do not currently sell or share your personal data for cross-context behavioural advertising.
5. Third-Party Services That May Set Cookies
The following third parties may set cookies or similar identifiers when you use parts of the Platform that integrate with their services. Each third party processes data under its own privacy policy.
5.1 Google LLC - Google Analytics 4 and Google Tag Manager (analytics).
5.2 PostHog Inc - product analytics and diagnostics.
5.3 Google LLC and Meta Platforms, Inc - only if you choose to sign in with Google or Facebook (authentication).
5.4 Flutterwave Technology Solutions Limited and Paystack Payments Limited - during checkout, for fraud prevention and to process your payment.
5.5 Cloudinary Limited - for delivery of images and other media.
5.6 Dojah Inc - during identity verification flows.
5.7 Twilio Inc - does not set browser cookies; included for completeness in respect of OTP delivery.
5.8 Functional Software, Inc. (Sentry) - error monitoring and performance diagnostics.
We require these third parties to use the data only for the purpose for which it was shared with them.
6. Managing Your Cookie Preferences
6.1 Cookie banner. The first time you visit the Platform you will see a cookie banner. You can accept all cookies or reject the optional ones. Strictly necessary cookies and the analytics and measurement cookies in section 3.3 are always on and are not controlled by the banner. Marketing cookies are set only if you accept them.
6.2 Renewing your choices. You can change your choices at any time by clearing the Domesty cookies in your browser, which brings the cookie banner back, or by using the provider opt-outs in section 6.5.
6.3 Browser controls. Most browsers let you block or delete cookies through their settings. Disabling cookies may break parts of the Platform, including login and escrow checkout.
6.4 Mobile devices. On iOS and Android, you can reset your advertising identifier or limit ad tracking through the device's privacy settings.
6.5 Provider opt-outs. Some third parties offer their own opt-out tools, including:
Google Analytics: tools.google.com/dlpage/gaoptout.
PostHog: see PostHog's privacy controls.
7. Do Not Track
We do not respond to "Do Not Track" browser signals because there is no agreed industry standard for them. You can manage your preferences through the cookie banner, your browser, or the provider opt-outs in section 6.5.
8. International Transfers
Some third-party cookie providers (for example, Google, PostHog, Cloudinary) operate outside Nigeria. Where data set through these cookies is transferred outside Nigeria, we rely on the safeguards described in section 7 of the Privacy Policy.
9. Changes to This Policy
9.1 We may update this Policy when we add or change cookies, when we change processors, or when law or guidance changes.
9.2 Material changes will be communicated through the Platform or by email at least thirty (30) days before they take effect, in line with the Terms and Conditions, section 23.
9.3 Continued use of the Platform after a change takes effect constitutes acceptance of the updated Policy.
10. How to Contact Us
For questions about this Policy, the cookies we use, or your choices, contact us at hello@domesty.co. You can also lodge a complaint with the Nigeria Data Protection Commission as set out in section 11.9 of the Privacy Policy.