Legal
Cookie Policy
Last updated: 24 March 2026
This Cookie Policy explains how Hayil Inc. uses cookies and similar technologies when you visit our website (hayil.org) or use our web dashboard. It does not apply to our mobile app or USSD service, which use different technical mechanisms and do not use browser cookies.
1. What Are Cookies?
Cookies are small text files that a website stores on your browser or device when you visit. They allow the website to recognise your device on subsequent visits and remember certain information about you - such as whether you're logged in or your preferences.
Similar technologies include local storage (browser-based key-value storage), session storage (cleared when you close the tab), and pixel tags(small images used to track page visits). We refer to all of these collectively as “cookies” in this policy.
2. Cookies We Use
We use the following categories of cookies:
3. What We Don't Do
- We do not use advertising cookies or tracking pixels from ad networks.
- We do not sell data derived from cookies to third parties.
- We do not use cross-site tracking technologies.
- We do not use fingerprinting techniques to identify users.
- We do not embed third-party social media widgets that track you.
Hayil's web dashboard and website are advertising-free. We have no commercial relationship with advertisers and your browsing behaviour is never used to serve you ads.
4. Authentication Cookies in Detail
Because Hayil handles politically sensitive data, we take extra care with authentication cookies:
- HttpOnly - the
hayil_tokencookie cannot be read by JavaScript. This protects your session from XSS attacks even if malicious code somehow ran on the page. - Secure - cookies are only sent over HTTPS, never plain HTTP.
- SameSite=Strict - cookies are not sent with cross-site requests, protecting against CSRF attacks.
- Scoped refresh token - the refresh token is only sent to the
/api/auth/refreshendpoint, limiting its exposure.
5. Managing Your Cookie Preferences
5.1 Browser settings
You can instruct your browser to refuse all cookies or to alert you when cookies are being sent. Each browser is different - consult your browser's help documentation. Note that disabling strictly necessary cookies will prevent you from logging in to the web dashboard.
5.2 Functional and analytics cookies
You can opt out of functional and analytics cookies at any time by visiting your account privacy settings (logged-in users) or by emailing privacy@hayil.org.
5.3 Do Not Track
We honour the Do Not Track browser signal. If your browser sends a DNT:1 header, Hayil will disable all non-essential tracking for your session automatically.
6. Cookie Duration
| hayil_token (session) | 7 days from last activity |
| hayil_refresh | 30 days |
| billing_preference | 1 year |
| sidebar_state | Session (cleared on tab close) |
| Analytics (Plausible) | No cookie - script only |
| Paystack cookies | Session (cleared after checkout) |
7. Changes to This Policy
We may update this Cookie Policy when we introduce new features or change our tooling. When we do, we will update the “Last updated” date at the top. For significant changes affecting your privacy, we will notify you via the Platform.
8. Contact
Hayil Inc. - Privacy Team
26 Pearl Green Street, Accra, Ghana
privacy@hayil.org