Legal
Cookie policy
Last updated September 10, 2026
Version: 1.0 (draft for legal review) · Last updated: [[EFFECTIVE_DATE]] · Effective: [[EFFECTIVE_DATE]]
Draft. This document has not yet been reviewed by counsel and contains placeholders in
[[double brackets]]that must be completed before it takes effect.
This policy describes what the Platform actually does today. If we add an analytics or advertising tool, this document is updated before the tool goes live, not afterwards. See §7.
1. What this policy covers
This policy explains the cookies and similar technologies used on the Bizik web applications at [[USER_APP_URL]] and [[ADMIN_APP_URL]], operated by [[COMPANY_LEGAL_NAME]] (“Bizik”, “we”).
It should be read with the Privacy Policy, which explains everything else we do with your personal data.
The Bizik mobile applications and the WhatsApp service do not use cookies. The mobile apps use device storage for the equivalent purposes, described in §5.
1.1 What a cookie is
A cookie is a small text file that a website asks your browser to store and send back on later visits. “Similar technologies” means anything that achieves the same thing by another route, in particular local storage and session storage in your browser, and the cache used by a progressive web app to work offline.
The law that protects you here is concerned with storing or reading information on your device, whatever the technical mechanism. So this policy covers local storage as well as cookies, and treats them the same way.
2. What we set
⚠ We do not use tracking cookies, advertising cookies, or third-party analytics on the Bizik web applications.
We do not run Google Analytics, an advertising pixel, a session recorder, a heat-map tool, or any third-party tag. Nothing you do on the Platform is shared with an advertising network. We have no advertising business and we do not sell your data.
What we do store is the minimum needed to keep you signed in and to remember your preferences. It is stored in your browser, and most of it never leaves your device.
2.1 The full list
| Name | Type | What it is for | How long | Category |
|---|---|---|---|---|
qatiqa.accessToken | Local storage | Keeps you signed in. Sent to our servers to authenticate each request | Until it expires or you sign out | Strictly necessary |
qatiqa.refreshToken | Local storage | Obtains a new access token so you are not signed out mid-session | Until you sign out or it is revoked | Strictly necessary |
qatiqa.language | Local storage | Remembers whether you chose English or French | Until you change or clear it | Functional |
qatiqa.pwa.install-dismissed | Local storage | Remembers that you dismissed the “install this app” prompt, so we stop asking | Until you clear it | Functional |
qatiqa.install-banner-dismissed | Local storage | As above, for the install banner | Until you clear it | Functional |
| Service-worker cache | Cache storage | Stores app files so the web app loads quickly and works with a poor connection | Until the app updates or you clear it | Strictly necessary |
[[SESSION_COOKIE_NAME]] | Cookie | [[SESSION_COOKIE_PURPOSE]] | [[SESSION_COOKIE_LIFETIME]] | Strictly necessary |
The admin console, used only by our own staff, stores the same authentication items. It is not accessible to customers.
Drafting note — remove before publication: confirm whether any cookie is set by the hosting or CDN layer (for example a load-balancer affinity cookie or a bot-protection cookie). These are set by infrastructure rather than application code. Check the response headers of the live site and complete the last row of the table, or delete it.
3. Essential items
The items marked strictly necessary are what makes the Platform work at all. Without them you cannot sign in, cannot stay signed in, and cannot transact.
Under the law that applies to cookies, storage that is strictly necessary to provide a service that you have expressly requested does not require your prior consent. We therefore set these without asking, and there is no way to switch them off while continuing to use the Platform. If you do not want them, do not sign in — or clear them afterwards (§6).
⚠ A note on security. Your session tokens are held in your browser’s local storage. That means anyone with access to your unlocked device, or any malicious script that reaches the page, could read them. Protect your device, sign out on shared computers, and keep your browser updated. [[REVIEW_TOKEN_STORAGE]]
4. Functional items
The items marked functional are conveniences. They remember your language and the fact that you have already dismissed a prompt.
They store a preference, not an identifier. They do not track you, do not follow you to other sites, and are not shared with anyone.
You may clear them at any time (§6). The Platform will keep working; it will simply revert to its default language and ask you again about installing the app.
5. Analytics
5.1 On the web applications
⚠ We do not currently run any third-party analytics on the Bizik web applications. There is no measurement tag, no product-analytics SDK and no session recording.
5.2 What we do measure
We produce business and operational reporting — transaction volumes, dispute rates, verification throughput, service errors — from our own server-side records, which we hold anyway in order to run the service and to meet our record-keeping obligations. That reporting is generated inside our own systems and is not produced by placing anything on your device.
Server logs record technical data such as IP address, timestamp and the request made. That is described in the Privacy Policy, section 3.3, and is used for security, fraud prevention and diagnosing faults.
5.3 If that changes
If we introduce web analytics, we will:
- update this policy before the tool goes live and list the provider, the cookies it sets and their lifetimes;
- present a consent banner that lets you accept or reject non-essential storage, with rejecting no harder than accepting;
- not set the non-essential items until you have agreed;
- record and honour your choice, and let you change it at any time.
We will not slip an analytics tag in quietly and rely on this document’s silence.
6. Managing your choices
6.1 In the Platform
Because we currently set nothing that requires consent, there is no cookie-preferences panel. If that changes, one will appear here and in the site footer.
You can change your language preference at any time in Settings.
6.2 In your browser
Every major browser lets you view, block and delete cookies and site data:
- Chrome: Settings → Privacy and security → Third-party cookies / Site data
- Safari: Settings → Privacy → Manage Website Data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Edge: Settings → Cookies and site permissions
- On Android and iOS: through the browser app’s own settings
Clearing site data for the Bizik domain removes everything in §2.1, including your session. You will be signed out and will need to sign in again. Your account, your money, your Deals and your history are held on our servers and are not affected.
6.3 Blocking everything
If you block all storage for our domain, you will not be able to sign in. That is a technical consequence of removing the mechanism that holds your session, not a penalty.
6.4 Do Not Track
Browsers may send a “Do Not Track” signal. There is no agreed standard for how a site should respond, and we do not track you across sites in any event, so the signal makes no difference to what we do.
6.5 In the mobile apps
The mobile applications do not use cookies. They store your session credentials and your language preference in the device’s app storage, for the same purposes as §2.1. Clearing the app’s data, or uninstalling it, removes them. Your account is unaffected.
7. Changes to this policy
We will update this policy whenever the storage we use changes, and always before a change takes effect. The version and date at the top tell you which version you are reading.
Where a change introduces storage that requires your consent, we will ask for it rather than relying on your having read this page.
8. Contact
| Purpose | Contact |
|---|---|
| Questions about this policy | [[DPO_CONTACT]] |
| General support | [[SUPPORT_EMAIL]] |
| Your data-protection rights | [[DPO_CONTACT]] — see the Privacy Policy, section 14 |
[[COMPANY_LEGAL_NAME]] — RCCM [[RCCM_NUMBER]] — [[REGISTERED_ADDRESS]], Republic of Cameroon.