2. How we use cookies and local storage
Under the Kenya Data Protection Act, 2019, identifiers in cookies may constitute personal data when they can be linked to an identifiable person. We use them only as described below.
2.1 Strictly necessary (always active)
Required for sign-in, security, and multi-tenant workspace selection. Without these, the authenticated app cannot function.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| fleetonomy_session | Strictly necessary | HttpOnly session cookie after Firebase authentication | Up to 14 days |
| fleetonomy_tenant | Strictly necessary | Active tenant / workspace selection | Up to 1 year |
2.2 Functional (PWA and preferences)
- Service worker cache — stores shell pages and static assets for faster load and limited offline access (managed by
public/sw.js). - IndexedDB — queues driver telematics pings when offline (
fleetonomy-offline-v1) until connectivity returns. - localStorage — dismisses install/push prompts (e.g.
fleetonomy_pwa_install_dismissed,fleetonomy_push_prompt_dismissed_until). - Firebase Auth persistence — may use browser local storage for sign-in state on the client.
2.3 Analytics (optional)
If Firebase Analytics is enabled via NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID, Google may set analytics cookies or use equivalent identifiers to measure page usage. You can limit analytics through browser settings and device tracking controls.
3. Third-party cookies
We do not use advertising or social-media tracking cookies on the core application. OpenStreetMap tiles on the live map may involve requests to third-party servers. M-Pesa and payment flows may redirect to Safaricom or bank pages with their own cookie policies.
4. Consent and control
- Strictly necessary cookies are deployed based on legitimate interest and contractual necessity — they cannot be disabled while using the signed-in product.
- You can clear cookies via browser settings; this will sign you out and reset workspace selection.
- Push notifications require explicit browser permission and a separate opt-in prompt in the app.
- PWA install prompts can be dismissed; you may still install manually from the browser menu.
5. Updates
We may update this Cookie policy when we add features or subprocessors. Check the last updated date in the page header. Continued use after changes constitutes acceptance of the updated policy.
6. Contact
Questions about cookies or local storage: see contact details in our Privacy policy.