Cookie Policy
AutoFiti Cookie Policy
Last Updated: October 20, 2026
1. Introduction & Scope
This Cookie Policy explains how AutoFiti utilizes cookies, tracking tokens, and local browser storage layers across the root domain autofiti.africa and its mapped geographical country subdomains. This framework operates hand-in-hand with our Privacy Policy to maintain clear alignment with data processing rules enforced under the Kenya Data Protection Act.
2. What Are Cookies?
Cookies are compact text files recorded on your mobile device or computer storage when loading web resources. They allow our Laravel system architecture to recognize your active session state, maintain authentication tokens, and preserve your localized language or filter preferences during subsequent visits without lagging your browser performance.
3. How AutoFiti Employs Cookies
AutoFiti runs a minimal, highly optimized cookie schema to protect web server performance. We classify our cookie storage arrays into the following functional groupings:
| Cookie Key Name | Provider / Source | Classification | Functional Operational Purpose | Lifespan |
|---|---|---|---|---|
| autofiti_session | AutoFiti (First Party) | Strictly Necessary | Tracks user authentication status, dashboard actions, and vehicle submission form memory rows. | 2 Hours |
| XSRF-TOKEN | AutoFiti (First Party) | Strictly Necessary | Inbuilt database protection component preventing Cross-Site Request Forgery security breaches on forms. | 2 Hours |
| guest_country_code | AutoFiti (First Party) | Functional Selector | Locks down your target localized country mapping so search components pull local inventory automatically. | 30 Days |
| _ga / _gid | Google Analytics | Performance Traffic | Gathers anonymous page routing tracks to help us monitor site speeds and filter system usage metrics. | Up to 2 Years |
4. Third-Party Script Cookies
When you click on direct automotive payment fields or interactive checkouts handled by M-Pesa Daraja, Flutterwave, Paystack, Stripe, or PayPal, those independent payment provider gateways may inject separate security tokens to authenticate your transaction safely. These scripts are governed by their respective platforms outside of our direct server array.
5. Controlling Your Browser Settings
You can adjust, clear, or reject cookie tokens inside your browser properties or privacy application blocks at any time [shopping "product styling"]. Please note that disabling strictly necessary tokens will break our vehicle upload forms and prevent you from accessing your dealer account dashboard. For further clarification, contact us at [email protected].
