Cookie Policy

A cookie is a small text file that a site asks your browser to store, then sends back on each visit. It lets the site recognise a session without asking you to sign in again on every page.

We also use two close cousins: local storage, which keeps interface preferences inside your browser, and — in the mobile application — the device notification token that lets us deliver a push message. The rules below apply to all three.

Mboago sets only strictly necessary and functional cookies:

• Session cookie — keeps you signed in during your visit and expires when you close the browser or sign out.
• CSRF protection cookie — proves that a form was submitted from our own pages, which stops a third-party site from acting in your name.
• Language cookie — remembers the language you picked (English or French) so we do not ask again on every page.
• Consent cookie — records your cookie choices, so the banner does not reappear on every visit.

None of these cookies is used to build an advertising profile, and none of them is sold or shared with a data broker.

Two situations involve a third party:

• Payment pages: when you pay, the page is operated by our payment provider (Stripe, Flutterwave or PayPal). Those pages set their own cookies, necessary for the payment and for their fraud checks, governed by their own cookie policies.
• Audience measurement: if an analytics tool is enabled, it runs with IP addresses shortened and without cross-site tracking, so that only aggregate figures (number of visits, pages seen) are produced.

Beyond these two cases, no advertising or social-network cookie is loaded on our pages.

The application does not use browser cookies. It stores your session token in a protected area of the device, and a notification token that your phone hands to the app so that a message about your order reaches you.

You can disable notifications at any time in your phone settings. If you do, order updates remain available in the app, they simply stop arriving as alerts.

You can manage cookies:

• from your browser's settings, where you can view, delete and block them (Chrome, Safari, Firefox and Edge all describe the procedure in their help pages);
• in private-browsing mode, which discards cookies when you close the window;
• from the consent banner, for the categories that are optional.

Careful: blocking the session and CSRF cookies makes signing in and ordering impossible, because the site can no longer tell that a form came from you. The language cookie, on the other hand, can be refused without consequence — you will simply have to pick your language again.

Session cookies disappear when you close the browser. The cookies that remember a choice — your language, your consent — last for a limited period, never more than thirteen months, after which you are asked again.

Deleting your cookies at any time does not affect the data attached to your account: the cookies only carry technical information, never your orders or your payment details.

If we add or remove a cookie, this page is updated and its date changes; a new feature that needs an optional cookie is announced before it is activated.

For any question about cookies or about the personal data we process, write to us through the support conversation of the app or using the contact details published on our website.