Cookie Policy
Short version: we use the minimum needed to make the site work. We run no advertising trackers, no analytics that follow you elsewhere, and we sell nothing to anybody.
What a cookie is
A small text file a website asks your browser to keep, so it can recognise the same browser next time. Websites also use local storage, which works similarly but is not sent back with every request. We use both, sparingly, and this policy covers them together.
What we actually use
| Name | Type | What it does | How long |
|---|---|---|---|
wb_session | Cookie — strictly necessary | Keeps a member of staff signed in to the staff portal. Set only after a successful sign-in. It is HttpOnly (JavaScript cannot read it), SameSite=Strict (no other site can cause it to be sent) and Secure over HTTPS. | Ends when the session expires or you sign out |
wb_cart | Local storage — functional | Remembers what is in your shopping basket so it survives a page refresh. It stays in your browser; it is not sent to us until you place the order. | Until you clear it or complete the order |
wb_chat | Local storage — functional | Keeps the conversation with our chat assistant on screen while you browse. | Until you close the tab or clear it |
wb_prefs | Local storage — functional | Small preferences such as a chosen branch or a filter, so the page opens the way you left it. | Until you clear it |
What we do not use
- No advertising or retargeting cookies. We do not advertise to you across the internet.
- No third-party analytics. No Google Analytics, no Facebook pixel, no heatmap recorder.
- No social media trackers. Our WhatsApp link is an ordinary link; it sets nothing until you click it.
- No profiling. Nothing on this site builds a profile of you or makes automated decisions about you.
This is why you are not greeted by a cookie banner demanding consent to dozens of "partners" — there are none. The items in the table are either strictly necessary for a function you asked for, or they are conveniences that live only in your own browser.
Third parties that do load
Two things on our pages are served from elsewhere, and honesty requires mentioning them:
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) supplies the typefaces. Loading a font sends your IP address and browser details to Google. It sets no cookie for us and we receive nothing back. - WhatsApp, only if you click the WhatsApp button, at which point you are on WhatsApp's own service under their terms.
Turning them off
Every browser lets you block or delete cookies and site data, usually under Settings → Privacy. On a phone, look for "Site settings" or "Cookies and site data".
What happens if you do:
- Blocking
wb_sessionmeans staff cannot sign in to the portal at all — there is no way to stay signed in without it. - Clearing local storage empties your basket and forgets your preferences. Nothing breaks; you just start again.
- The public pages — services, branches, shop browsing, contact — work fine with everything blocked.
You can also browse in a private or incognito window, which discards all of it when you close the window.
Do Not Track
Some browsers send a "Do Not Track" signal. We honour it by default, in the sense that we do not track you regardless of the setting.
Changes
If we ever add something that tracks you — we have no plan to — we will update this page, put a notice on the site, and ask for your consent before setting it. Until then this table is the whole of it.
Questions about anything here: wanjibotslimited1@gmail.com.
This document is published by Wanjibots Limited, a company registered in Kenya. If anything here is unclear, ask us before you rely on it — we would rather explain it than have you guess.
Version of 21 September 2026. We will post a notice on this page when it changes materially, and the date above will change.