Cookies Policy

Cookies are small text files stored on your device. They help websites remember sessions, preferences, and security state. Similar technologies include local storage, session storage, and indexed databases used by our web and desktop apps.

• Marketing site:: locale preference, theme, and essential navigation state on tallyhubgh.com.
• Dashboard & POS:: authentication refresh tokens, session continuity, and workspace preferences.
• Hosted /pay:: checkout session integrity and optional page-only locale selection.
• Partner portal:: sign-in sessions and referral dashboard state.

• Essential:: required for sign-in, checkout, billing, and core app routes.
• Security:: fraud signals, CSRF protection, and session integrity.
• Preferences:: language, theme, and UI settings you choose.
• Analytics:: aggregated usage to improve performance and features where enabled.
• Functional:: temporary form drafts, table filters, and in-app tour progress.

Names may vary by environment; purposes remain consistent.

• Refresh token (httpOnly cookie):: maintains authenticated dashboard sessions; essential; session or rolling expiry.
• Locale preference:: remembers marketing site language (e.g. tallyhub-language); preference; up to 1 year.
• Theme preference:: light/dark mode selection; preference; up to 1 year.
• /pay page locale:: session-only language for hosted checkout without changing merchant settings.
• Session state:: short-lived identifiers for checkout and onboarding flows; essential; session.

• Language keys:: persist selected locale when cookies are unavailable.
• Theme keys:: store daisyUI/theme selection for faster load.
• Form drafts:: temporary POS or catalog drafts until submitted or cleared.
• Desktop cache:: offline catalog and transaction queue in the desktop app's local database — not browser cookies.

Session cookies expire when you close the browser. Persistent cookies and local storage entries expire per purpose — typically from session length up to twelve months for preferences — and may be refreshed on login or settings change.

We use service workers and WebSocket connections for real-time notifications; these are not cookies but may store minimal state. Paystack checkout may set its own cookies governed by Paystack's policy.

Browser DNT signals are not uniformly supported. We honor in-app privacy settings and applicable consent requirements for non-essential analytics where required by law.

You can control cookies through browser settings and, where available, in-app privacy controls. Blocking essential cookies may prevent login, checkout, or billing.

• Clear or block cookies per site in your browser privacy settings.
• Use private browsing for shorter-lived sessions.
• Review privacy extensions that block third-party cookies.
• Sign out and clear site data for dashboard domains to reset sessions.

Paystack, analytics providers, and embedded content may set their own cookies when you interact with checkout or linked services. Their use is governed by their policies. We recommend reviewing Paystack's cookie notice when completing payments.

Where GDPR, UK GDPR, or similar laws apply, non-essential cookies require consent before placement. Ghana and other regions may have different requirements; we adjust controls as our product and legal obligations evolve.

We may revise this policy as products change. Material updates appear with a new "Last updated" date on this page.