Legal
Cookie Policy
Effective September 9, 2026 · Sebafy Technologies
This policy explains the cookies and similar browser storage Sebafy uses. It expands on the Cookies section of our Privacy Policy. The short version: we use a small number of cookies that are strictly necessary to keep you signed in and the service secure. We do not use advertising cookies, and we do not use cookies to track you across other websites.
1. What cookies are
A cookie is a small text file a website asks your browser to store and send back on later visits. "Similar technologies" — such as your browser's local storage — work the same way for the purposes of this policy: they let a site remember something between page loads. Where this policy says "cookies," it covers both.
2. Cookies Sebafy sets
All of the cookies below are strictly necessary — the product cannot function without them, so they are not subject to a consent choice. They are first-party (set by Sebafy, not a third party), and each is scoped to the type of account it belongs to.
| Cookie | Purpose | Lifetime |
|---|---|---|
| session | Keeps a provider (business owner or team member) signed in. | Up to 30 days |
| customer_session | Keeps an end customer signed in to view their job history and wallet. | Up to 30 days |
| partner_session | Keeps a referral partner signed in to their partner dashboard. | Up to 30 days |
| admin session | Keeps a Sebafy staff member signed in to the internal admin console. Never set on a normal visitor's browser. | Session / short-lived |
These are signed, HttpOnly cookies (not readable by JavaScript), sent only over HTTPS in production, with SameSite=Lax so they are not sent on cross-site requests. They contain a session token, not your name, email, or password.
3. Local storage for preferences
Sebafy keeps a few interface preferences in your browser's local storage rather than in a cookie — for example your light/dark theme choice and whether you've dismissed certain one-time prompts. This data stays on your device, is never sent to our servers, and can be cleared at any time from your browser settings.
4. Analytics
We use Vercel Analytics for aggregate page traffic. It is cookie-free and does not track you across other sites or build an advertising profile. We also record simple, in-page click counts on our own marketing links (for example, which call-to-action a visitor used) — this is stored server-side against the page, not written to a cookie, and is not tied to your identity.
5. Referral link tracking
When someone follows a partner referral link (a sebafy.com/r/… address), we log that the click happened — the partner code, timestamp, and the visitor's IP and browser user-agent — so we can attribute a later signup and detect referral fraud. This is a server-side log, not a cookie, and it does not place any tracking file on your browser. See our Referral Program Terms for how referral attribution works.
6. No third-party advertising or cross-site tracking
Sebafy does not embed advertising networks, social media tracking pixels, or third-party cross-site trackers. No third party sets a cookie through Sebafy for its own purposes.
7. Controlling cookies
You can delete or block cookies through your browser settings. Because the cookies Sebafy uses are strictly necessary, blocking them will stop you from being able to sign in or stay signed in — the site will not work as intended. Clearing them simply signs you out.
8. Changes to this policy
We'll update the effective date above if this policy changes. If we ever introduce a non-essential cookie, we will ask for your consent first and update this page before doing so.
9. Contact us
Questions about this policy? Reach us at [email protected] or WhatsApp.