Legal
Cookie Policy
Last updated: July 2026
This policy explains how Nari Studio uses cookies and similar technologies, in line with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive, and the Kenya Data Protection Act, 2019. It should be read together with our Privacy Policy.
1. What Cookies Are
Cookies are small text files stored on your device by your browser. We use them only to make the store work and to remember choices you make — we do not use advertising, tracking, or third-party analytics cookies, and we do not sell or share cookie data.
2. The Cookies We Use
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| access_token | Strictly necessary | Keeps you signed in securely (including guest checkout sessions). | 15 minutes |
| refresh_token | Strictly necessary | Renews your secure session without asking you to sign in again. | 7 days |
| oauth_state / oauth_redirect | Strictly necessary | Protects the "Sign in with Google" flow against forgery. | 10 minutes |
| nari_favs | Functional | Remembers the products you’ve hearted when you’re not signed in. Set only when you tap a heart. | 12 months |
| nari_sub_dismissed | Functional | Remembers that you closed the subscribe popup so it doesn’t reappear. Stored in your browser session, not sent to us. | Browser session |
When you pay, Paystack (our payment processor) may set its own cookies on its secure checkout page — see Paystack's privacy policy for details.
3. Legal Basis
- Strictly necessary cookies are exempt from consent under the ePrivacy rules — the store cannot function securely without them (signing in, keeping a cart, preventing forged requests).
- Functional cookies (such as your favorites) are set only in direct response to an action you take — tapping a heart — which is how you express your choice. If you never use the feature, the cookie is never set.
4. Managing & Deleting Cookies
- Remove all favorites (which empties the nari_favs cookie) by un-hearting products on your Favorites page.
- Signing out ends your session cookies immediately.
- Your browser lets you view, block, or delete cookies at any time (usually under Settings → Privacy). Blocking strictly necessary cookies will prevent sign-in and checkout from working.
5. Your Rights
Under the GDPR and the Kenya Data Protection Act you have the right to access, correct, or erase personal data we hold about you, to object to or restrict processing, and to data portability. Cookie data on your device is under your control at all times via your browser. To exercise any right, contact us at support@naristudio.co.ke. You also have the right to lodge a complaint with your supervisory authority — in Kenya, the Office of the Data Protection Commissioner.
6. Changes to This Policy
If we ever introduce new cookie categories (for example analytics), we will update this page and, where required, ask for your consent before setting them.