Legal
Cookie Policy
Last updated: July 2026
This policy explains how Nari Studio uses cookies and similar technologies, in line with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive, and the Kenya Data Protection Act, 2019. It should be read together with our Privacy Policy.
1. What Cookies Are
Cookies are small text files stored on your device by your browser. We use them to make the store work, to remember choices you make, and — via Google Analytics — to understand how the store is used so we can improve it, and — via the Meta Pixel — to measure how our Instagram and Facebook presence brings shoppers to the store. We never sell cookie data.
2. The Cookies We Use
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| __Host-access_token | Strictly necessary | Keeps you signed in securely (including guest checkout sessions). | 15 minutes |
| __Secure-refresh_token | Strictly necessary | Renews your secure session without asking you to sign in again. | 7 days |
| oauth_state / oauth_redirect | Strictly necessary | Protects the "Sign in with Google" flow against forgery. | 10 minutes |
| nari_favs | Functional | Remembers the products you’ve hearted when you’re not signed in. Set only when you tap a heart. | 12 months |
| nari_sub_dismissed | Functional | Remembers that you closed the subscribe popup so it doesn’t reappear. Stored in your browser session, not sent to us. | Browser session |
| _ga / _ga_* | Analytics | Google Analytics — helps us understand which pages and products are popular so we can improve the store. Data is aggregated; we don’t use it for advertising. | Up to 24 months |
| _fbp | Marketing | Meta (Facebook) Pixel — measures how well our Instagram and Facebook posts bring visitors to the store and helps us reach interested shoppers. | 3 months |
When you pay, Paystack (our payment processor) may set its own cookies on its secure checkout page — see Paystack's privacy policy for details.
3. Legal Basis
- Strictly necessary cookies are exempt from consent under the ePrivacy rules — the store cannot function securely without them (signing in, keeping a cart, preventing forged requests).
- Functional cookies (such as your favorites) are set only in direct response to an action you take — tapping a heart — which is how you express your choice. If you never use the feature, the cookie is never set.
- Analytics and marketing cookies(Google Analytics, Meta Pixel): if you are visiting from the EEA, the UK, or Switzerland, these load only after you accept them in the consent banner — choosing “Essential only” keeps them off. Elsewhere they are used on the basis of our legitimate interest in understanding and improving the store. You can opt out at any time with the Google Analytics opt-out or by blocking cookies in your browser — the store works fully without them.
4. Managing & Deleting Cookies
- Remove all favorites (which empties the nari_favs cookie) by un-hearting products on your Favorites page.
- Signing out ends your session cookies immediately.
- Your browser lets you view, block, or delete cookies at any time (usually under Settings → Privacy). Blocking strictly necessary cookies will prevent sign-in and checkout from working.
5. Your Rights
Under the GDPR and the Kenya Data Protection Act you have the right to access, correct, or erase personal data we hold about you, to object to or restrict processing, and to data portability. Cookie data on your device is under your control at all times via your browser. To exercise any right, contact us at support@naristudio.co.ke. You also have the right to lodge a complaint with your supervisory authority — in Kenya, the Office of the Data Protection Commissioner.
6. Changes to This Policy
If we introduce new cookie categories, we will update this page and, where required, ask for your consent before setting them.