Cookie Policy

1. About this policy

This policy explains how HopeOrigins, operated by Hoyozela (Pty) Ltd, uses cookies on https://www.hopeorigins.co.za. Read it together with our Privacy Policy, which explains how we handle your personal information more generally.

2. What cookies are

A cookie is a small text file that a website asks your browser to store. Your browser sends it back to that website on later visits, which lets the website remember things, such as the fact that you are signed in.

Some cookies are strictly necessary for a website to work. Others are used for things like analytics or advertising. We only use the first kind.

3. The cookie we use

We set a single cookie, and only when you sign in. Here are its details:

• Name: ho_session.
• Purpose: keeps you signed in to your account as you move between pages.
• Duration: 30 days, rolling. Each time you use the site while signed in, the 30 days start again. It is removed when you sign out.
• Type: strictly necessary, first-party cookie, set for the hopeorigins.co.za domain.
• Content: a random token that means nothing on its own. It contains no personal information, and we store only a hashed copy of it on our side.
• Protection: it is marked HttpOnly, so scripts on the page cannot read it; Secure, so it is only sent over encrypted connections; and SameSite=Lax, which helps protect against cross-site request forgery.

4. No analytics, advertising or tracking

We don't use analytics, advertising or tracking cookies, and we don't load third-party tracking scripts on our site. We also don't store information in your browser's local storage.

You don't need to be signed in to browse Causes, donate or sign a petition, so if you do those things without an account, we set no cookies at all.

5. Cookie used by our administrators

Our internal administration console uses a separate session cookie that lasts up to eight hours. It is only set for our own staff when they sign in to the console and is never set for members of the public.

6. Cookies set by Paystack

When you donate, we send you to Paystack's secure checkout to enter your payment details. Paystack may set its own cookies while you are on its checkout, for example to process your payment securely and prevent fraud.

We don't control those cookies. Paystack's own cookie and privacy policies govern them.

7. Why we don't show a cookie banner

Because the only cookie we set is strictly necessary to keep you signed in, and we set no optional cookies, we don't ask you to accept cookies through a banner. If we ever add optional cookies, we will update this policy and ask for your consent first.

8. How to control and delete cookies

You can see, block and delete cookies through your browser's settings. Most browsers explain how in their help pages, usually under privacy or site data settings.

Signing out removes our sign-in cookie. You can also delete it in your browser at any time.

If you block or delete our sign-in cookie, you will not be able to sign in or stay signed in. You can still browse Causes, donate and sign petitions without it.

9. Changes to this policy

We may update this policy if the way we use cookies changes. We will change the date at the top of this page when we do.

10. Contact us

If you have questions about cookies or privacy, email privacy@hopeorigins.co.za. For general help, email support@hopeorigins.co.za.