Cookie Notice

Cookies set by the Service — strictly necessary, no consent needed

Name	Purpose	Lifetime	Flags
Session cookie (PHP session id)	Keeps you signed in and carries your session token; also remembers which family workspace you have open	Browser session	HttpOnly, Secure, SameSite=Lax
_csrf	Protects forms against cross-site request forgery	Browser session	HttpOnly, Secure, SameSite=Lax
app_remember	"Remember me": keeps you signed in on this device	30 days	HttpOnly, Secure, SameSite=Lax
enjuya_consent	Only set if analytics is switched on for the public site: remembers whether you accepted or rejected analytics	12 months	Secure, SameSite=Lax

Set by third parties — public website only, with your consent

Provider	What it does	Loads on	Opt in or out
Google Analytics 4 (_ga, _ga_*)	Usage statistics for the public pages; sends your internet address, device and the page URL to Google, with address anonymisation on	Public pages only (landing, about, contact, pricing, legal) — never inside a family workspace and never on sign-in, password-reset or invitation pages — and only when analytics is switched on	The cookie banner; your choice is remembered for 12 months
Google Fonts	The landing page loads its display font from Google's servers, which see your internet address. The Service's own pages use fonts served from enjuya.com	Landing page	—
Paddle.js (cdn.paddle.com)	Opens the card checkout; Paddle sets its own cookies on its checkout	The payment page only	Required to pay by card

If you reject analytics, or analytics is switched off, nothing from Google Analytics is loaded. Enju Ya uses no advertising trackers of any kind.

Managing cookies

Use the banner on the public site when it is shown, or your browser settings. Blocking the strictly necessary cookies will stop you signing in.

Enju Ya is operated by Eighteen O Nine Limited (1809ltd.co.ke). Questions about this page: support@example.com.