Cookie Policy

This Cookie Policy explains how Capay Global uses cookies and similar technologies on its public websites, its developer documentation, its merchant and admin dashboards, and its hosted checkout. It should be read together with our Privacy Policy, which explains how we handle personal data more generally.

A cookie is a small text file that a website stores on your device. Similar technologies include local storage, session storage, software development kits, pixels and tags. We refer to all of these as "cookies" in this Policy.

We group cookies by purpose. Strictly necessary cookies are always on because the service cannot function without them. All other categories are used only where you have given consent, where consent is required by the law that applies to you.

• Strictly necessary cookies: required to operate the service, for example to authenticate you, keep your session, balance load, and protect against cross-site request forgery and other abuse. These do not require consent.
• Functional and preference cookies: remember your choices, such as your language (English or French) and interface preferences, and your cookie choices themselves.
• Analytics and performance cookies: help us understand how the service is used so that we can improve it, for example which pages are visited and where errors occur. Used only with consent where required.
• Security and fraud-prevention cookies: help us detect and prevent fraudulent or malicious activity and keep accounts and payments secure.
• We do not use cookies for third-party advertising or cross-site behavioural advertising by default. If this ever changes, we will update this Policy first and obtain consent where the law requires it.

This inventory reflects the storage our websites and dashboards set today, first-party and in your own browser. Each entry states the purpose, category and duration.

• Sign-in session (dashboards and checkout): authentication tokens that establish and maintain your signed-in session, set by our authentication provider in browser storage. Category: strictly necessary. Duration: until you sign out or the session expires.
• Consent record: stores your cookie choices in browser storage so that we do not ask on every visit. Category: strictly necessary. Duration: until you clear it or this Policy changes in a way that requires asking again.
• Language and interface preferences: remember your language (English or French) and your light or dark theme in browser storage. Category: functional. Duration: until you clear them.
• Analytics: we do not set any analytics cookies today. If we introduce analytics, it will load only after your consent where consent is required, and this inventory will be updated first.

Strictly necessary cookies are set on the basis of our legitimate interest in providing a working and secure service, and do not require your consent. For all other cookies, where the law that applies to you requires consent (for example the EU ePrivacy rules and the UK Privacy and Electronic Communications Regulations, and the consent requirements of the African data-protection laws named in our Privacy Policy), we ask for your consent before setting them and we do not treat continued browsing alone as consent.

You can give or refuse consent, and change your choices at any time, using the cookie controls described below. Withdrawing consent does not affect processing that took place before you withdrew it.

You can manage non-essential cookies through our cookie banner or preferences control where it is shown. You can also control cookies through your browser settings, which let you block or delete cookies; note that blocking strictly necessary cookies will stop parts of the service from working.

Because we operate across many countries and browsers, the exact controls you see may vary. The current mechanism is the consent banner shown on your first visit and the "Cookie settings" control in the footer of our websites.

Some cookies may be set by service providers that act as our processors, for example an analytics or error-monitoring provider, under written data-protection terms. Where a payment involves a third party with its own site (for example a card network, a bank or a mobile-money operator), that party may set its own cookies under its own policy, and we do not control those cookies.

We may update this Cookie Policy to reflect changes in the cookies we use or in the law. The current version and its effective date are shown at the top of this page; material changes will be signposted in the product.

Questions about this Cookie Policy can be sent to the Data Protection Officer at [email protected], or to [email protected] for general enquiries.

Related documents: our Privacy Policy, Terms of Service, Acceptable Use Policy, Data Processing Addendum and AML/KYC Notice.