What cookies and similar storage are
A cookie is a small text file a website asks your browser to store, then hand back on later requests. Browsers also expose equivalents that are not strictly cookies — localStorage, sessionStorageand IndexedDB — which this policy covers alongside cookies because they work the same way for privacy purposes.
They exist for legitimate reasons. Without them, staying signed in, keeping a shopping basket or remembering that you dismissed a cookie banner simply would not work. The disagreement is never whether cookies are used — they are — but whether a visitor has actually agreed to the ones that are not required for the site to function.
How this site uses them
The default position here is that nothing non-essential runs until you say so. The analytics scripts are not present in the page at all until you accept analytics cookies, which means they are never downloaded, no analytics cookie is ever set, and no request reaches Google or Vercel before consent. There is no tag manager that fires early and no pre-consent pixel.
- Rejecting is as easy as accepting. One click each, same button weight, same position. The site is fully usable with everything non-essential refused.
- Granular control. Categories can be switched individually rather than only all-or-nothing.
- No dark patterns. The reject option is not made harder to find, the dialog is not pre-ticked, and there is no countdown or repeated nagging.
- Reversible. Your choice can be changed at any time, in one click, from the banner, this page, or the footer link.
Every cookie used on this site
This is the complete list. It is short because the site is small, and it has been kept short on purpose.
| Name | Provider | Purpose | Type | Duration | Category |
|---|---|---|---|---|---|
| _ga | Google LLC | Distinguishes visitors from one another so reports do not merge separate visits into a single person. | HTTP cookie | 2 years | Analytics |
| _ga_G-KC8Z48VS2N | Google LLC | Persists the analytics session state for this specific property. | HTTP cookie | 2 years | Analytics |
| _gid | Google LLC | Distinguishes visitors within a rolling 24-hour window. | HTTP cookie | 24 hours | Analytics |
| __vercel_lb | Vercel Inc. | Routes your request to the nearest data centre. Set by the hosting platform, not by me. | HTTP cookie | Session | Strictly necessary |
| mfalme.consent.v1 | This site | Remembers which cookie categories you chose, so you are not asked again on every page. | localStorage (not a cookie) | Until you clear site data | Strictly necessary |
What analytics is used, and with what settings
| Service | Cookies? | IP addresses | Notes |
|---|---|---|---|
| Google Analytics 4 | Yes — only with consent | Not stored. GA4 truncates and discards rather than recording them. | IP anonymisation on, Google Signals off, personalised advertising features disabled. |
| Vercel Web Analytics | No — cookieless by design | Not collected. A rotating daily salt is used instead, so the identifier cannot be linked across days. | Aggregate page views only. It never leaves the site to build a profile about you. |
| Formspree | None set on this site | Handled under Formspree's own policy | Delivers form submissions only. Their infrastructure is outside Kenya. |
Because analytics is loaded only after consent, the practical effect of declining is that no analytics record of your visit exists at all — not a shorter one, and not an anonymous one. Nothing about the visit is measured.
How to manage and withdraw consent
You can change your mind whenever you like, and the change takes effect immediately:
- Use the Cookie settings link in the footer of every page, or the button below.
- Clear your browser’s site data for this domain, which discards the stored choice and makes the banner appear again on your next visit.
- Block third-party and cookies entirely in your browser settings. The site still works; you will simply be asked again each visit.
Withdrawing consent is as easy as giving it, and refusing retrospectively has the same effect as having refused at the outset. Where a personalisation setting exists in your browser, clearing it also clears the choice recorded here.
Global Privacy Control and Do Not Track
If your browser sends a Global Privacy Control or Do Not Track signal, this site treats it as an instruction: non-essential cookies start switched off, and the banner explains that this is why. It is treated as a default rather than a lock, so you can still turn analytics on deliberately if that is what you want.
Global Privacy Control is a legally recognised opt-out signal in several US states including California. Honouring it is treated as a minimum obligation, not as consent to anything — signalling it never switches non-essential cookies on.
How long a choice lasts
Your stored preference is kept in your browser’s localStorage until you clear it. It never expires on its own and is not transferred between browsers or devices, so a new device or a private window is treated as a new visitor and will ask again.
Where analytics is allowed, the underlying Google data is retained by Google for up to 14 months at user level and 25 months at event level before aggregation. The consent record itself contains only your choices, a version number and the date you saved them.
Changes to this policy
If a new cookie, provider or purpose is introduced, the table in section 3 is updated and new categories are added to the banner as “off” requiring fresh consent. Adding a non-essential cookie is never bundled into an existing consent you already gave.
| Date | Change |
|---|---|
| 27 September 2026 | First published version. |
Questions
If anything here is unclear, email joseph.gitau.c@gmail.com or call +254 755 917 099. If you want to know exactly which cookies a given page sets, that can be checked and reported on request — a site this size has a short enough list to answer precisely.