Compliance & Transparency

Cookies Policy

Last Updated: October 2026 · Applicable to all Lakwaye B2B platforms and services
Notice: By browsing, creating an account, or interacting with Lakwaye B2B, you consent to the use of cookies in accordance with this policy. We prioritize strict security measures, including HttpOnly, SameSite=Lax, and Secure flags to guard your session tokens.

1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile smartphone) when you visit web pages. They enable the platform to remember your authentication state, device preferences, cart selections, and ensure safe navigation across sessions without repeatedly requiring re-authentication.

2. Categories of Cookies We Use

Lakwaye B2B operates cookies under four functional classifications:

A. Strictly Necessary & Security Cookies (Essential)

These cookies are vital for core platform operation and security defense. Without them, authenticated services, shopping carts, and anti-fraud mechanisms cannot function.

  • Session Authenticator (PHPSESSID): Maintains your secure logged-in state across pages. It is destroyed when you log out or your session expires.
  • CSRF Token (csrf_token): Cryptographically random tokens generated to protect your forms against Cross-Site Request Forgery attacks.
  • Brute Force & Rate-Limiting Guards: Track rapid suspicious requests to protect merchant and buyer accounts from unauthorized credential stuffing.

B. Preference & Functional Cookies

These cookies remember your selected preferences, such as language selection (English), preferred Nigerian state/city filters for localized listings, and saved cart items.

C. Performance & Analytical Cookies

We use aggregated, anonymized telemetry to understand which product categories and features are most popular. This data allows us to optimize load times, streamline checkout steps, and fix broken links.

D. Third-Party & Payment Gateway Cookies

When executing escrow deposits or order payments, trusted partner payment gateways (such as PayVessel) set temporary security tokens to verify payment integrity and prevent payment tampering.

3. Security Standards for Cookies on Lakwaye B2B

To defend our merchants and buyers against session hijacking, Cross-Site Scripting (XSS), and data leakage, all session and sensitive cookies on Lakwaye B2B implement:

  • HttpOnly: Blocks client-side JavaScript access to the cookie, neutralizing XSS credential theft.
  • Secure: Ensures cookies are only transmitted over authenticated, encrypted TLS (HTTPS) connections.
  • SameSite=Lax/Strict: Prevents your browser from sending cookies on cross-origin requests, thwarting CSRF attacks.

4. How to Manage or Disable Cookies

Most modern browsers allow you to control cookie permissions through their settings. You can delete existing cookies, block third-party cookies, or configure alerts before a cookie is stored:

  • Google Chrome: Settings → Privacy and security → Cookies and other site data.
  • Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
  • Safari: Preferences → Privacy → Manage Website Data.
  • Microsoft Edge: Settings → Cookies and site permissions.

Note: Disabling strictly necessary cookies will prevent you from logging into your buyer or seller account and completing transactions.

5. Updates to this Policy

We may periodically update this Cookies Policy to reflect regulatory changes or new security features. Any revisions will be published on this page with an updated timestamp.

6. Contact Our Security & Privacy Team

If you have questions regarding our cookie security practices, please reach out via our Contact Us page or email privacy@lakwaye.com.