1. What Are Cookies
Cookies are small text files stored on your device when you visit a website or use a web-based application. Fyatu uses cookies on two distinct surfaces: the public marketing website (https://fyatu.com) and the authenticated business dashboard. The cookies used on each surface differ in purpose and scope.
API integrations do not use cookies. All calls to the Fyatu REST API are authenticated via API keys and bearer tokens only. No cookie-based session management applies to API access.
2. Cookies We Use
Essential Cookies
These cookies are strictly necessary for the website and dashboard to function. They cannot be disabled without breaking core functionality.
| Cookie | Surface | Purpose | Duration |
|---|---|---|---|
| Session ID | Dashboard | Maintains your authenticated business session | Session |
| CSRF token | Dashboard | Protects against cross-site request forgery | Session |
| Cookie consent | Website | Remembers your cookie preferences | 1 year |
| Language preference | Website & Dashboard | Stores your selected language (EN/FR) | 1 year |
Analytics Cookies
We use analytics cookies on the public website to understand how visitors interact with our content. These cookies collect anonymised data about page visits, traffic sources, and navigation paths to help us improve the site.
| Service | Purpose | Duration |
|---|---|---|
| Google Analytics (GA4) | Website traffic analysis and page performance | Up to 2 years |
Analytics cookies are used on the public website only. They are not used inside the authenticated dashboard.
Functional Cookies
These cookies remember settings and preferences — such as language selection and display options — to provide a consistent experience across sessions.
Marketing Cookies
We may use marketing cookies on the public website to measure the effectiveness of our campaigns. These cookies are limited to the public website and are never set inside the authenticated dashboard or on any surface where business or cardholder data is accessible.
3. Third-Party Services
The following third-party services may set cookies on your device when you use our public website:
- Google Analytics (GA4) — Collects anonymised usage data to help us understand traffic and improve the site. Governed by Google’s Privacy Policy.
No third-party marketing or tracking cookies are loaded inside the authenticated dashboard.
4. Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to:
- View and delete existing cookies
- Block all cookies or only third-party cookies
- Set preferences per website
- Receive notifications when cookies are set
Managing cookies by browser:
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Cookies and site permissions
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Blocking essential cookies will affect the functionality of the website and dashboard. Blocking analytics or marketing cookies will not affect access to the platform or your card programme.
5. Your Consent
When you first visit our website, a cookie consent banner is displayed. You can choose to accept or decline non-essential cookies. Your preference is stored and respected on future visits.
To change your preferences, clear your browser cookies and revisit the site to trigger the consent banner again.
Consent to non-essential cookies on the public website has no effect on essential cookies in the authenticated dashboard, which are always active for security and session management purposes.
6. Updates
We may update this Cookie Policy to reflect changes in our practices or the services we use. Changes will be posted on this page with an updated date. Material changes will be communicated via the cookie consent banner on the website and, for authenticated business users, via your dedicated Slack channel or email.
7. Contact
For questions about our use of cookies:
- Privacy inquiries: [email protected]
- General support: [email protected]