Cookies Policy

Last updated: 6 October 2026

1. What this covers

This page lists every cookie and similar storage technology this website uses, what each one is for, and how long it lasts. It covers nairohost.site. The client area at clients.hostingke.co.ke runs on WHMCS and sets its own session cookies once you sign in.

2. Your choice

Cookies that are strictly necessary to serve the site are always on — without them pages cannot be delivered securely and forms cannot be submitted. Everything else is off until you turn it on. Analytics does not run, and no analytics cookie is written, unless you accept it on the banner.

You can change your mind at any time: . Clearing your browser's site data for this domain also resets the choice, and the banner will ask again.

3. Strictly necessary

These are set by us and cannot be switched off.

Strictly necessary cookies
NameSet byPurposeExpires
nairohost_session nairohost.site Keeps your session between page loads so a form you submit is recognised as yours. 2 hours
XSRF-TOKEN nairohost.site Cross-site request forgery protection on every form on the site. 2 hours
nh-consent nairohost.site Browser storage, not a cookie. Records the choice you made on the cookie banner so you are not asked again. Until you clear site data
nhOfferSeen nairohost.site Browser storage, not a cookie. Records that you have already been shown the free-website offer, so it appears once per visit. End of the browser session

4. Analytics — only with your consent

We use Google Analytics 4 to count page views and see which pages people read. We do not use it for advertising, and IP addresses are anonymised. Nothing here loads until you accept.

Analytics cookies
NameSet byPurposeExpires
_ga Google Analytics Distinguishes one browser from another so repeat visits are not counted as new people. 2 years
_ga_<container> Google Analytics Holds the state of the current analytics session. 2 years

5. Third parties we share data with

Loading a page can involve these third parties. Each receives your IP address and browser details as a normal part of serving a request.

Third-party processors
ProcessorWhat it doesRuns
Google Analytics 4 (Google Ireland Ltd) Page-view and traffic-source measurement. Only after you accept analytics cookies
Google Tag Manager (Google Ireland Ltd) Loads the analytics tag. Configured but only active when a container ID is set. Only after you accept analytics cookies
Google Fonts (Google Ireland Ltd) Serves the Inter and Poppins typefaces the site is set in. Sets no cookie. Always
WHMCS client area Accounts, ordering, invoices and support tickets. Sets its own session cookie once you sign in there. When you follow a link into the client area
Safaricom M-Pesa Processes M-Pesa payments. Receives the phone number and amount for a payment you initiate. When you pay by M-Pesa
WhatsApp (Meta) The chat button is an ordinary link. Nothing loads from WhatsApp until you click it and open the conversation yourself. Only if you click it
Needs owner review: the retention periods above are the documented defaults for Laravel sessions and Google Analytics. Confirm them against your production configuration, and add any cookie set by a tag deployed through Google Tag Manager — those are not visible from this codebase.

6. Turning cookies off in your browser

Every major browser lets you block or delete cookies in its settings. Blocking strictly necessary cookies will stop forms and sign-in from working. Blocking analytics cookies has no effect on the site.

7. Changes to this policy

If we add or remove a script, we update this page and the date at the top. A change to what runs without consent will re-open the banner so you can make the choice again.

8. Contact

Questions about cookies or anything else on this page: privacy@nairohost.site, or +254 796 358 081. See also our privacy policy.