Cookie Policy
EMEHub keeps browser storage to the minimum the site needs to work. This policy lists every item we store, what it does and how long it lasts, the outside services the site loads, and how you stay in control.
The short version
- Five items, all essentialYour theme, your sign-in, a security flag, an unsent store application and your Returnly cart.
- No trackingNo advertising, analytics profiling or cross-site tracking - so no consent banner is needed.
- Two outside servicesMap tiles from OpenStreetMap and fonts from Google Fonts, which see your IP address.
- Yours to clearClear site data any time; you'll just be signed out.
This summary helps you find your way; the full text below is what applies.
On this page
01What cookies and browser storage are
In short: Small pieces of data a website keeps in your browser to work properly.
A cookie is a small text file a website saves in your browser and that is sent back to it with your requests. Local storage is similar, but stays on your device and isn't sent automatically. In this policy we call both "cookies".
Cookies can be strictly necessary (the site can't work without them), preference, analytics or advertising. EMEHub uses only strictly necessary ones.
02Everything we store
In short: Five items, each listed here with what it does and how long it lasts.
| Name | Type | What it does | How long | Category |
|---|---|---|---|---|
| theme | Cookie (first-party) | Remembers light or dark mode, so pages don't flash the wrong colours. | 1 year | Strictly necessary (a preference you set) |
| Sign-in tokens (access, refresh, expiry) | Local storage | Keep you signed in and refresh your session securely. Removed when you sign out. | Until you sign out or the session expires | Strictly necessary |
| must-change-password flag | Local storage | Makes a new staff account change its temporary password before going further. | Until the password is changed | Strictly necessary (security) |
| emehub-open-a-store-draft | Local storage | Saves a store application while you fill it in, so a dropped connection doesn't lose it. Never includes your password. | Until you send the application | Strictly necessary (requested by you) |
| returnly:cart:… | Local storage | Remembers what's in your Returnly cart. | Until you check out or empty it | Strictly necessary (requested by you) |
None of these is used to identify you across other websites, and none is shared with advertisers.
03What we don't use
In short: No advertising cookies, no analytics profiles, no cross-site tracking, no fingerprinting.
EMEHub does not use advertising cookies, third-party analytics that build a profile of you, social-media tracking pixels, or browser fingerprinting. Because everything we store is strictly necessary for a service you asked for, we don't show a cookie consent banner.
If we ever want to add a non-essential cookie, we will ask for your consent first - with a choice to refuse that is as easy as accepting - and update this policy before we do.
04Outside services the site loads
In short: Map tiles and fonts come from outside services, which receive your IP address like any website you visit.
To show some pages, your browser fetches files directly from:
| Service | Why | What they receive |
|---|---|---|
| OpenStreetMap tile servers | Map tiles for store locations and parcel routes. | Your IP address, browser details and which map area is shown. |
| Google Fonts | The typefaces the site uses. | Your IP address and browser details. |
These services don't set cookies for EMEHub, and their own privacy policies apply to what they receive. We don't send them any account data.
05Your choices and controls
In short: You can see and clear everything from your browser settings at any time.
You can view and delete cookies and site data in your browser's settings (usually under Privacy or Site settings → Cookies and site data), and block them for EMEHub if you wish.
Because everything we store is needed for the site to work, clearing or blocking it will sign you out, reset your theme, and forget any unsent store application or cart. Blocking it entirely stops sign-in from working.
Signing out removes your sign-in tokens from the device. On a shared or public device, always sign out when you're done.
06Security of what we store
In short: Sign-in tokens expire, are removed on sign-out, and never hold your password.
Sign-in tokens are short-lived and refreshed securely; they never contain your password, and the store application draft deliberately leaves the password out. Keep your device locked and your browser up to date, and sign out on devices other people use. Report anything suspicious to security@emehub.ug.
07Changes and more information
In short: We update this list whenever what we store changes.
We update this policy whenever what we store changes; the date at the top shows the latest version. For how we use personal data and the rights you have, see the Privacy Policy. Questions: privacy@emehub.ug.
Questions about this?
Write to privacy@emehub.ug, or our data protection officer at dpo@emehub.ug.
[EMEHub legal entity name] · [Registered office address], Kampala, Uganda