Cookie Policy
Last updated: August 2026
Your Cookie Preferences
You can review or change your cookie choices at any time.
1. What Are Cookies?
Cookies are small text files placed on your computer, smartphone, or tablet when you visit websites. They are widely used to make websites work properly, provide secure customer login, keep track of shopping cart items, and understand how visitors use the site.
At Kratom Kenya, we believe in complete transparency. We use cookies strictly for practical shopping functionality, account security, and optional site analytics.
2. Why Kratom Kenya Uses Cookies
- Shopping Cart Continuity: To remember your selected strains and quantities across pages, even if you are not logged in.
- Account Authentication: To securely identify your logged-in customer account and prevent session hijacking.
- Security & CSRF Protection: To protect forms and payment requests against Cross-Site Request Forgery attacks.
- Persistent Login (Remember Me): To securely remember your device if you choose "Remember me" on login using cryptographically rotated tokens.
- Consent Preferences: To record your cookie choices so we do not repeatedly prompt you.
- Performance Analytics: With your explicit consent, to measure website traffic and optimize navigation.
3. Cookies Used on Our Website
Below is an exact list of all cookies and session identifiers implemented on Kratom Kenya:
| Cookie Name | Category | Purpose | Duration | Type |
|---|---|---|---|---|
| kk_session | Strictly Necessary | Maintains your authenticated customer session and security tokens. Contains only a random server session ID. | 7 days | First-party (HttpOnly) |
| kk_cart_token | Strictly Necessary | Identifies your guest shopping cart so items remain saved when you browse strains. | 30 days | First-party (HttpOnly) |
| kk_remember | Strictly Necessary | Cryptographic persistent login token used only if you check "Remember me". Rotated on every use. | 30 days | First-party (HttpOnly) |
| kk_csrf | Strictly Necessary | Protects checkout and account forms from Cross-Site Request Forgery attacks. | Session | First-party (HttpOnly) |
| kk_cookie_consent | Strictly Necessary | Stores your cookie consent preferences so you are not prompted repeatedly. | 1 year | First-party |
| _ga, _ga_* | Analytics (Optional) | Google Analytics cookies used to understand page traffic, visitor counts, and site speed. Gated behind your consent. | Up to 2 years | Third-party (Google) |
4. Cookie Security & Sensitive Information
We follow strict security best practices. We never store sensitive personal or financial information inside browser cookies.
Specifically, our cookies do NOT store:
- Account passwords or password hashes
- Email verification OTP codes
- Payment card numbers or CVV codes
- M-Pesa PINs or transaction secrets
- Full customer identity records
All session cookies utilize the HttpOnly attribute (preventing client-side JavaScript access) and Secure attribute (ensuring transmission over HTTPS).
5. How to Manage or Disable Cookies
You have full control over your cookie settings:
Via our Cookie Preferences Centre
Click the "Manage Cookie Settings" button on this page or the "Cookie Settings" link in the footer anytime to toggle optional analytics cookies on or off.
Via your Web Browser
You can configure your browser to block or delete cookies. Note that disabling Strictly Necessary cookies will prevent shopping cart persistence and login functionality.
6. Questions & Contact
If you have any questions regarding our cookie practices or your data privacy, please reach out to our team:
Email: info@kratomkenya.com
WhatsApp: +254 722 606 896