Effective 15 September 2026
1. The public website
The public site uses first-party, privacy-limited service analytics. It does not use advertising cookies, third-party marketing pixels or cross-site advertising profiles. Analytics records page and JengaFlow call-to-action visits, device class and referring host; it does not send the full referring URL, a name, email address or raw IP address.
When you choose light or dark mode, the site stores jengaflow-theme. A random jf-public-visitor value distinguishes repeat browsers. After a successful JengaFlow sign-in, jf_account_holder lets the public site classify that browser as a known account browser without exposing which account it belongs to.
| Storage | Purpose | Duration |
|---|---|---|
jengaflow-theme | Remember light or dark appearance | Until you clear browser storage |
jf-public-visitor | Count public-site visitors without an account identity | Until you clear browser storage |
jf_account_holder | Classify visits from a browser previously used to sign in | Up to one year |
You can remove these values using browser controls. The account marker means only “known account browser”; a person may use another browser or clear storage, so other visits remain classified as anonymous.
2. The authenticated application
The application at app.jengaflow.co.ke may use strictly necessary cookies or browser storage to authenticate a session, protect requests, remember user preferences and maintain service security. These functions are required for a signed-in workspace to operate.
Authentication information must not be used for advertising. Signing out and clearing site data will remove applicable local session information, although server-side security and audit records may remain for their defined retention period.
3. Your controls
You can switch the public site theme at any time using the sun or moon button. Browser settings can inspect, block or remove cookies and local storage. Blocking strictly necessary application storage may prevent sign-in or other authenticated functions from working.
4. Changes and contact
This inventory will be reviewed when website, analytics, authentication or embedded-provider behavior changes.