Legal

Cookie Policy

Effective: 15 May 2026  ·  Version 1.0

The handful of cookies Sanya uses, what each one does, and how to control them.

1. The short version

Sanya uses only essential cookies needed to sign you in and keep your session secure. No advertising trackers. No third-party analytics on customer-facing pages.

2. What is a cookie?

A cookie is a small text file your browser stores on your device when you visit a website. The next time you return, your browser sends the cookie back to the site — that's how the site recognises you across pages, keeps you signed in, and remembers your preferences.

3. Cookies we use

Name Purpose Type Lifetime
PHPSESSID Maintains your sign-in session. Without it you'd be logged out every page load. Essential Session (deleted on browser close, or 8 hours of inactivity)
sanya_2fa_pending Holds 2FA state between password entry and code verification. Essential 10 minutes
sanya_remember_* When you tick "Remember me" — re-signs you in across browser restarts. Functional (opt-in) 30 days
sanya_cookie_ack Remembers that you've seen and acknowledged this cookie notice — so we don't show the banner again. Essential 12 months

4. What we don't use

  • ❌ No Google Analytics, Mixpanel, Hotjar, or other third-party trackers on customer-facing pages.
  • ❌ No advertising cookies (Facebook Pixel, Google Ads, TikTok Pixel, etc.).
  • ❌ No cross-site tracking.
  • ❌ No data sold to brokers or aggregators.

5. Cookies set by our payment provider

When you click through to pay at my.sanya.tz/pay.php, our online payment partner may set cookies on their own hosted checkout page (a separate domain). Those cookies are governed by the payment partner's own privacy policy, not ours, and are necessary for the payment to complete. The current payment partner is identified in our Data Protection page.

6. Managing cookies

You can clear or block cookies via your browser settings. Note that:

  • If you block PHPSESSID, you cannot sign in to Sanya at all.
  • If you block sanya_2fa_pending, two-factor authentication will fail.
  • If you clear sanya_cookie_ack, you'll see the cookie banner again on your next visit.

Browser instructions:

7. Do Not Track

We honour browser-level "Do Not Track" signals on marketing pages by not loading any optional cookies. Essential cookies still load — they're required for the service to function at all.

8. Changes

If we ever add new cookies — for instance, a privacy-friendly aggregate analytics tool — we will update this page and re-display the cookie notice so you can review the new cookies before they're set.

Questions?

Email support@sanya.tz or write to Netpoa Limited, Kijitonyama, Dar es Salaam, Tanzania.

For data-protection requests specifically, contact our DPO at dpo@sanya.tz.