Cookie policy

Last updated: 6 September 2026

This policy explains which cookies and similar technologies (local storage, session storage) SilverLock SARL uses on the AfriPhish website (afriphish.com and its sub-domains) and in the AfriPhish application (app.afriphish.com), why, and how you control them. It complements our privacy notice.

Your choice, in one place

Analytics cookies are off until you accept them. The first time you visit, a banner offers two equal choices: Accept analytics cookies or Reject non-essential cookies. Either answer is remembered for 180 days, and neither one re-prompts you. You can change your mind at any time:

(The button above appears only on the live site, where analytics is configured.) We also honour the Global Privacy Control signal: if your browser sends it, we treat it as a rejection and do not show the banner.

1. Strictly necessary — always on

These are needed for the site or application to work and to remember the choices you make. They are set by us, never shared, and need no consent.

NameWhereTypePurposeLifetime
afriphish-cookie-consentafriphish.com and sub-domainsCookieRemembers whether you accepted or rejected analytics180 days
afriphish-themeafriphish.comLocal storageRemembers light or dark themeUntil cleared
africyber-uiapp.afriphish.comLocal storageRemembers language, theme and sidebar layout in the applicationUntil cleared
africyber-authapp.afriphish.comSession storageHolds your signed-in session in the applicationUntil the tab or browser closes
afriphish_refresh (HttpOnly)app.afriphish.com APICookieRenews your application session securelySession, rotated on use
__session, __client_uat, __clerk_db_jwtapp.afriphish.comCookieSet by our sign-in provider Clerk to keep you signed inUp to 7 days

2. Analytics — only with your consent

We use two analytics services to understand which pages are read and where visitors get stuck, so that we can improve the site. Neither loads until you accept. They run only on our public marketing pages, never inside the application.

Google Analytics 4 (Google Ireland Limited). Consent-mode configured for analytics only: advertising storage, ad user data and ad personalisation are always denied. IP addresses are not logged or stored by GA4.

NamePurposeLifetime
_gaDistinguishes visitors2 years
_ga_<id>Keeps the current session state2 years

Microsoft Clarity (Microsoft Ireland Operations Ltd). Records anonymised heat-maps and session replays; form fields and text inputs are masked by default.

NamePurposeLifetime
_clckPersists the Clarity user id and preferences1 year
_clskConnects page views into a single session1 day
CLIDIdentifies the first time Clarity saw this browser1 year
ANONCHK, MR, MUID, SMSet by Microsoft to detect bots and, where applicable, honour prior opt-outs10 minutes to 1 year

Both providers may transfer data outside Morocco and the European Economic Area, to the United States. Google and Microsoft each rely on the EU–US Data Privacy Framework and Standard Contractual Clauses for those transfers.

3. What we do not use

  • No advertising, retargeting or social-media tracking cookies.
  • No third-party embeds (video players, maps, chat widgets) that set cookies on this site. Web fonts are served from our own domain, not from Google.
  • The free tools on this site (the Human Risk Maturity Assessment and the domain spoofing checker) call our own servers through this site's domain and set no additional cookies. What those tools store is explained in the privacy notice.

4. Controlling cookies in your browser

You can delete or block cookies in your browser settings; blocking strictly necessary storage will stop the site from remembering your theme, language or consent choice, and will sign you out of the application. Instructions: Chrome, Firefox, Safari, Edge.

5. Contact

Questions about cookies or this policy: privacy@afriphish.com, or by post to SilverLock SARL, Bluzelle Centre, 56 rue Brahim Roudani, Imm. 56, Appt. N°2, Océan, 10040 Rabat, Morocco.