Cookie Policy

1. Who we are

Brandguide IO is an online brand guideline and asset portal operated by Cchora Studio in Nairobi, Kenya. This policy explains cookies, local storage and similar browser technologies used on brand-guide.io, including our public pages, account pages and brand portals.

A cookie is a small text value stored by your browser and sent with relevant website requests. Local storage keeps information in your browser until the site or you remove it. These technologies can support security and preferences as well as optional measurement; they are not all advertising tools.

2. Your choice

Optional Google Analytics is off by default. We do not load Google's analytics tag or send analytics page views or cookieless measurement pings before you accept analytics in the CookieYes banner. Continuing to browse, closing the banner or using a form does not mean you have accepted.

Reject all keeps Google Analytics off. You can still browse, create an account, log in, use your portal, contact us and manage your subscription. Essential security and service functions continue to work.

CookieYes remembers your choice in this browser according to the consent duration configured for this site. You may be asked again when it expires, when you clear cookies, or when updated consent is required. Your choice is not automatically shared with another browser or device.

3. Essential cookies

These support features you request and are separate from optional analytics. We do not use them for advertising or audience measurement.

These cookies contain random session tokens, not your password. Rejecting analytics does not remove them. Blocking them in your browser can prevent login or checkout from working.

4. Saved preferences

CookieYes uses the cookieyes-consent cookie to remember your consent preferences for the duration configured in CookieYes. The following first-party values use local storage rather than cookies. They remain on your device and are not used as Google Analytics identifiers.

If CookieYes cannot provide a valid analytics choice, analytics stays off. A browser that clears storage automatically may show the consent banner more often.

5. Analytics and measurement

After acceptance, we use Google Analytics 4 (measurement ID G-5RHDLXKB22) to understand visits, page usage and aggregate engagement so we can improve the service. The provider is Google. The tag can use a browser identifier, timestamps and technical information such as browser, device, language and screen characteristics. Network information is also processed when your browser communicates with Google.

Our page-view setup uses a fixed list of page paths and generic page titles. It removes URL query strings and fragments and sends an empty page referrer. We do not intentionally send names, email addresses, passwords, authentication or recovery codes, verification tokens, payment details, uploaded files, brand names or form messages to Analytics. We do not configure User-ID tracking, Google signals or advertising personalization in this integration.

We load the tag from www.googletagmanager.com and measurement is sent to Google Analytics collection endpoints. Using that script host does not mean we have installed a separate Google Tag Manager marketing container. No advertising pixels, remarketing tags or session-replay tools are added by this consent integration.

Read Google's Privacy Policy and how Google uses information from partner sites. Browser extensions and privacy settings may block measurement even if you accept.

6. Security and payments

Cloudflare Turnstile protects forms against bots and abuse. It may process browser, device and network signals to check whether a request is legitimate. It is a security service, not our optional audience analytics. A Turnstile token is used to verify a form submission. If Cloudflare pre-clearance or other challenge protections are enabled, Cloudflare may also use cookies such as cf_clearance; their presence and lifetime depend on the active Cloudflare configuration. See the Turnstile Privacy Addendum and Cloudflare cookie information.

Payments: when you choose to pay, the checkout provider shown in your payment flow (such as PayPal, or Paystack where available) may use its own cookies and fraud-prevention technologies on its checkout pages. We do not load a payment provider for analytics through this banner. Its checkout privacy choices are governed by its own policies: PayPal Privacy Statement and Paystack Privacy Policy.

Hosting, email and file storage: Hostinger, our email service and Cloudflare R2 support website delivery, transactional messages and asset storage. Requests needed to deliver the service can create operational or security records even when analytics is declined. Declining analytics does not disable necessary infrastructure logging or prevent delivery of requested files or messages.

7. Retention and sharing

Cookie expiry, the lifetime of a saved browser choice and retention of data already received by a provider are different. The table durations describe browser storage. Google Analytics data is retained according to the property's retention settings and Google's applicable policies; aggregated reports can have different retention from user-level or event-level records. We do not claim that withdrawing consent deletes historical reports automatically.

Google and other service providers may process information outside Kenya, depending on their infrastructure and contractual arrangements. Their policies explain their processing locations, safeguards and controls. We use this analytics integration for service measurement rather than selling personal information or targeting advertising.

Clearing analytics cookies does not delete your Brandguide IO account, subscription records or uploaded assets. Those records are managed separately through the account and service processes.

8. Changing your mind

Choose Cookie settings on any page, or use the button on this policy, then review or change your preferences in CookieYes. You can accept or reject optional analytics. Strictly necessary cookies remain active.

If you withdraw after analytics has loaded, we disable further Analytics collection, remove accessible first-party Google Analytics cookies and refresh the page to unload the tag. Save any unfinished form changes first. Other open pages on this origin are notified through browser storage events and apply the new choice. Previously sent data or requests already in transit cannot be recalled by this action.

Your choice applies to this browser and origin. It does not control cookies on Google, Cloudflare or payment providers' own websites, or on independently operated customer domains.

9. Browser controls

You can inspect or delete cookies and site data in your browser's privacy settings. Blocking all cookies or storage can affect authentication, checkout and preferences. Private browsing may discard your choice when you close the window. We do not treat a browser's silence or continued use as consent.

Our banner provides an explicit choice independent of browser Do Not Track settings. You can also review Google's Analytics opt-out browser add-on. This site does not require you to install an extension to decline analytics.

10. What this choice covers

This banner controls optional Google Analytics on brand-guide.io. It is not consent to receiving marketing emails, posting content, creating an account or paying for a subscription. Those actions have separate controls. Public search-engine discovery, sitemap submissions and indexing of public pages do not use this Analytics browser choice and do not grant access to private portals.

For brand portals viewed on another domain, that domain's operator is responsible for its disclosures and preferences. Our Google Analytics initializer runs only on brand-guide.io.

11. Updates

We will update this policy when the technologies or purposes change. The date above identifies this version. If we introduce a new optional tracking purpose or materially change the consent choices, we will request a new choice before enabling it. A previous acceptance is not blanket permission for unrelated future tracking.

12. Contact and rights

For questions about cookies or to request help with personal-data rights, contact Cchora Studio at hey@cchora.com or use our contact form. Do not include passwords, authentication codes or full payment details.

Depending on applicable law, you may have rights to information, access, correction, deletion, objection and withdrawal of consent. Withdrawing consent does not retrospectively undo processing that took place before withdrawal. In Kenya, you can contact the Office of the Data Protection Commissioner about data-protection concerns. This policy does not limit your statutory rights.