imani
Legal
Cookie Policy
This policy explains which cookies and similar technologies Imani uses on this website and in the wallet at app.imani.casa, what each one is for, and how you can control them.
The short version, which is not the legal one. This website sets no cookies. The wallet sets one cookie, only for shops that sign in, and only to keep that sign-in working. Everything else the wallet keeps is stored on your own device so that your account and your vouchers work. We use no advertising cookies, no tracking cookies and no third-party analytics. No other company sets cookies through Imani; the map showing where a shop trades sets none, as described in section 5.
1. What cookies and device storage are
A cookie is a small text file a website asks your browser to keep and send back on later visits. Browsers also offer other ways for a site to keep data on your device, such as local storage, session storage and IndexedDB. The law treats all of these alike: storing information on your device, or reading it back, needs your consent unless it is strictly necessary to provide a service you have asked for.
This policy covers both cookies and those other kinds of storage, and we use the word "cookies" loosely for all of them where the difference does not matter.
2. This website
www.imani.casa sets no cookies and stores nothing on your device. It has no analytics script, no advertising, no embedded social media and no third-party fonts. The film is served from our own server. The links to X and YouTube are plain links: nothing from those services loads until you click one, and once you do, their own cookie policies apply.
We count visits from our web server's own access log, as every web server keeps one. The report is built on our server, with IP addresses anonymised and crawlers left out. No cookie or other identifier is placed on your device to do this. See the Privacy Policy for how long logs are kept.
3. Cookies in the wallet
The wallet sets one cookie of its own.
| Name | What it does | Who it is set for | How long |
|---|---|---|---|
merchant_session |
Keeps a shop signed in to its account after it has proved it holds its key, so that it can issue and take vouchers without signing in for every action. It carries a random session token and nothing else. | Shops that sign in. Customers who only hold vouchers do not receive it. | One hour, renewed while the session is in use. Deleted when you sign out. |
This cookie is strictly necessary: without it a signed-in shop cannot use the service it
has asked for, so it does not need your consent. It is marked HttpOnly, so
scripts on the page cannot read it, Secure, so it is only sent over encrypted
connections, and SameSite=Lax, so other websites cannot use it to act on your
behalf. It is never used for analytics or advertising.
4. Storage on your device in the wallet
Imani has no central database of accounts and vouchers. Your account and what it holds live on your device, so the wallet needs to store them there. None of this is a tracking identifier, none of it is sent to us as a cookie would be, and all of it is strictly necessary for the wallet to work.
| What | Where | Why | How long |
|---|---|---|---|
| Your account key, encrypted with your passphrase | Local storage | So you stay the same account between visits. We never receive the passphrase and cannot decrypt the key. | Until you sign out or clear your browser's site data |
| Your vouchers, sales records and their sync state | IndexedDB and local storage | Vouchers are held by the device that owns them. A shop's records are rebuilt from its own key and kept here. | Until you sign out or clear site data |
| Your settings, notification preferences and profile | Local storage | To remember choices you have made in the wallet. | Until you change them or clear site data |
| Cached public profiles of shops you follow or have dealt with | IndexedDB | So names and pictures appear without fetching them again each time. | Refreshed as profiles change, removed when you clear site data |
| Work in progress, such as a payment being sent or an account being set up | Local and session storage | So an interrupted step can finish instead of being lost. | Until the step completes, or the tab closes for session storage |
| A push notification token, in the installed app only | Local storage | So we can tell your phone when a voucher arrives, if you turned notifications on. | Until you turn notifications off or remove the app |
The wallet also registers a service worker. Its only job is to show notifications you have switched on. It does not cache pages or track what you do.
Be careful clearing this data. Because your account lives on your device, clearing the wallet's site data without your backup key can lose the account and the vouchers in it, and we cannot recover either for you.
5. Third parties
When a shop has given its location, the wallet shows it on a map made from OpenStreetMap tiles. Your browser fetches the map images from the OpenStreetMap Foundation, which sees your IP address and sets no cookies. See the OpenStreetMap Foundation privacy policy.
Pictures that shops add to their public profiles may be loaded from a media host. These requests are made so the picture can be shown and are not used by us to track you.
We do not use any third-party cookies, and we do not allow advertisers or analytics providers to place cookies through Imani.
6. How to control cookies and storage
Every browser lets you see, block and delete cookies and site data, usually under its
privacy or site settings. Blocking the merchant_session cookie will stop a
shop from staying signed in. Blocking local storage or IndexedDB will stop the wallet from
working, because that is where your account lives. No third party sets cookies through the
wallet, so blocking third-party cookies does not affect it.
Your browser's help pages explain how: Chrome, Firefox, Safari, Edge.
7. Changes to this policy
If we add a cookie or change how one is used, we will update this page and the date and version at the top. We will not add a non-essential cookie without first asking for your consent.
8. Contact
This website and the wallet are operated by Imani App Ltd, registered in England and Wales under company number 17525772, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Questions about this policy go to hello@imani.casa. You can also complain to the Information Commissioner's Office at ico.org.uk.