AfricanComplex — Cookie Policy
Last Updated: July 23, 2026 Effective Date: July 23, 2026
THIS COOKIE POLICY explains how AfricanComplex Holdings LLC, an Indiana limited liability company, doing business as AfricanComplex and OrbitApex, uses cookies and similar tracking technologies on its website and admin dashboard at africancomplex.com. This Policy does not cover the Customer, Merchant, or Driver mobile applications, which do not use browser cookies and are addressed in Section 7 and in the Privacy Policy.
Effective Date: July 23, 2026
1. Who This Policy Covers
This Cookie Policy is issued by AfricanComplex Holdings LLC, an Indiana limited liability company located at 5702 Walkabout Way, Brownsburg, IN 46112 ("AfricanComplex," "we," "us," or "our"). AfricanComplex's initial launch is Indiana only; if it expands to additional states, it will review that state's cookie and privacy-notice requirements before launching there. This Policy applies only to africancomplex.com and the AfricanComplex admin dashboard.
2. What Cookies and Similar Technologies Are
A cookie is a small text file that a website places on your device to remember information about your visit — for example, to keep you signed in and to remember your preferences. This Policy also covers similar technologies with comparable functions:
- Pixels/web beacons: small transparent images embedded in a page that can confirm the page loaded. AfricanComplex does not currently use pixels or web beacons on africancomplex.com.
- Local storage and session storage: browser-based storage mechanisms similar to cookies but not automatically transmitted with every request; used on the admin dashboard for interface preferences.
Where this Policy refers to "cookies," it includes these similar technologies unless stated otherwise.
3. Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential for the website and admin dashboard to function. They cannot be disabled through our cookie settings because doing so would break core functionality; you may still block them through your own browser settings, subject to the consequences described in Section 6.2.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
__clerk_* (e.g., __clerk_db_jwt) |
Clerk | Authentication session management | Session / 7 days |
__session |
Clerk | Active session token (signed JWT verifying sign-in state) | 15 minutes |
__client_uat |
Clerk | Records when the Clerk client was last updated, so the browser can detect session changes | Session |
csrf_token |
AfricanComplex | Cross-site request forgery protection | Session |
3.2 Payment Processing Cookies
These cookies are required for secure payment processing and fraud prevention on transactions run through our payment processor, Stripe.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
__stripe_mid |
Stripe | Fraud prevention and payment processing (identifies a device across a session) | 1 year |
__stripe_sid |
Stripe | Fraud prevention (session identification) | 30 minutes |
3.3 Performance and Security Cookies
These cookies help protect the website and admin dashboard from abuse and help ensure they load reliably, through our content delivery and security provider, Cloudflare.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
__cf_bm |
Cloudflare | Bot management and security — distinguishes legitimate visitors from bots | 30 minutes |
cf_clearance |
Cloudflare | Records that a device has cleared a Cloudflare security challenge | Varies (typically up to 1 year) |
3.4 Analytics, Advertising, and Profiling Cookies
As of the Effective Date, AfricanComplex does not use any cookie for analytics, advertising, cross-site tracking, or profiling, and does not sell or share personal data collected through cookies with third parties for advertising purposes. If AfricanComplex adds any such cookie, this Policy will be updated first — including this Section 3.4 and Section 5.3 — and, where required by law, a cookie-consent or opt-out mechanism will be implemented before that cookie is set.
4. Third-Party Service Providers
The following third-party service providers may set their own cookies on your device when you interact with the corresponding functionality on our site. We do not control third-party cookies; please refer to each provider's own cookie or privacy policy for details on what it collects and how to opt out where applicable.
| Service | Purpose | Provider's Cookie/Privacy Policy |
|---|---|---|
| Clerk | Authentication and session management | clerk.com/legal/cookie-policy |
| Stripe | Payment processing and fraud prevention | stripe.com/cookie-settings |
| Cloudflare | Content delivery network (CDN) and security | cloudflare.com/cookie-policy |
| Firebase (Google) | Push notification setup (mobile apps only — see Section 7) | firebase.google.com/support/privacy |
5. Cookie Consent and Applicable Law
5.1 Strictly Necessary Cookies Do Not Require Consent
Strictly necessary cookies (authentication, security, and payment processing) do not require consent, because they are essential for the website and admin dashboard to function and fall within the recognized exemption for cookies necessary to provide a service the user has requested — including the EU/UK ePrivacy framework's Article 5(3) exemption, which is not applicable to this Indiana-only, U.S. launch but is relevant if AfricanComplex later serves EU/UK users.
5.2 Non-Essential Cookies
If AfricanComplex introduces a non-essential cookie (analytics, marketing, or advertising), it will implement a cookie-consent mechanism that allows you to accept or decline those cookies before they are set, and will update this Policy, including Sections 3.4 and 5.3, before that mechanism or those cookies go live.
5.3 Current Status
As of the Effective Date, all cookies used on africancomplex.com are strictly necessary for authentication, security, and payment processing, as listed in Section 3. No analytics or marketing cookies are currently in use.
5.4 Legal Basis by Jurisdiction
Because AfricanComplex's initial launch is Indiana-only, the primary legal frameworks relevant to this Policy are:
- Indiana Consumer Data Protection Act (ICDPA), Ind. Code Art. 24-15. — effective January 1, 2026. The ICDPA applies to a person conducting business in Indiana, or producing products or services targeted to Indiana residents, that during a calendar year either (a) controls or processes the personal data of at least 100,000 Indiana consumers, or (b) controls or processes the personal data of at least 25,000 Indiana consumers and derives more than 50% of gross revenue from the sale of personal data. At AfricanComplex's initial Indiana-only launch scale, AfricanComplex does not expect to meet either threshold, and this Policy is drafted on that basis; AfricanComplex should reassess ICDPA applicability as its Indiana user base grows. If the ICDPA becomes applicable, it does not itself mandate a cookie-consent banner — it follows an opt-out model for targeted advertising, the sale of personal data, and certain profiling, and requires opt-in consent only for processing "sensitive data," a category the cookies in Section 3 do not implicate. The ICDPA is enforced exclusively by the Indiana Attorney General, provides a 30-day cure period before an enforcement action may proceed (Ind. Code § 24-15-10-3), and does not create a private right of action.
- California Consumer Privacy Act, as amended by the CPRA — applies only to entities that meet the CCPA/CPRA's own revenue or data-volume thresholds and that collect personal information from California residents. AfricanComplex's Indiana-only launch means the CCPA/CPRA is not expected to apply at launch; this should be reassessed if AfricanComplex expands to California or otherwise collects personal information from California residents.
This Section 5.4 is a summary for drafting purposes and is not a substitute for a jurisdiction-by-jurisdiction legal analysis at the time of each new state launch.
6. Managing Cookies
6.1 Browser Settings
You can control cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Safari: Preferences → Privacy
- Firefox: Options → Privacy & Security → Cookies
- Edge: Settings → Cookies and Site Permissions
6.2 Impact of Disabling Cookies
If you disable the strictly necessary cookies described in Section 3.1 through 3.3:
- You will not be able to log in to the admin dashboard.
- Payment processing may not function.
- Security features, including bot and fraud protection, may be impaired.
7. Mobile Applications
Our mobile applications (Customer, Merchant, and Driver) do not use browser cookies. Instead, they use:
- Secure device storage for authentication tokens, managed by the Clerk Expo SDK;
- Firebase Cloud Messaging (FCM) device tokens for push notification delivery; and
- Local device storage for app preferences and cached data.
These technologies are covered in our Privacy Policy, not this Cookie Policy.
8. Changes to This Policy
AfricanComplex may update this Cookie Policy when it adds new services or tracking technologies, or when applicable law changes. Changes will be posted on this page with an updated "Effective Date." Material changes — including the introduction of analytics, marketing, or advertising cookies — will not take effect until the consent or opt-out mechanism required by Section 5.2 or 5.4, as applicable, is in place.
9. Contact
For questions about this Cookie Policy, contact:
AfricanComplex Holdings LLC 5702 Walkabout Way, Brownsburg, IN 46112 [email protected] · +1 317-389-1333