Legal

Cookie Policy

Sheba Credit sets no cookies. This policy lists everything the website stores on your device, explains why each item is there, and shows you how to switch off anything that is not essential — under the Personal Data Protection Proclamation No. 1321/2024, pending NBE licensing.

Last Updated: July 2026
Section 01

What This Policy Covers

This policy explains what Sheba Credit stores on your device when you use shebacredit.com, why we store it, and how you control it. It sits alongside our Privacy Policy, which covers the personal data we hold about you on our systems.

We have written this policy to describe what the website actually does, rather than what a website of this kind usually does. Where the answer is "nothing", we say so.

Regulatory framework: Storage on a user's own device is personal data handling under the Personal Data Protection Proclamation No. 1321/2024. We treat local storage exactly as we would treat a cookie, and ask for consent on the same basis.
Section 02

We Do Not Use Cookies

Sheba Credit sets no cookies. There is no advertising cookie, no tracking pixel, no third-party marketing tag and no cross-site identifier anywhere on this website. If you inspect your browser's cookie store after visiting shebacredit.com, you should find nothing from us.

What we do use is local storage and session storage — two browser features that let a site keep small pieces of information on your own device. They differ from cookies in one important way: they are never transmitted to our servers automatically. The data stays on your device until it is used by the page you are looking at, or until it is deleted.

We nonetheless ask for your consent, because from your point of view the question is the same one: what is this website keeping on my computer or phone, and can I say no?

Section 03

What We Store On Your Device

This is the complete list. Nothing is stored that does not appear here.

NameCategoryWhat it is forKept until
Supabase session tokenEssentialKeeps you signed in as you move between pages, so you are not asked for your password on every screen.You sign out or the session expires
post_login_redirectEssentialRemembers the page you asked for before signing in, so you are returned to it afterwards.The browser tab closes
fayda_state, fayda_verifierEssentialSingle-use security values that protect the identity verification flow from interception. Without these the verification cannot be trusted.Verification completes
fayda_onboardingEssentialKeeps your place in the account-opening flow if the page reloads.Onboarding completes
sheba_langEssentialRemembers whether you chose English or አማርኛ.You clear it
sheba_consentEssentialRecords the choice you made on this page, so we do not ask again on every visit.You withdraw or clear it
sheba_privacy_revoked, sheba_privacy_disconnectedEssentialRecords that you withdrew a data-sharing consent or disconnected a data source. Kept so the withdrawal is not lost.You clear it
sheba_last_scoreFunctionalYour most recent score, held locally so the dashboard shows something immediately instead of a blank screen while it loads.You turn Functional off
sheba_sim_goalFunctionalA savings goal you set in the planner.You turn Functional off
sheba_bill_reminds, sheba_bill_paidFunctionalBill reminders you created and which ones you marked as paid.You turn Functional off
sheba_usage_alerts, sheba_alert_prefsFunctionalWhich alerts you asked to see and how you want them shown.You turn Functional off
sheba_portal_checklistFunctionalProgress through the institution portal setup checklist.You turn Functional off
sheba_eduFunctionalWhich explainer articles you have already read, so they are not shown again.You turn Functional off

None of this is shared with anyone. It is not sold, not transferred to an advertising network, and not used to build a profile of you across other websites.

Section 04

Categories & Your Choices

Essential. These cannot be turned off, because without them the website cannot do the thing you asked it to do. You cannot stay signed in without a session token, and identity verification cannot be made secure without single-use security values. If you do not want these stored, the only option is not to sign in.

Functional. Off until you switch it on. These make the product more convenient — your goals, your reminders, a score that appears instantly. Everything here still works with Functional turned off; it is simply slower and forgets your preferences between visits. Turning Functional off deletes anything already stored in this category.

Analytics. Off until you switch it on, and nothing is installed today. See Section 5.

You can accept everything, accept only what is essential, or choose category by category. Refusing is as easy as accepting — there is no penalty, no reduced functionality beyond what is described above, and we will not ask again on every page.

Section 05

Analytics

Sheba Credit currently runs no analytics of any kind. There is no Google Analytics, no tag manager, no heatmap tool, no session recorder and no product-analytics SDK on this website. We cannot see which pages you visited, how long you stayed, or where you moved your mouse.

The Analytics switch exists so that the choice is already yours if that ever changes. If we do introduce analytics, it will be a privacy-respecting tool that does not track you across other websites, it will run only for people who have switched this on, and this policy will be updated before it is enabled.

Section 06

Third Parties & Your IP Address

Even with no cookies and no analytics, loading a web page necessarily reveals your IP address to whoever serves it. We would rather tell you who that is than leave it unsaid.

  • Netlify — hosts this website. Receives your IP address and browser type in order to serve the page. Servers are outside Ethiopia.
  • Supabase — provides our database and sign-in service. Receives your IP address when you sign in or use the dashboard. Servers are currently in the United States; in-country hosting is a commitment we have made to the regulator before real credit data is processed at scale.
  • Google Fonts and Fontshare — serve the typefaces this site uses. Your browser requests the font files directly from them, which reveals your IP address to those services. They set no cookies on our behalf.

These transfers are covered in Section 12 of our Privacy Policy. None of them involves us sending your personal data to those parties — it is the unavoidable consequence of your browser fetching a file from a server.

Section 07

Changing or Withdrawing Your Choice

Your choice is not permanent. You can change it at any time, and withdrawing is as straightforward as giving it.

Open storage preferences

The same link appears in the footer of every page on this website. Turning off a category deletes what was stored under it immediately — we do not keep a copy.

Section 08

Browser Controls

Independently of the controls we provide, every major browser lets you clear or block site storage. Look for "Cookies and site data", "Clear browsing data", or the padlock icon in the address bar and choose the option to clear data for this site.

Clearing site data will sign you out and remove your language and consent choices, so you will be asked again on your next visit. It will not affect the data held about you on our systems — for that, see Your Rights in Section 8 of the Privacy Policy.

Section 09

Changes to This Policy

If we add anything that stores data on your device, this policy is updated before that change goes live, and the consent banner is shown again so that your previous choice is not treated as covering something you never agreed to.

The date of the most recent revision is shown at the top of this page.

Section 10

Contact Us

If anything in this policy is unclear, or you believe the website is storing something not described here, please tell us — we would treat that as a defect.

Send us a message

We aim to respond within 7 working days.