Cookie Policy

Cookies are compact data files placed on your browser or device when you access web services. They enable the platform to recognise your device, maintain security, and remember preferences across page transitions. Local storage is an industry standard browser technology that stores structured application data directly on your device without transmitting it in network request headers. TuDu uses local storage for high performance interface features like shopping cart persistence and offline resilience. References to cookies throughout this policy include local storage, session storage, and related browser identifiers where applicable.

TuDu Uganda Limited uses cookies and local storage to operate the marketplace, secure payment and escrow handshakes, preserve shopping baskets, and, where you provide affirmative consent, measure platform performance. Essential cookies and storage items are strictly necessary for core platform services. They enable user authentication, cross site request forgery prevention, shopping basket persistence, and checkout escrow locking. Essential cookies operate without prior consent because the service cannot function without them. Analytics storage helps our engineering team understand search latency, popular categories, and checkout friction points. This telemetry uses privacy safe aggregation and is activated only after you grant analytics consent. Marketing cookies attribute buyer sign ups and completed orders to accredited affiliate partners or promotional referral codes. These identifiers are set solely upon your explicit consent.

TuDu limits external services to essential payment, delivery, and analytics infrastructure partners. Payment channels including MTN Mobile Money, Airtel Money, and card processing through Flutterwave manage their own secure transaction processing environments. For product telemetry, TuDu utilizes PostHog configured to respect Do Not Track signals and strict privacy safeguards. TuDu does not permit third party advertising networks, behavioral tracking brokers, or social media tracking pixels on the platform.

You maintain complete control over cookies and browser storage. Modern web browsers allow you to inspect stored cookies, delete specific identifiers, or block cookies entirely through browser settings. Disabling essential storage will degrade platform functionality. For example, blocking essential cookies will prevent account login, cart persistence, and checkout completion. You can modify your consent preferences at any time by clicking Cookie Settings in the TuDu website footer or visiting the dedicated cookie preferences center.

When you first visit TuDu, an interactive consent banner requests your permissions for non essential storage categories. Essential cookies are deployed automatically under Section 7 of the Uganda Data Protection and Privacy Act 2019 and Regulation 12 of the Data Protection and Privacy Regulations 2021 to perform our contractual service obligations. For cross border buyers accessing TuDu from the European Union or the United Kingdom, non essential cookies are deployed in strict compliance with Article 6 of the General Data Protection Regulation and Section 25 of the German Telecommunications Telemedia Data Protection Act.

Session cookies expire and are deleted when you terminate your browser session. Persistent cookies and local storage entries remain active for predetermined durations specified in our technical registry below, or until you clear your browser cache. TuDu does not retain technical identifier data beyond the periods required to fulfill the operational purposes stated in this policy.

The complete registry of technical identifiers utilized on TuDu is maintained below. Every identifier is categorized by machine key, storage medium, category, duration, and provider: 1. tudu_session_secret: HTTP Cookie. Essential category. Session authentication token. Duration 7 days. Provider TuDu Uganda Limited. 2. tudu_csrf: HTTP Cookie. Essential category. Cross site request forgery prevention. Duration Session. Provider TuDu Uganda Limited. 3. tudu_oauth_state: HTTP Cookie. Essential category. Google OAuth handshake verification. Duration 10 minutes. Provider TuDu Uganda Limited. 4. tudu_cookie_consent: Local Storage. Essential category. User cookie preferences record. Duration Persistent. Provider TuDu Uganda Limited. 5. tudu-cart: Local Storage. Essential category. Shopping basket items and quantities. Duration Persistent. Provider TuDu Uganda Limited. 6. tudu_delivery_district: Local Storage. Essential category. Buyer district preference for upfront delivery pricing. Duration Persistent. Provider TuDu Uganda Limited. 7. tudu_admin_portal: HTTP Cookie. Essential category. Administrative staff session guard. Duration 12 hours. Provider TuDu Uganda Limited. 8. tudu_referral: HTTP Cookie. Marketing category. Referral campaign attribution. Duration 30 days. Provider TuDu Uganda Limited. 9. ph_*_posthog: Local Storage. Analytics category. Platform usage telemetry with consent. Duration Persistent. Provider PostHog.

TuDu may update this Cookie Policy periodically to reflect technological enhancements, new security protocols, or statutory updates. Material modifications will be announced via platform notifications or direct email communication to registered account holders. Inquiries regarding cookie practices or technical storage identifiers may be directed to our Data Protection Officer via email at dpo@tudu.ug or by postal mail to TuDu Uganda Limited, Plot 14 Lumumba Avenue, Kampala, Uganda.