A clearer look at cookies.

Our approach to cookies & storage

JOYET, operated by Apaxaa Technologies LTD, maintains a strict privacy-first standard across our web portal and mobile ecosystem. We prioritize client-side data protection, cryptographic integrity, and explicit user control.

Unlike ad-supported websites, JOYET is a consumer fintech utility. We do not deploy cross-site tracking cookies, behavioral profiling scripts, or third-party advertising pixels. Our storage practices exist strictly to keep your sessions secure, remember essential preferences, and monitor core service reliability.

This Cookie Policy forms an integral part of our Privacy Policy and explains the mechanisms deployed across our web and mobile interfaces.

What are cookies & local storage?

Cookies are small encrypted alphanumeric text fragments placed in your browser directory when you load web pages. They enable web applications to identify returning visitors, maintain authenticated sessions across page navigations, and prevent Cross-Site Request Forgery (CSRF) attacks.

Web browser storage vs. mobile app storage

It is important to differentiate how technologies are utilized across JOYET platforms:

• Web Browser: On joyet.site, we use standard HTTP cookies and browser LocalStorage for essential site functions (such as your cookie preferences: joyet_cookie_choice).
• Mobile Application (Android & iOS): The JOYET mobile app does not utilize web browser cookies. Instead, it stores cryptographic session tokens using operating system hardware enclaves (iOS Keychain and Android EncryptedSharedPreferences / Keystore). These hardware-bound stores ensure sensitive authentication keys cannot be accessed by unauthorized applications.

Categories of storage technologies

1. Strictly essential technologies

These technologies are vital for security, routing, and access. They cannot be toggled off because the platform cannot function securely without them. They handle:

• Session security tokens and CSRF token defense.
• User consent states (recording whether you accepted or dismissed the cookie notice).
• Real-time load balancing and DDoS protection headers.

2. Functional & preference storage

These allow our web pages to remember interface preferences, such as your chosen color scheme, language, or previously entered utility category selections, avoiding repetitive setup.

3. Anonymous operational telemetry

We collect aggregated, non-personally identifiable metrics (such as page load speeds, network latency, and crash diagnostics) to detect network bottlenecks and ensure uninterrupted uptime. These records do not contain user identifiers, financial data, or wallet balances.

4. Zero advertising or tracking cookies

JOYET does not use marketing or targeting cookies. We do not participate in real-time ad bidding, data brokers, or retargeting networks.

Why we use these technologies

We restrict the use of cookies and device storage to legitimate operational imperatives:

• Securing Authenticated Traffic: Validating that requests originate from genuine verified sessions.
• Protecting Against Abuse: Preventing brute-force authentication attacks, replay attempts, and automated spam bots.
• Active Device Management: Generating unique device session identifiers that empower you to inspect and remotely sign out of active devices directly from your app settings.
• Optimizing Infrastructure: Monitoring content delivery network (CDN) performance to ensure instant page load speeds.

Managing your cookie choices

You have full control over cookie storage in your web browser. Most modern browsers allow you to:

• Review stored cookies and delete them individually or en masse.
• Block third-party cookies by default.
• Configure your browser to clear all storage whenever you close your browser window.

Please note: If you completely disable all browser cookies, security-sensitive portions of our web portal may not load or function as designed.

On the JOYET mobile application, you can manage active sessions or terminate any authenticated session at any time via Settings → Active Sessions.

Third-party infrastructure

Certain essential web elements (such as secure typography delivered via Google Fonts or distributed content via CDN nodes) may log standard HTTP network parameters (e.g., your browser's user-agent and IP address) strictly to transmit font files and static stylesheets efficiently.

These third-party network providers do not receive your JOYET account data, transaction records, wallet balances, or biometric credentials.

Cookie lifecycles & persistence

Storage duration depends on the specific category and function:

• Session Cookies: Temporary files that are automatically deleted from memory the moment you close your web browser.
• Persistent Preference Cookies: Stored locally until their designated expiration date (typically up to 12 months) or until you manually clear your browser cache.
• Mobile Auth Enclave Tokens: Persisted securely inside the hardware-backed keychain until you sign out, revoke the session from another device, or reinstall the application.

Changes to this Cookie Policy

We may periodically update this policy to reflect enhancements in our web infrastructure, privacy regulations, or mobile security mechanisms.

Any modifications will be posted directly to this page with an updated revision date.

Questions regarding cookies & storage?

If you have questions about how JOYET safeguards your browser privacy and session security, our compliance team is available: