How we use cookies and similar tracking technologies on our platform

QUICK SUMMARY AssetSoko uses cookies to keep the platform working, remember your preferences, and understand how users navigate the site. We do not use cookies to show you third-party adverts or track you across other websites. You can control optional cookies at any time through your browser settings.

A cookie is a small text file that a website places on your computer, smartphone, or other device when you visit it. Cookies are widely used to make websites work properly, to remember your preferences, and to give website owners information about how their site is being used.

Cookies are not programs — they cannot run code, deliver malware, or access files on your device. They are simply small data files that your browser stores and sends back to the website that set them on subsequent visits.

In addition to cookies, we may also use similar technologies such as web beacons (also called pixel tags or clear GIFs), local storage objects, and session storage. This Cookie Policy covers all of these technologies collectively.

AssetSoko uses cookies and similar technologies for the following broad purposes:

• To ensure the Platform functions correctly and securely

• To remember your preferences and settings between visits

• To keep your session active while you are logged in

• To understand how visitors use the Platform so we can improve it

• To detect and prevent fraud and unauthorised access

• To measure the effectiveness of our communications and features

We do not use cookies for targeted or behavioural advertising, and we do not share cookie data with advertising networks.

We use four categories of cookies on the AssetSoko Platform. Each category is described in detail below:

ESSENTIAL COOKIES — Always Active These cookies are strictly necessary for the Platform to function. Without them, you would not be able to log in, navigate listings, or use core features. Because they are essential, they cannot be disabled.

Essential cookies are used for:

• User authentication and session management (keeping you logged in)

• Security measures including CSRF protection and brute-force prevention

• Load balancing across servers to ensure consistent platform performance

• Storing temporary form data so you do not lose input if a page refreshes

• Remembering your cookie consent preferences

FUNCTIONAL COOKIES — Optional These cookies improve your experience by remembering choices you have made. They are not essential, but disabling them may reduce the comfort of your visit.

Functional cookies are used for:

• Remembering your selected county or region for listing searches

• Storing your display preferences (e.g., list view vs. grid view)

• Recalling recently viewed listings for convenience

• Preserving language or locale settings

ANALYTICS COOKIES — Optional These cookies help us understand how users interact with the Platform so we can improve features, fix issues, and optimise content. All analytics data is aggregated and anonymised — no individual user is identified.

Analytics cookies are used for:

• Measuring the number of visits and page views

• Understanding which listing categories are most popular

• Identifying pages where users encounter errors or drop off

• Analysing search behaviour to improve our search tools

• Measuring the performance of new platform features

SECURITY COOKIES — Always Active These cookies detect and prevent fraudulent activity, protect against session hijacking, and enforce platform access controls. They are active at all times and cannot be disabled.

Security cookies are used for:

• Detecting unusual login patterns that may indicate account compromise

• Rate-limiting repeated failed authentication attempts

• Identifying and blocking automated scraping or bot traffic

• Validating the integrity of active user sessions

The table below lists the specific cookies currently in use on the AssetSoko Platform:

Cookie Name	Category	Purpose	Expiry
assetsoko_session	Essential	Maintains your authenticated session while logged in to the Platform	Session (deleted on browser close)
assetsoko_csrf	Essential	Cross-Site Request Forgery protection token to prevent unauthorised form submissions	Session
assetsoko_consent	Essential	Stores your cookie consent choices so we do not ask again on every visit	12 months
assetsoko_lb	Essential	Load balancer affinity cookie ensuring consistent server routing during your session	Session
as_region	Functional	Remembers your selected county or region for listing search results	6 months
as_view_pref	Functional	Stores your preferred listing view (list or grid)	3 months
as_recent	Functional	Tracks recently viewed listings for quick re-access	30 days
_as_analytics	Analytics	Anonymous session analytics — records pages visited, time on page, and referrer	13 months
_as_device	Analytics	Anonymised device-type identifier used for responsive design analytics	13 months
as_sec_fp	Security	Anonymous device fingerprint used to detect anomalous login attempts	90 days
as_rate_limit	Security	Tracks failed authentication attempts to enforce rate limiting	1 hour

This list is updated whenever new cookies are introduced or existing ones are modified. If you notice a cookie not listed here, please contact us at info@assetsoko.com.

5.1 First-Party Cookies

First-party cookies are set directly by AssetSoko.com. All essential, functional, and security cookies listed in Section 4 are first-party cookies. AssetSoko has full visibility and control over these cookies.

5.2 Third-Party Cookies

Some analytics functionality may be provided by third-party service providers (such as anonymised analytics platforms). These providers may set their own cookies on your device. AssetSoko only works with analytics providers that:

• Process data in an anonymised and aggregated form

• Do not use the data for their own advertising purposes

• Are bound by contractual data processing agreements with AssetSoko

• Comply with applicable data protection law

AssetSoko does not permit advertising networks, social media platforms, or data brokers to set cookies on your device through the Platform.

Cookies can be classified by how long they remain on your device:

Session Cookies	These exist only for the duration of your browser session. They are automatically deleted when you close your browser. Most of our essential and security cookies are session cookies.
Persistent Cookies	These remain on your device for a set period (shown in the Cookie Inventory in Section 4), even after you close your browser. They allow the Platform to remember your preferences and consent choices on your next visit.

You have several options for controlling how cookies are stored and used on your device:

7.1 Your Browser Settings

All modern browsers allow you to view, block, or delete cookies. Use the guidance below for your browser:

Browser	How to Manage Cookies
Google Chrome	Settings → Privacy and security → Cookies and other site data
Mozilla Firefox	Settings → Privacy & Security → Cookies and Site Data
Apple Safari (macOS)	Safari → Preferences → Privacy → Manage Website Data
Apple Safari (iOS)	Settings → Safari → Block All Cookies
Microsoft Edge	Settings → Cookies and site permissions → Cookies and site data
Opera	Settings → Advanced → Privacy & security → Site Settings → Cookies

Please note that blocking all cookies will prevent you from logging in and using key features of the Platform, as essential cookies are required for it to function.

7.2 Opt-Out of Analytics

If you wish to opt out of analytics tracking specifically, you may do so by:

• Enabling the "Do Not Track" (DNT) signal in your browser settings — AssetSoko respects this signal

• Blocking analytics cookies via your browser's cookie manager

• Contacting us at info@assetsoko.com to request that your data be excluded from analytics

7.3 Mobile Devices

On mobile devices, you can manage cookies through your mobile browser settings. On iOS, you can also reset your advertising identifier in Settings > Privacy & Security > Tracking. On Android, you can manage site settings via your Chrome or Firefox app settings.

IMPORTANT: ESSENTIAL COOKIES CANNOT BE DISABLED Disabling essential and security cookies through your browser settings will prevent you from logging in, using forms, or accessing personalised features on the Platform. We recommend only blocking optional (functional and analytics) cookies if you have privacy concerns.

When you first visit the AssetSoko Platform, you will be presented with a cookie notice explaining the categories of cookies we use. By continuing to use the Platform without changing your browser settings, you consent to the placement of optional cookies.

You can withdraw or update your consent at any time by adjusting your browser cookie settings as described in Section 7. Withdrawing consent for optional cookies will not affect the Platform's ability to deliver its core services, which rely only on essential and security cookies.

Consent records (what you consented to and when) are stored in the 'assetsoko_consent' cookie for a period of 12 months. After this period, we will ask for your consent again.

Some cookies we use may be linked to personal data (for example, session cookies that maintain your logged-in state are associated with your account). Where cookies process personal data, that processing is governed by AssetSoko's Privacy Policy, which is available at www.assetsoko.com/privacy.

Analytics cookies used by AssetSoko do not collect or store personally identifiable information. Analytics data is aggregated and cannot be used to identify any individual user.

AssetSoko does not sell cookie data or use it to build individual user profiles for commercial purposes.

Some browsers offer a "Do Not Track" (DNT) setting that sends a signal to websites requesting that they not track your browsing activity. AssetSoko honours DNT signals. If your browser has DNT enabled, we will disable all optional analytics cookies for your session. Essential and security cookies will remain active as they are required for the Platform to function safely.

AssetSoko may update this Cookie Policy from time to time to reflect changes in technology, law, or our use of cookies. The Effective Date at the top of this document will always indicate when the most recent version was published.

Where changes are material, registered users will be notified by email or via a prominent notice on the Platform at least 14 days before the changes take effect. We will also re-present the cookie consent notice on your next visit if our cookie practices change significantly.

We encourage you to review this Cookie Policy periodically. Previous versions are available on request.

This Cookie Policy should be read alongside the following AssetSoko policies, which together govern your use of the Platform:

Privacy Policy	Explains how AssetSoko collects, uses, and protects all personal data. Available at www.assetsoko.com/privacy.
Terms & Conditions	Sets out the legal terms governing your use of the Platform. Available at www.assetsoko.com/terms.
User Safety Guide	Practical safety tips for buyers and sellers transacting on the Platform.

This Cookie Policy is governed by the laws of the Republic of Kenya, including:

• The Kenya Data Protection Act, 2019 (No. 24 of 2019)

• The Data Protection (General) Regulations, 2021

• The Computer Misuse and Cybercrimes Act, 2018

• Any other applicable Kenyan law or regulation governing data privacy and electronic communications

If you have any questions or concerns about our use of cookies, or wish to exercise your data rights in relation to cookie data, please contact us:

Email	info@assetsoko.com
Website	www.assetsoko.com
Response Time	Within 21 business days

For complaints about our use of personal data (including through cookies), you may also contact the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.

Authorised Signature — AssetSoko.com Date: 5 May 2026

Data Protection Officer (if designated) Date: 5 May 2026