Essential cookies operate for security and to remember your policy choice. Google Analytics and Google Tag Manager load only after you choose analytics, and they are not loaded on confidential safeguarding or private feedback forms.
What cookies and similar technologies are
A cookie is a small text record placed on or read from your browser by a website. Cookies can keep a session secure, remember a preference, distinguish one browser from another or support measurement. “Similar technologies” include local storage, pixels, tags, embedded scripts and server-side identifiers.
Cookies may be:
- session cookies, which normally expire when the browser session ends;
- persistent cookies, which remain until their expiry date or deletion;
- first-party cookies, set for the JFCU website domain; or
- third-party technologies, supplied by another service such as Google or Cloudflare.
This policy should be read with the Privacy Policy, which explains broader processing of personal data.
Our approach
- We use the minimum essential browser storage needed for security, forms, sessions and preferences.
- Optional analytics is off until you make an affirmative choice.
- Choosing “essential only” does not reduce access to ordinary public content or forms.
- Advertising storage, ad user data, ad personalisation and Google Signals are disabled in the website implementation.
- Google measurement tags do not load on the confidential safeguarding pathway or private feedback invitation forms, even if analytics was previously allowed.
- Your policy acknowledgement and analytics choice are separate: accepting the Terms does not require accepting analytics.
- You can change analytics preference at any time on this page.
Essential first-party cookies
These cookies are necessary for the service requested, security, policy acknowledgement or preference storage. They cannot all be disabled through the website control because forms and authenticated areas may not work safely without them.
| Cookie or pattern | Purpose | Typical duration | Category |
|---|---|---|---|
jfcu_policy_acceptance | Remembers the version of the Terms, Privacy Policy and Cookie Policy acknowledged through the website notice. | Up to 365 days, or until the policy version changes | Essential |
jfcu_cookie_consent | Stores “essential” or “analytics” so the website applies the selected measurement preference. | Up to 365 days | Essential preference |
joy-for-children-uganda-session | Maintains a secure session, including sign-in state, form validation messages and protection against session misuse. | Normally the configured session lifetime; may end sooner when the browser closes or the session expires | Essential |
XSRF-TOKEN or equivalent anti-forgery state | Helps ensure that form requests genuinely originate from this website and protects against cross-site request forgery. | Session or short-lived security duration | Essential security |
Exact session names can differ between environments. Infrastructure providers may also set strictly necessary routing, load-balancing, firewall or fraud-prevention cookies. Such cookies are used for service integrity rather than advertising.
Optional analytics and tag management
After you choose “allow analytics”, the website may load Google Analytics 4 using measurement ID G-9KZWD0LHP8 and Google Tag Manager container GTM-MGHHHGV. Analytics helps JFCU understand aggregate activity such as page views, sessions, approximate location, device/browser type and how visitors move between public pages.
The website configures analytics storage as granted only after permission and keeps advertising-related storage and personalisation denied. JFCU also disables Google Signals and advertising-personalisation signals in its direct configuration. Tag Manager is a delivery mechanism; it must not be used to bypass the choice recorded here.
| Cookie or technology | Provider and purpose | Default provider duration | When used |
|---|---|---|---|
_ga | Google Analytics first-party identifier used to distinguish browsers for aggregate measurement. | Google documents a default of up to 2 years, subject to browser limits and property configuration | Only after analytics choice |
_ga_* | Google Analytics first-party cookie used to retain session state for a measurement container. | Google documents a default of up to 2 years, subject to browser limits and property configuration | Only after analytics choice |
| Google tag / data layer | Loads approved analytics configuration and records consent-aware events. Tag Manager itself is not intended here for advertising or unauthorised tracking. | Runs during the page visit; connected cookies follow their own durations | Only after analytics choice |
Google may process measurement data on infrastructure outside Uganda. JFCU must assess processor terms, security and transfer safeguards as described in the Privacy Policy. Learn more from Google’s GA4 cookie information.
Security tools, embedded content and third-party sites
Cloudflare Turnstile
High-risk public forms may use Cloudflare Turnstile to distinguish legitimate people from automated abuse. The service processes browser and challenge signals and issues a short-lived verification token. If pre-clearance is enabled by infrastructure configuration, Cloudflare may set a cf_clearance cookie. Turnstile is treated as a security control, not analytics.
YouTube, maps, payment services and social links
JFCU uses privacy-enhanced YouTube links where embedded video is offered and generally links to maps and social platforms instead of automatically loading their widgets. Following a link takes you to another service governed by that provider’s cookies and policies.
Payment and donation services—including mobile-money operators, card processors, PayPal or GlobalGiving—may set cookies after you open their payment interface or leave this website. Those cookies are controlled by the provider and should be reviewed on its service.
Change your analytics choice
Selecting essential only prevents Google tags from loading on future page requests. It does not automatically delete cookies already placed by Google; use your browser controls below to delete existing analytics cookies if you previously allowed them.
Current browser choice: No choice recorded yet
Browser and device controls
Most browsers allow you to view, block and delete cookies for one website or all websites. Blocking all cookies may prevent sign-in, secure forms, policy preference storage and other requested functionality. Browser controls may include:
- deleting cookies and site data for the JFCU domain;
- blocking third-party cookies;
- clearing data when the browser closes;
- using private-browsing mode; and
- limiting cross-site tracking at browser or device level.
Cookie duration can also be shortened by browser restrictions. Deleting jfcu_policy_acceptance or jfcu_cookie_consent causes the website notice to reappear.
Retention, preference renewal and policy updates
JFCU remembers policy acceptance and cookie preference for the durations stated above so the notice does not repeatedly interrupt normal browsing. The acceptance record contains the policy version, not the content of private forms. The notice reappears when the cookie expires, is removed, is unavailable or the configured policy version changes.
We may revise this policy when technologies, providers, cookie names or legal requirements change. Material changes will update the displayed version and may require a fresh acknowledgement or analytics choice.
Questions or complaints
For questions about cookies or analytics, contact JFCU using the details below. You may also submit a data-rights request through the Privacy Policy request form.
