Cookie policy

This policy explains cookies, browser storage and similar technologies on the Noyo website. A cookie is a small value a website stores in your browser. Local storage keeps information in the browser until it is cleared or treated as expired by the website. These technologies can serve different purposes and are not all necessary.

Responsible organization: Noyo Finance Ltd, 37 Sir William Newton St, Port Louis, 11328, Mauritius, Mauritius. Privacy questions: privacy@noyofinance.com. Read the Privacy Notice for information about personal-data processing and your rights.

Optional analytics is off until you actively allow it. The banner offers Accept all, Reject optional and Settings. With the current configuration, the only optional category is Google Analytics. Browsing, closing settings or continuing an application is not treated as consent.

You can use the website and apply without allowing analytics. Your cookie choice does not affect the amount, interest rate or outcome of a credit decision.

Name: noyo.cookie-consent. Type: first-party local storage. Provider: Noyo. Purpose: remembering whether you allowed optional analytics, the policy version and the time of your choice. Validity: 180 days from saving a choice. It contains no application answers or identity documents.

This entry is necessary to respect your preference and is not used for advertising. After it expires, the site asks again and optional analytics remains disabled until you choose. If storage is blocked, your choice may last only for the current page session.

Provider: Google Analytics, a Google service. Purpose: measuring visits and public-page usage to understand navigation and improve the website. It can process pseudonymous browser identifiers, timestamps, device/browser information and page events; this is not a promise that every metric is anonymous.

Analytics loads only after you give your consent. No analytics requests are needed merely to display the cookie banner. Application, login and dashboard screens are excluded from our page-view measurement.

_ga: first-party analytics cookie used by Google Analytics to distinguish browsers. _ga_<measurement identifier>: first-party analytics cookie used to maintain session state. These are optional and belong to the Analytics category.

Our integration requests a maximum cookie lifetime of 180 days without automatic renewal on each visit. Browser limits may shorten this period. Google’s default cookie settings can differ; any change to our actual configuration must be reflected in this inventory. Clearing a cookie does not automatically delete information already held in Analytics reports.

The current setup does not include Google Ads, Meta Pixel, remarketing cookies or a server-side advertising connection. Accept all authorizes only the optional analytics described here; it is not consent to future advertising tools or marketing emails.

If advertising or server-side measurement is introduced, its purposes, recipients, data and applicable choices must be assessed and disclosed before activation. Moving a tool to the server does not remove privacy or consent obligations.

Our integration sends public page paths without query parameters or fragments and uses a generic page title. It does not intentionally pass names, emails, phone numbers, tax numbers, account identifiers, credit decisions or application-field values. Google Signals and advertising-personalization signals are disabled in the integration.

Google Analytics property: the Noyo website analytics property, when enabled. Google contracting entity: the Google entity identified in the applicable Analytics service terms. Event-data retention: the retention setting of the active property; request details at privacy@noyofinance.com. Retention of aggregated reports can differ from event-level retention.

Open Cookie settings using the footer link. Turn Analytics off and save, or choose Reject optional. This is available after acceptance as well as after refusal. Your latest choice replaces the previous one in that browser.

Withdrawal stops our optional analytics integration and attempts to clear its first-party analytics cookies. When a loaded integration needs to be stopped, the page reloads; finish any unsaved work first. Withdrawal does not retroactively undo lawful processing or delete data already received by Google.

You can also delete or block cookies and local storage in browser settings. Choices are browser- and device-specific and may not carry across private windows, different browsers or another device. Removing the preference entry causes the banner to appear again.

Browser restrictions, extensions or network controls may prevent analytics from working even after consent. We do not interpret those restrictions as permission to bypass your preferences.

Google’s explanations are available at policies.google.com/technologies/partner-sites and policies.google.com/technologies/cookies. Google may process data in locations outside your country; the applicable transfer arrangements and contracting entity must be identified in the Privacy Notice.

Following a card-provider link takes you to an independent website. Its cookies and privacy choices are controlled there. A Noyo preference neither accepts nor rejects cookies on that external website.

A material change in optional purposes or providers requires an updated explanation and a new choice where required; an old consent must not silently cover a different use. Preference version changes cause the banner to ask again.

Effective date: 2026-09-29. Questions, withdrawal difficulties or requests about personal information can be sent to privacy@noyofinance.com.

First-party authentication cookies maintain your signed-in session. The account session is configured for up to seven days and may be refreshed while you use the service; signing out ends access through that session. Related short-lived authentication cookies may support the sign-in flow.

The first-party noyo_chat cookie is HttpOnly and signed, lasts up to 24 hours, and identifies a chat session for request limits. It does not contain the conversation, application or identity-document content. Request counters are stored on the server with expiry timestamps. These functions are separate from optional analytics.

Turnstile is loaded in the chat when an additional anti-bot check is requested. It processes browser and network signals to distinguish legitimate use from automated abuse. Its token is verified on our server before the protected request continues. Passing the check does not remove request limits.

Turnstile is used for security, not advertising or credit scoring. We do not use its pre-clearance feature to issue a general Cloudflare clearance cookie through this widget. Provider details: www.cloudflare.com/turnstile-privacy-policy/. If verification fails, contact support@noyofinance.com.