Cookie Policy

The Centralised Signage & Advertising Management Platform (CSAMP), operated by the Delta State Signage and Advertisement Agency (DESSAA), uses cookies and similar technologies to keep the platform secure, functional, and responsive. This Cookie Policy explains what cookies are, which ones we use and why, and how you can manage them.

1. What Are Cookies?

Cookies are small text files that a website places on your browser or device when you visit. They allow the platform to recognise your device across page loads, maintain your login session, and remember preferences you have set. Cookies do not execute code and cannot carry viruses or access files on your device.

Similar technologies — such as local storage and session storage — work in analogous ways and are subject to the same controls described in this Policy.

2. Cookies We Use

CSAMP uses only the cookies necessary for the platform to function correctly and securely. We do not use advertising cookies, tracking pixels, or any cookie that profiles your behaviour for commercial purposes.

Strictly Necessary Cookies

These cookies are essential for you to navigate the platform and use its features. The platform cannot function correctly without them and they cannot be switched off.

Session Cookie — Maintains your authenticated login session for the duration of your visit. This cookie is cleared when you close your browser or explicitly log out. Without it, you cannot remain signed in as you navigate between pages.

Security Token (XSRF-TOKEN) — A cryptographically signed token included with every state-changing request to protect against cross-site request forgery (CSRF) attacks. It is regenerated on each session and verifies that requests originate from within the platform.

Trusted Device Token — Set only when you choose "Trust this device" after completing two-factor authentication. This token records that the current device has been verified, so you are not asked for an OTP code on every subsequent login. It is valid for up to 30 days and is bound to your account and this device only; it cannot be transferred or reused across other accounts or browsers.

Remember Me Cookie — Set only when you choose "Remember me" during sign-in. This extends your session across browser restarts for up to 30 days, so you do not need to re-enter your credentials on every visit from the same device.

How Sessions Work

When you sign in to CSAMP, a session cookie ties your browser to your authenticated account for the duration of that session. The session is terminated — and the cookie invalidated — when you explicitly log out or when the session expires due to inactivity, whichever occurs first. We do not use persistent tracking cookies tied to your account between sessions.

3. Two-Factor Authentication and Trusted Devices

If you enable two-factor authentication on your account, CSAMP will issue a trusted device cookie when you choose to trust the device after a successful verification. The token inside this cookie is cryptographically signed and bound to your account. It cannot be transferred to another account or used on a different platform.

You can revoke all trusted device records at any time from your Account Security settings. Revoking a device invalidates its cookie immediately, and you will be prompted for a fresh OTP code on your next login from that device.

4. Third-Party Cookies

CSAMP does not load third-party advertising networks, social media trackers, or analytics services that set their own cookies. If the platform embeds content from an external service, that service may set its own cookies governed by its own privacy and cookie policies. We minimise such integrations and will update this Policy if they are introduced.

5. Managing and Controlling Cookies

You have several options for managing cookies.

Through Your Browser

All modern browsers allow you to view, block, or delete cookies through their settings. The steps vary by browser; instructions are available on the support pages for Chrome, Firefox, Safari, Edge, and other major browsers.

What Happens If You Block Cookies

Blocking strictly necessary cookies will prevent you from logging in and using CSAMP. The session and CSRF cookies are required for core security and authentication; without them, the platform cannot safely identify your account or protect your requests from interference.

Blocking functional cookies (remember me, trusted device) will mean you need to sign in fully on every visit and complete two-factor authentication each time, even on devices you have previously trusted.

Through CSAMP Settings

You can manage your trusted device records and active login sessions at any time from your Account settings. Revoking a session or trusted device from there will invalidate the corresponding cookie immediately, regardless of its expiry date.

6. Consent

As a government-operated regulatory platform, the cookies used by CSAMP are limited to those strictly necessary for the service to function and for maintaining your security. We do not rely on your consent to place these cookies; they are placed on the lawful basis of the provision of a public digital service and our legitimate interest in platform security.

If in future we introduce any optional or non-essential cookies, we will ask for your consent before setting them and update this Policy accordingly.

7. Changes to This Policy

We may update this Cookie Policy as the platform evolves or as applicable law and standards develop. The version published on this page is always the current version. We will notify registered users through the platform if we make material changes that affect the cookies we use.