In plain English
KasiLabs, which makes Hesafi, uses a few essential items (your invoice draft, the campaign you arrived from) and Meta's cookies to measure our ads on Facebook and Instagram. Meta's cookies never run on the M-PESA converter or invoice generator, never in the app where your books live, and you can opt out below.
This summary helps you read the cookie policy. The full text below is what applies.
Section 1: Essential
Needed for the site to work. Nothing here is used for advertising.
| Name | Type | Purpose | Lasts |
|---|---|---|---|
| hesafi_consent | Cookie (this site and the app) | Set only if you opt out of ad measurement, to remember that choice | 12 months |
| hesafi.fbclid | Session storage (this tab only) | Keeps the ad click id from the link you arrived by until the page has measured the visit | Until you close the tab |
| hesafi.landing | Session storage (this tab only) | Keeps the campaign tags (utm_*) of the link you arrived by, so the app knows which ad you came from | Until you close the tab |
| hesafi.invoice-draft.* | Local storage (this device only) | Your free invoice draft, so you can come back to it | Until you clear it |
Section 2: Analytics
We don't use analytics cookies. If we measure site speed, it is with tools that set no cookies and collect no identifiers.
Section 3: Advertising measurement
In Kenya, South Africa and Nigeria the Meta Pixel loads on this site (except on the free tool pages, and never in the app) and sets these cookies on our domain, so we can tell which of our ads bring people who go on to use Hesafi. Meta may also use its own cookies on facebook.com. What is shared and why is explained in the privacy notice, section 3(i).
| Name | Type | Purpose | Lasts |
|---|---|---|---|
| _fbp | Cookie | Meta Pixel browser id, to measure our ads | 90 days |
| _fbc | Cookie | The ad click id, so Meta can tell which ad you came from | 90 days |
| hsf_uid | Cookie (set by our server, not readable by scripts) | A random visitor id sent to Meta in hashed form to match events | About 13 months |
We don't use Meta's automatic advanced matching, and we never send Meta anything from your books, invoices or statements.
Section 4: Opting out
You can stop ad measurement in this browser at any time. We then delete _fbp and _fbc, our server clears hsf_uid, and the pixel doesn't load again.
To change how we measure ads for you, stop it on every device, or ask what we hold about you, write to ask@hesafi.com (see the privacy notice, section 7). You can also block cookies in your browser's settings, and see and change how Meta uses your data in your Facebook ad preferences.
Section 5: Pages with no trackers
The M-PESA statement converter runs no tracking or advertising scripts at all, and its security policy blocks Meta's servers. The invoice generator doesn't load the pixel either. These pages may send a single event to our own server when you export or print, containing only the tool's name.
Version history
Version history| Version | Date | What changed |
|---|---|---|
| 1.0 | 21 October 2026 | First version. |
| 1.1 | 24 October 2026 | KasiLabs named as the company that sets these cookies; write to ask@hesafi.com to change or stop ad measurement on every device. |
Questions about this cookie policy? Ask a person on WhatsApp, or email ask@hesafi.com.