Required for signing in, maintaining multi-step onboarding state (Customer, Driver, Services), and revoking active sessions across devices.
Uses FingerprintJS and BotD checks to detect automated credential stuffing, unauthorized VPN spoofing, and suspicious wallet withdrawals.
Remembers your dark/light theme choice, preferred city hub (Lagos, Abuja, Port Harcourt, Ibadan, Kano), and recent pickup landmarks.
Helps our engineering team measure page load speeds, map tile rendering performance, and aggregate ride-tier demand.
Cookies are small text files placed on your browser or mobile device when you visit Oowhaa's web platform, authentication portal, or legal center. Alongside HTTP-only cookies, we use browser localStorage and sessionStorage to preserve your progress across multi-step onboarding forms.
oowhaa_session_jwt— Encrypted HTTP-only token authenticating your active Customer, Driver, or Service Partner session (Expires: 7 days or upon manual logout).oowhaa_csrf_token— Protects form submissions (including KYC uploads, guarantor submissions, and password resets) against Cross-Site Request Forgery (Expires: Session).
As documented in the Oowhaa Web Platform architecture, we utilize device fingerprinting (@fingerprintjs/fingerprintjs) and automated bot detection (@fingerprintjs/botd) to protect driver earnings, Rop Points balances, and showroom vehicle listings from scraping and unauthorized access.
Functional tokens such as theme store your dark or light mode preference, while analytics cookies help us optimize pickup ETAs and user flows across Nigeria. You can clear these cookies anytime from your browser settings or via the Clear local device cache option on the Oowhaa Logout page.