MPK Development (Pty) Ltd · Registration No: 2014/091288/07
88 Herman Street, Flora Park, Polokwane, 0700, South Africa
www.opteva.co.za | info@opteva.co.za
Effective Date: 27 May 2026
1. Introduction
This Cookie Policy explains how MPK Development (Pty) Ltd (“we”, “us”, “our”) uses cookies on the OptEva platform, accessible at https://opteva.co.za (the “Platform”). It explains what cookies we set, why we set them, and how they relate to your privacy and the security of your session.
OptEva is an invite-only B2B platform for South African real estate agencies. We use a minimal cookie footprint — strictly limited to what is necessary to authenticate you and keep your session secure. We do not use advertising cookies, third-party tracking cookies, or analytics cookies.
2. What Is a Cookie?
A cookie is a small text file placed on your device by a web server when you visit a website. Your browser stores it and sends it back to the server automatically on subsequent requests to the same domain. Cookies are widely used to keep users logged in, remember preferences, and gather usage data.
Cookies are set and read via HTTP response and request headers. They can be configured with attributes that control their security, lifespan, and scope.
3. Cookies We Use
OptEva sets only one category of cookie: strictly necessary authentication cookies. No other cookies are set.
| Cookie Name | Type | Duration | Party | Purpose |
|---|---|---|---|---|
opteva_token | Strictly Necessary | 24 hours | First-party (opteva.co.za) | Stores the JWT authentication token as an HttpOnly, Secure, SameSite=Strict cookie. Identifies your authenticated session and authorises access to the Platform. |
4. Why We Use This Cookie
The authentication cookie is essential for the Platform to function. Without it, you cannot remain logged in between page loads or navigate between sections of the application.
This cookie is classified as Strictly Necessary under POPIA and similar privacy frameworks. Strictly necessary cookies do not require consent because they are essential to deliver a service explicitly requested by the user. You cannot opt out of this cookie while using the Platform; if you wish to remove it, you can log out or clear your browser cookies, which will end your session.
5. Cookie Security Attributes
The OptEva session cookie is configured with the following security attributes:
| Attribute | Value | Security Purpose |
|---|---|---|
| HttpOnly | true | The cookie cannot be accessed by JavaScript (document.cookie). This prevents cross-site scripting (XSS) attacks from stealing the authentication token. |
| Secure | true | The cookie is only transmitted over HTTPS encrypted connections. It is never sent over plain HTTP, preventing interception on unsecured networks. |
| SameSite | Strict | The cookie is not sent on any cross-site requests. This fully mitigates cross-site request forgery (CSRF) attacks without requiring a separate CSRF token. |
| Domain | opteva.co.za | The cookie is scoped to the OptEva domain only and is not accessible to any other website. |
| Path | / | The cookie is sent for all paths within the OptEva application. |
| Max-Age | 24 hours | The cookie expires after 24 hours or on explicit logout, limiting the window of exposure if a device is compromised. |
6. What We Do Not Use
OptEva does not use:
- Analytics cookies (e.g. Google Analytics, Hotjar, Mixpanel)
- Advertising or retargeting cookies
- Third-party cookies of any kind
- Social media cookies or tracking pixels
- Fingerprinting or supercookies
- Session storage for authentication purposes
The Platform does not embed any third-party scripts that would set cookies independently. Google Fonts (Inter) is loaded via standard font requests that do not set tracking cookies. Google Calendar integration uses OAuth tokens stored server-side and does not set cookies in your browser.
7. Managing and Deleting Cookies
Because OptEva's single cookie is strictly necessary, there is no opt-out mechanism within the Platform — the cookie is required for you to use the service. However, you can manage or remove it through your browser:
7.1 Logging Out
Clicking “Log Out” within the Platform will instruct the server to invalidate your session and clear the authentication cookie from your browser. This is the recommended way to end your session, particularly on shared or public devices.
7.2 Clearing via Browser Settings
You can delete all cookies for opteva.co.za through your browser's settings. This will immediately end your session and require you to log in again. Common browser paths:
- Chrome: Settings → Privacy and Security → Cookies and other site data → See all site data and permissions
- Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data
- Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data
- Safari: Settings → Privacy → Manage Website Data
7.3 Note on Blocking
If you configure your browser to block all cookies from opteva.co.za, you will not be able to log in or use the Platform, as the authentication cookie is essential for session management.
8. POPIA Compliance
Under the Protection of Personal Information Act 4 of 2013 (POPIA), the processing of personal information through cookies requires a lawful basis. The OptEva session cookie processes only a JWT token (a pseudonymous identifier) for the strictly necessary purpose of authenticating your session. The lawful basis is contractual necessity — you have requested access to the Platform, and the cookie is required to provide it.
No personal information beyond your session token is stored in the cookie itself. Your full profile and permissions are stored server-side and retrieved securely once authentication is confirmed.
9. Changes to This Policy
If we introduce new cookies in future (for example, preference or analytics cookies), this Policy will be updated before those cookies are set, and where required by law, your consent will be obtained. Company Administrators will be notified of any material changes via email. Continued use of the Platform after the effective date of changes constitutes acceptance of the revised Policy.
10. Contact
For any questions about this Cookie Policy or how we handle your data:
Information Officer: Pieter Klynsmith
MPK Development (Pty) Ltd
Email: info@opteva.co.za
Address: 88 Herman Street, Flora Park, Polokwane, 0700, South Africa
Website: www.opteva.co.za
Information Regulator of South Africa:
www.justice.gov.za/inforeg/ | inforeg@justice.gov.za