02Our approach in short
- We use only the cookies needed to run and protect the site, plus embedded YouTube video if you allow it.
- We do not use analytics, tracking or advertising cookies, and we do not sell data to advertisers.
- Optional cookies stay off until you choose “Accept all cookies” or switch them on in your preferences.
- We ask again every six months, or sooner if this policy changes.
03Strictly necessary cookies
These cannot be switched off in our cookie settings, because the site cannot work properly or safely without them. You can still block them in your browser, but parts of the site, such as booking or signing in, may then stop working.
| Name | Provider | Purpose | Type and duration |
|---|---|---|---|
| kengen_spa_consent | This site | Remembers your cookie choices so we do not ask on every page. | First-party cookie, 182 days |
| _GRECAPTCHA and related reCAPTCHA data | Google (reCAPTCHA, via Firebase App Check) | Checks that requests to our booking and sign-in services come from a real browser and not an automated attack. | Local storage and Google cookies, set by Google; see Google's policies for durations |
| Firebase App Check token (firebase-app-check-database) | This site (Google Firebase) | Stores the short-lived security token reCAPTCHA issues, so the check is not repeated on every request. | IndexedDB, refreshed automatically, about one hour |
Staff dashboard only
These are set only for KenGen staff who sign in to the admin dashboard. Visitors never receive them.
| Name | Provider | Purpose | Type and duration |
|---|---|---|---|
| firebaseLocalStorageDb | This site (Google Firebase Authentication) | Keeps a staff member signed in. | IndexedDB, until the staff member signs out |
| sidebar_state | This site | Remembers whether the dashboard sidebar is open or collapsed. | First-party cookie, 7 days |
| kengen_login_<id> | This site | Makes sure a sign-in is recorded in the audit log only once per session. | Session storage, until the browser tab is closed |
04Embedded media (optional)
Our home page includes a video hosted on YouTube. We embed it in YouTube's privacy-enhanced mode (youtube-nocookie.com), and only after you allow embedded media. If you do not allow it, the video does not load and you can watch it on YouTube instead.
When the video plays, Google may set cookies and use local storage (for example VISITOR_INFO1_LIVE, YSC and yt-remote-* entries) to play the video, remember your settings and measure use. Google may process this data outside Kenya. Google's use of this data is governed by the Google Privacy Policy.
05Cookies we do not use
We do not use analytics cookies (such as Google Analytics), advertising or retargeting cookies, social media tracking pixels, or any cookies that build a profile of your browsing across other websites. If we ever want to introduce them, we will update this policy and ask for your consent before setting them.
06How to manage cookies
You can change your choice for optional cookies at any time. Withdrawing consent is as easy as giving it, and it does not affect anything that happened before you changed your mind.
You can also use the “Cookie settings” link in the footer of every page, or control and delete cookies in your browser settings. Guidance is available for Chrome, Firefox, Safari and Edge. Blocking strictly necessary cookies may stop the booking form from working.
07More information
For how we handle personal data more generally, including your rights and how to complain, see our privacy policy. We may update this cookie policy when the cookies we use change; the date at the top shows the latest version. If you have a question, contact us:
Phone: 0711 036 040 (daily, 08:00–17:00)
The spa: Olkaria Geothermal Spa, Olkaria Geothermal Project, P.O. Box 785-20117, Naivasha, Kenya
Head office: Kenya Electricity Generating Company PLC, Stima Plaza, Kolobot Road, Parklands, P.O. Box 47936-00100, Nairobi, Kenya