Cookie-Policy

Cookie Policy (California‑first, Global‑ready) – 2025-08-13

Cookie Policy

This Cookie Policy describes how we use cookies, SDKs, pixels, tags, local storage and similar technologies (“cookies”) on our services. It is designed to be compliant with California law (CCPA/CPRA) while allowing broad data use on an opt‑out basis, and can adapt to other jurisdictions.

Notice at Collection (Cookies)

Through cookies we collect (depending on your settings): identifiers (e.g., device IDs, cookie IDs), internet/network activity (pages, events, referrers), approximate and precise geolocation (if enabled), inferences (ad segments), and limited Sensitive Personal Information (e.g., precise geolocation; see “Sensitive Information”). We use these for: service operation, security/fraud prevention, debugging, analytics/measurement, personalization, and advertising including cross‑context behavioral advertising. We retain data for the periods stated below or for the duration needed for the disclosed purposes.

Cookie Categories & Purposes

CategoryPurposesExamplesSale/ShareRetention
Strictly Necessary Core functionality (auth, load balancing, session routing), security & fraud prevention, cookie preferences. Session ID; CSRF token; bot‑mitigation token. No sale/share. Session up to 12 months (configurable).
Functional Preferences, media playback, chat widgets, A/B experiments without cross‑site tracking. Language, UI theme, experiment bucket. No sale/share. Up to 13 months; or until you clear settings.
Analytics & Measurement Usage analytics, performance, product measurement, aggregated reporting. Page views, events, scroll depth; SDK event IDs. Configured as Service Provider/Processor where possible. If a vendor uses data for its own cross‑context purposes, we treat that as “share”. Up to 25 months (default), or per vendor policy; longer for security logs where necessary.
Advertising & Targeting Audience building, frequency capping, ad delivery/measurement, retargeting, lookalikes. Pixel IDs; ad click/view metadata; segments/inferences. Yes – “share” for cross‑context behavioral advertising. May also be “sale” under California law where we receive value in exchange. Up to 13 months (standard). Reset or shorter where required.
Sensitive Information (limited) Only where you enable it or where strictly necessary (e.g., precise geolocation for maps or local features). Precise geolocation; other SPI only if disclosed in our Privacy Policy. Never sold; not shared for cross‑context ads. You can request “Limit Use of My Sensitive PI”. As needed for the limited purpose, then deleted or de‑identified.

“Sale” / “Share” and Ads

We use cookies and similar tech for cross‑context behavioral advertising. This is considered “sharing” under California law and may be a “sale” in some cases. You can opt out at any time via the Do Not Sell or Share link or the Cookie Settings. We honor the Global Privacy Control (GPC) signal; when detected, we apply your opt‑out automatically to browser‑linked identifiers and cease sale/share via ad cookies on that browser.

Signals & Universal Opt‑Out

We recognize browser‑level signals where required by law (including GPC). Where supported, we also propagate opt‑out choices via the IAB U.S. Privacy / USP APIs and equivalent mechanisms so that partners receive your “Do Not Sell or Share” preference.

Sensitive Personal Information

We do not use or disclose Sensitive Personal Information (SPI) for additional purposes that, under California law, require a right to “Limit the Use of My Sensitive PI”, unless you provide it or enable a feature that needs it (e.g., precise geolocation). If you wish to limit permitted uses, use the Limit link or contact us.

Minors

Our services are not directed to children under 16, and we do not knowingly sell or share personal information of consumers under 16. If we learn that we processed PI of a minor without the required opt‑in, we will stop the sale/share and delete it. Please contact us to report a concern.

Retention

We keep cookie‑derived data only as long as necessary for the purposes above, then delete or de‑identify it. Typical durations are listed in the table. Security and fraud logs may be retained longer where reasonably necessary to protect our services. Where a fixed duration is not appropriate, we apply criteria such as: purpose completed, legal/contractual requirements, system constraints, and user settings.

Vendors & Cookies

We use a range of vendors for analytics, advertising, measurement, and functionality. The below table is illustrative and may be updated in our Preference Center or Privacy Policy.

ProviderCategoryPurposeFirst/ThirdCookie / Key ExamplesDurationSale/Share?More Info / Opt‑out
Google (Analytics/Ads)Analytics; AdvertisingMeasurement; Cross‑context adsThird_ga; _gcl_*13–25 moShare (ads)Vendor link
Meta PixelAdvertisingAds delivery/retargetingThirdfbc; fbpUp to 13 moShareVendor link
LinkedIn Insight TagAdvertisingConversion/retargetingThirdli_gc; ln_orUp to 13 moShareVendor link

Note: Exact vendors/cookies may change. See our Cookie Settings for a live list and to adjust preferences.

Preference Center

You can revisit your choices at any time via Cookie Settings. Categories: (i) Strictly Necessary (always active), (ii) Functional, (iii) Analytics & Measurement, (iv) Advertising & Targeting, plus separate toggles for “Do Not Sell or Share” and, where applicable, “Limit the Use of My Sensitive Personal Information”. We implement choices per browser/app, device, and, where possible, account.

Regional Application

We apply local rules based on your region. For California residents, the “Do Not Sell or Share” control and GPC handling apply. In other U.S. states with similar laws, we apply equivalent opt‑out mechanisms where required. For EEA/UK visitors, we obtain prior consent for non‑essential cookies and provide a separate consent banner; your choices there control the use of analytics/ads cookies in those regions.

Changes

We may update this Policy from time to time. Material changes will be highlighted in the Cookie Settings and/or on this page, with the date updated below.


Effective date: 2025-08-13