Cookie and Similar Technologies Policy

1. SCOPE: WHAT IS COVERED

This policy applies to all technologies that store information on your device or access information stored on it. This includes:

(a) HTTP cookies (small text files placed on your browser);

(b) Local Storage, Session Storage, and IndexedDB in your browser;

(c) Pixels, web beacons, and clear GIFs;

(d) Mobile application SDKs and advertising identifiers (IDFA on iOS, Advertising ID on Android);

(e) Service Worker cache storage for our Progressive Web App (PWA); and

(f) Device & security signal verification for fraud prevention.

2. CATEGORIES OF TECHNOLOGIES WE USE

2.1 Strictly Necessary (Essential): Required to deliver the Platform features you request. These cannot be switched off. Purposes include session authentication, security (CSRF protection & bot detection), rate limiting, consent choices record, and task state management.

2.2 Preferences: Remembers settings you select, such as interface language, dark mode, timezone, and dismissed prompts.

2.3 Analytics & Performance: Used, with your consent, to understand aggregate usage, measure feature adoption, and diagnose errors. We do NOT use analytics to build advertising profiles.

2.4 Marketing & Attribution: Used, with your consent, to measure campaign effectiveness and attribute registrations to Referral Links.

3. REFERRAL ATTRIBUTION TREATMENT

When you arrive via a Referral Link, a referral code is stored on your device so the signup is credited to your referrer. Referral attribution requires consent.

Manual Code Entry Fallback: If you decline marketing cookies, you can still type your referrer's code manually during registration to ensure they get credit.

4. CONSENT & HOW TO WITHDRAW

4.1 Banner Choice: Non-essential technologies are set only after clear affirmative consent. Pre-ticked boxes are not used, and closing the banner without choosing defaults to essential-only.

4.2 How to Change/Withdraw Consent: You may change or withdraw your consent at any time through Privacy Settings in the app, the footer preference link, or via your browser settings.

4.3 Re-Consent: We request consent renewal every 6 months, when adding new categories/providers, or when clearing browser data.

5. AUTOMATED PRIVACY SIGNALS

Global Privacy Control (GPC): Where your browser transmits a GPC signal, we honor it as a valid request to opt-out of non-essential tracking.

iOS & Android OS Controls: On iOS we request explicit App Tracking Transparency (ATT) permission before accessing the IDFA. On Android we respect system-level Advertising ID opt-outs.

6. TECHNOLOGY INVENTORY (SUMMARY)

fb_session (Cookie/Local Storage) | First Party | Essential | Session auth & security | Session duration

fb_csrf (Cookie) | First Party | Essential | Cross-site request protection | Session duration

fb_consent (Local Storage) | First Party | Essential | Remembers your cookie preferences | 6 months

fb_ref (Local Storage) | First Party | Marketing | Referral code attribution | 30 days

fb_lang (Local Storage) | First Party | Preference | Saved language selection | 12 months

7. PLAIN LANGUAGE SUMMARY

1. Essential storage (keeping you logged in, stopping bots) cannot be turned off.

2. Non-essential cookies require your consent; rejecting is one click.

3. We do not sell your data or build advertising dossiers.

4. Referral tracking requires consent, but manual code entry is always available if rejected.

5. You can update your choices any time in Settings.