Cookie Policy

1. What Are Cookies?

1.1 Cookies are small text files placed on your device when you visit a website or use an application. They allow the site to recognize your device, remember your preferences, and improve your experience.

1.2 Similar technologies include local storage, session storage, web beacons, pixels, and software development kits (SDKs) used in mobile apps. For simplicity, we refer to all of these as "cookies" in this Policy.

1.3 Cookies can be:

• First-party (set by ZuKeepr) or third-party (set by services we use, such as Microsoft Clarity or Stripe);
• Session cookies (deleted when you close your browser) or persistent cookies (stored for a defined period);
• Strictly necessary, functional, analytics, or advertising — categorized by their purpose.

2. Cookies We Use

The table below lists the categories of cookies and similar technologies we use, with a brief description and typical duration.

Category

Cookie / Service

Purpose

Duration

Strictly necessary

NextAuth session cookies

Keep you signed in and protect against cross-site request forgery

Session / up to 30 days

Strictly necessary

Stripe checkout cookies

Process payments securely and prevent payment fraud

Set during checkout; vary by Stripe

Functional

Preference cookies

Remember UI preferences (e.g., dismissed banners, view selections)

Up to 12 months

Analytics

Microsoft Clarity

Understand how visitors use the Platform via aggregated session interactions. Form fields are masked. Child profile, medical, payment, message-entry, and account settings pages are excluded from recording.

Up to 12 months (set by Microsoft); not loaded before consent where consent is required

Advertising

None used

ZuKeepr does not currently use advertising, retargeting, or cross-site tracking cookies.

Not applicable

3. Categories Explained

3.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They allow you to sign in, navigate, make payments, and use core features. Without these cookies, the Platform will not work properly. Because they are essential, they are not subject to consent under most cookie regulations.

Examples on ZuKeepr include session cookies set by NextAuth to keep you signed in, and cookies set by Stripe to process payments securely.

3.2 Functional Cookies

These cookies enhance your experience by remembering your preferences (such as dismissed banners or display choices). They are not strictly necessary; turning them off may reduce the convenience of the Platform.

3.3 Analytics Cookies — Microsoft Clarity

ZuKeepr uses Microsoft Clarity to capture aggregated session interactions for product analytics. Clarity is configured with the following protections:

• All form fields are masked by default. Clarity cannot see what users type into form inputs.;
• The following pages are excluded from Clarity recording entirely: child profile pages, medical and dietary information pages, payment pages, message-entry pages, and account settings pages;
• Clarity does not have access to plain-text passwords, payment card or ACH numbers, or sensitive child information;
• Once cookie consent capability is live on the Platform, Clarity will be loaded only after the user has accepted analytics cookies, where consent is required by applicable law.

Even with these protections, Clarity is an analytics service and does involve session-level interaction data. Users who prefer to opt out can do so through the consent mechanism described in Section 5, through browser-level Do Not Track signals, or by using a privacy-focused browser extension. See Microsoft's privacy documentation for Clarity for additional information.

3.4 Advertising and Retargeting Cookies

ZuKeepr does not currently use advertising, retargeting, or cross-site tracking cookies. If we begin to use such cookies in the future (for example, for Meta or Google retargeting), we will:

• Update this Cookie Policy before any such cookie is set;
• Update the cookie consent banner to provide an explicit opt-in choice for advertising cookies, where required by applicable law;
• Communicate the change to users via in-app or email notice consistent with our change-management practices.

4. Children's Privacy and Cookies

4.1 The Platform is intended for use by adults. We do not knowingly use cookies to track or profile children.

4.2 Where a parent uses the Platform to manage information about their child, our cookies relate to the parent's session and account, not to the child. Pages containing children's information are excluded from analytics recording, as noted in Section 3.3. Information about children is handled in accordance with our Privacy Policy and Children's Privacy Notice.

5. Managing Your Cookie Preferences

5.1 Cookie Consent on ZuKeepr

Where required by applicable law, ZuKeepr will present a cookie consent banner allowing you to accept, reject, or customize non-essential cookies. Your choice will be remembered for future visits and you may update it at any time. Until the cookie consent banner is live, ZuKeepr does not load Microsoft Clarity in jurisdictions where prior consent is required for analytics cookies.

Strictly necessary cookies cannot be disabled through the banner because the Platform will not function without them.

5.2 Browser Controls

You can manage cookies through your web browser settings. Most browsers allow you to:

• View what cookies are stored;
• Delete some or all cookies;
• Block cookies from specific sites or all sites;
• Receive a notification before a cookie is stored.

Blocking strictly necessary cookies may prevent you from signing in, completing transactions, or using core features of the Platform.

5.3 Mobile App Controls

In our mobile applications, you can manage similar tracking technologies through your device's operating system settings. iOS provides app tracking transparency controls, and Android provides advertising ID controls. These platform-level settings apply to our app along with all others on your device.

5.4 Microsoft Clarity Opt-Out

If you wish to opt out of Microsoft Clarity analytics specifically, you can do so by enabling Do Not Track in your browser, by using a privacy-focused browser extension, or by adjusting your cookie consent choice when the consent banner is presented. Microsoft also provides opt-out information at the Microsoft Privacy Statement.

5.5 Cookie Preferences Page

A dedicated Cookie Preferences page is available from the footer of the Platform, where you can review and update your consent choices at any time. The page describes each category of cookies and provides controls for accepting or rejecting non-essential cookies.

6. Third-Party Cookies

6.1 Some cookies on the Platform are set by third parties we work with. These third parties have their own privacy and cookie policies, which we encourage you to review. Key third parties currently include:

• Microsoft Corporation (for Microsoft Clarity analytics);
• Stripe, Inc. (for payment processing).

A complete and current list of third-party service providers is available at zukeepr.com/subprocessors.

6.2 We do not control how these third parties use cookies they set. We require all third parties we work with to comply with applicable privacy and data protection law.

6.3 We do not sell or share information collected through cookies with advertising networks.

7. Do Not Track Signals

Some web browsers offer a "Do Not Track" or similar signal. Industry standards for honouring these signals are still developing, but where technically feasible, we will respect Do Not Track signals for analytics cookies. Strictly necessary cookies remain active regardless of Do Not Track because they are essential to using the Platform.

8. Changes to This Cookie Policy

8.1 We may update this Cookie Policy from time to time to reflect changes in the cookies we use, in technology, or in applicable law. Material changes will be communicated via in-app notice, email, or a banner on the Platform.

8.2 The date at the top of this Cookie Policy indicates when it was last revised.

9. Contact

Questions about this Cookie Policy or our use of cookies can be sent to:

ZuKeepr Inc.

914 Graythorpe Place, Victoria, British Columbia, Canada

support@zukeepr.com

zukeepr.com

─────────────────────────────────────────────────────────────────────────