This Cookie Policy (the “Policy”) explains how Cendryva, Inc. (“Cendryva,” “we,” “us,” or “our”) uses cookies and similar tracking technologies on the Cendryva websites, applications, and authenticated product surfaces (collectively, the “Services”). It should be read together with the Privacy Policy, which describes how we process Personal Data more generally. Capitalized terms not defined herein have the meanings ascribed to them in the Privacy Policy.

Cookies are small text files placed on your device when you visit a website. We also use related technologies such as web beacons, pixels, local storage, and software development kits (collectively, “Cookies”). Cookies may be set by us (“first-party Cookies”) or by third parties acting on our behalf or independently (“third-party Cookies”). Cookies may persist for the duration of a single browsing session (“session Cookies”) or for a longer, defined period (“persistent Cookies”).

We classify Cookies into the following categories, in line with industry guidance:

• Strictly Necessary Cookies are essential to deliver the Services and cannot be disabled in our systems. They support authentication, session integrity, load balancing, security monitoring, and the storage of consent preferences. We rely on the “legitimate interests” or “contractual necessity” legal bases under Article 6 of the GDPR and the corresponding exemption under Article 5(3) of the ePrivacy Directive.
• Functional Cookies remember choices you make (such as language, region, theme, or time zone) so the Services behave consistently across visits. These Cookies are deployed only with your consent in jurisdictions that require it.
• Analytics and Performance Cookies help us understand how visitors interact with the Services in aggregate so we can improve performance, measure marketing effectiveness, and identify defects. We use these Cookies only with your consent where required, and we configure analytics providers to anonymize IP addresses, disable advertising features, and limit data retention.
• Marketing Cookies are used to measure the effectiveness of our marketing programs and to display relevant content. These Cookies are deployed only with your consent and may be set by third-party advertising networks.

The Cookies listed below are representative of those used on the Services. The exact set may vary as we improve the Services; changes that materially affect this Policy are reflected here in a timely manner.

Strictly Necessary

Functional

Analytics and Performance

Marketing

For visitors located in the European Economic Area, the United Kingdom, and Switzerland, we deploy non-essential Cookies only after you have provided freely given, specific, informed, and unambiguous consent through our consent banner, in accordance with Article 5(3) of the ePrivacy Directive and Article 7 of the GDPR. You may withdraw consent at any time, with effect for the future, by selecting “Cookie preferences” in the website footer.

Where required, the consent banner provides granular controls by category, a “reject all” option of equivalent prominence to “accept all,” and a record of your choice that we retain for audit purposes.

Certain US state privacy laws (including the CCPA/CPRA, the Virginia CDPA, the Colorado CPA, the Connecticut CTDPA, and the Utah UCPA) provide rights to opt out of the “sale” or “sharing” of personal information and of targeted or cross-context behavioral advertising. Cendryva does not sell personal information for monetary consideration. To the extent any analytics or marketing Cookie constitutes “sharing” under those statutes, you may opt out by selecting “Do Not Sell or Share My Personal Information” in the website footer or by transmitting a Global Privacy Control (GPC) signal, which we honor as a valid opt-out request.

Most browsers allow you to view, delete, and block Cookies through their settings. Refer to the documentation provided by your browser vendor (for example, Apple Safari, Google Chrome, Mozilla Firefox, Microsoft Edge, or Brave). Please note that disabling Strictly Necessary Cookies may impair the functionality of the Services. Mobile devices typically expose advertising identifier controls in their privacy settings (for example, “Limit Ad Tracking” on iOS or “Reset advertising ID” on Android), which apply to in-app trackers.

Where Cookies set by third-party providers cause Personal Data to be transferred outside the EEA, the UK, or Switzerland, we rely on the safeguards described in Section 7 of the Privacy Policy, including the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and documented supplementary measures.

We may amend this Policy from time to time to reflect changes to the Services or to applicable law. Material changes will be communicated through the Services or the consent banner with at least thirty (30) days’ advance notice, except where a shorter period is required by law. The “Effective” date below indicates when this Policy was most recently revised.

Questions or complaints regarding this Policy may be directed to privacy@cendryva.com. You also have the right to lodge a complaint with your local supervisory authority.