Cookie Policy

1. What Are Cookies?

1.1 Cookies are small text files placed on your device when you visit a website or use an application. They allow the site to recognize your device, remember your preferences, and improve your experience.

1.2 Similar technologies include local storage, session storage, web beacons, pixels, and software development kits (SDKs) used in mobile apps. For simplicity, we refer to all of these as "cookies" in this Policy.

1.3 Cookies can be:

• First-party (set by Zukeepr) or third-party (set by services we use, such as Microsoft Clarity or Stripe);
• Session cookies (deleted when you close your browser) or persistent cookies (stored for a defined period);
• Strictly necessary, functional, analytics, or advertising — categorized by their purpose.

2. Cookies We Use

The table below lists the categories of cookies and similar technologies we use, with a brief description and typical duration.

Category

Cookie / Service

Purpose

Duration

Strictly necessary

NextAuth session cookies

Keep you signed in and protect against cross-site request forgery

Session / up to 30 days

Strictly necessary

Stripe checkout cookies

Process payments securely and prevent payment fraud

Set during checkout; vary by Stripe

Functional

Preference cookies

Remember UI preferences (e.g., dismissed banners, view selections)

Up to 12 months

Analytics

Microsoft Clarity

Understand how visitors use the Platform by recording session interactions, linked to cookie identifiers Clarity sets. Form fields are masked. Child profile, medical, payment, message-entry, and account settings pages are excluded from recording.

Up to 12 months (set by Microsoft); not loaded before consent where consent is required

Advertising

_gcl_au (Google Ads)

With your consent, Zukeepr uses Google Ads conversion measurement on its public pages to learn whether our ads led to a visit or a sign-up. We do not use retargeting or ad personalization, and no advertising cookie is set on signed-in pages.

90 days

3. Categories Explained

3.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They allow you to sign in, navigate, make payments, and use core features. Without these cookies, the Platform will not work properly. Because they are essential, they are not subject to consent under most cookie regulations.

Examples on Zukeepr include session cookies set by NextAuth to keep you signed in, and cookies set by Stripe to process payments securely.

3.2 Functional Cookies

These cookies enhance your experience by remembering your preferences (such as dismissed banners or display choices). They are not strictly necessary; turning them off may reduce the convenience of the Platform.

3.3 Analytics Cookies — Microsoft Clarity and Google Analytics

Zukeepr uses Microsoft Clarity to record session interactions for product analytics. Clarity sets cookies and identifiers in your browser so that visits from the same browser can be recognised: _clck and _clsk on zukeepr.com, and identifiers such as MUID and CLID on Microsoft's clarity.ms and bing.com domains. Clarity is configured with the following protections:

• All form fields are masked by default. Clarity cannot see what users type into form inputs.;
• The following pages are excluded from Clarity recording entirely: child profile pages, medical and dietary information pages, payment pages, message-entry pages, and account settings pages;
• Clarity does not have access to plain-text passwords, payment card or ACH numbers, or sensitive child information;
• Clarity is loaded only after you accept analytics cookies, and only on public pages.

Even with these protections, Clarity is an analytics service and does involve session-level interaction data. Users who prefer to opt out can do so through the consent mechanism described in Section 5, through browser-level Do Not Track signals, or by using a privacy-focused browser extension. See Microsoft's privacy documentation for Clarity for additional information.

Google Analytics (Google LLC) measures how visitors use our public pages: pages viewed, searches by city, and sign-ups. It runs only after you accept analytics cookies and never on signed-in dashboards. We have turned off Google signals and ad personalization, and we never send names, email addresses or children's information to Google. Google Analytics data is never used to personalize ads.

3.4 Advertising Cookies: Google Ads Conversion Measurement

3.4.1 Google Ads (Google LLC) conversion measurement tells us whether someone who clicked one of our ads went on to visit our public pages or create an account. It runs only after you turn on advertising cookies, either in the banner's Customize panel, on the Cookie Preferences page, or by choosing "Accept all". It never runs on signed-in pages. It is off unless you choose it.

3.4.2 When it is on, Google may set cookies such as _gcl_au and read the ad-click identifier in the address of the page you land on. We never send Google names, email addresses, phone numbers or children's information.

3.4.3 We do not use advertising cookies to personalize the ads you see, to build audiences for retargeting, or to track you across other websites. Ad personalization is turned off for every visitor, whatever you choose.

3.4.4 You can turn advertising cookies off at any time on the Cookie Preferences page.

3.4.5 If your browser sends a Global Privacy Control signal, we treat it as your choice not to allow advertising cookies. They stay off, even if you choose "Accept all", and the advertising choice is shown off until the signal is turned off in your browser. Your other cookie choices are not affected.

4. Children's Privacy and Cookies

4.1 The Platform is intended for use by adults. We do not knowingly use cookies to track or profile children.

4.2 Where a parent uses the Platform to manage information about their child, our cookies relate to the parent's session and account, not to the child. Pages containing children's information are excluded from analytics recording, as noted in Section 3.3. Information about children is handled in accordance with our Privacy Policy and Children's Privacy Notice.

5. Managing Your Cookie Preferences

5.1 Cookie Consent on Zukeepr

Zukeepr shows a cookie consent banner that lets you accept all cookies, reject non-essential cookies, or choose functional, analytics and advertising cookies separately. Advertising cookies stay off unless you turn them on or choose "Accept all". Your choice is remembered for future visits. You can change it at any time on the Cookie Preferences page. When we change what a choice covers, we ask you again.

Strictly necessary cookies cannot be disabled through the banner because the Platform will not function without them.

5.2 Browser Controls

You can manage cookies through your web browser settings. Most browsers allow you to:

• View what cookies are stored;
• Delete some or all cookies;
• Block cookies from specific sites or all sites;
• Receive a notification before a cookie is stored.

Blocking strictly necessary cookies may prevent you from signing in, completing transactions, or using core features of the Platform.

5.3 Mobile App Controls

In our mobile applications, you can manage similar tracking technologies through your device's operating system settings. iOS provides app tracking transparency controls, and Android provides advertising ID controls. These platform-level settings apply to our app along with all others on your device.

5.4 Microsoft Clarity Opt-Out

If you wish to opt out of Microsoft Clarity analytics specifically, you can do so by enabling Do Not Track in your browser, by using a privacy-focused browser extension, or by adjusting your cookie consent choice when the consent banner is presented. Microsoft also provides opt-out information at the Microsoft Privacy Statement.

5.5 Cookie Preferences Page

A dedicated Cookie Preferences page is available from the footer of the Platform, where you can review and update your consent choices at any time. The page describes each category of cookies and provides controls for accepting or rejecting non-essential cookies.

6. Third-Party Cookies

6.1 Some cookies on the Platform are set by third parties we work with. These third parties have their own privacy and cookie policies, which we encourage you to review. Key third parties currently include:

• Microsoft Corporation (for Microsoft Clarity analytics);
• Google LLC (for Google Analytics and, with your consent, Google Ads conversion measurement);
• Stripe, Inc. (for payment processing);
• Trustpilot A/S (for the review widget on the signed-in Help and support pages and on the Trust page).

A complete and current list of third-party service providers is available at zukeepr.com/subprocessors.

6.2 We do not control how these third parties use cookies they set. We require all third parties we work with to comply with applicable privacy and data protection law.

6.3 We do not sell information collected through cookies. With your consent, Google Ads receives the information described in Section 3.4, for conversion measurement only.

7. Do Not Track Signals

Some web browsers offer a "Do Not Track" or similar signal. Industry standards for honouring these signals are still developing, but where technically feasible, we will respect Do Not Track signals for analytics cookies. Strictly necessary cookies remain active regardless of Do Not Track because they are essential to using the Platform.

Global Privacy Control is a browser signal that asks websites not to sell or share your information. We honour it for advertising cookies, as described in Section 3.4.5.

8. Changes to This Cookie Policy

8.1 We may update this Cookie Policy from time to time to reflect changes in the cookies we use, in technology, or in applicable law. Material changes will be communicated via in-app notice, email, or a banner on the Platform.

8.2 The date at the top of this Cookie Policy indicates when it was last revised.

9. Contact

Questions about this Cookie Policy or our use of cookies can be sent to:

ZuKeepr Inc.

914 Graythorpe Place, Victoria, BC V8X 4K5, Canada

support@zukeepr.com

zukeepr.com

─────────────────────────────────────────────────────────────────────────