Yieldable — Global Cookie Policy

1. What Are Cookies & Similar Technologies?

• Cookies are small text files placed on your device by websites you visit.
• Local Storage / Session Storage store data locally in your browser.
• Pixels/Tags/Beacons are small code snippets that track events (e.g., page views).
• SDKs are software components used in mobile/web apps to enable analytics or features.

These technologies support core functionality (e.g., login), measure performance, personalize content, and, where permitted, facilitate advertising.

2. How We Classify Cookies

We group cookies into the following categories:

Strictly Necessary (Essential)

Required for the Platform to function (e.g., security, network management, load balancing, session continuity, consent logging). These cannot be switched off in our systems.

Functional (Preference)

Remember your choices (e.g., language, region, theme, wallet connection preferences). Disabling may affect your experience.

Performance & Analytics

Help us understand usage (e.g., page performance, aggregated traffic). We may use privacy-centric tools (e.g., event aggregation, IP truncation). Where required, these only run with your consent.

Advertising & Measurement

Enable interest-based ads, retargeting, and campaign measurement. These store unique identifiers and may track across sites/apps. We only use these where lawful and with your consent (where required).

Social Media & Embedded Content

Enable content sharing or playback from third parties (e.g., embedded videos, social buttons). These third parties may set their own cookies.

Security & Fraud Prevention

Detect and prevent malicious activity (e.g., bot detection, abuse monitoring).

3. Legal Bases & Consent

• EU/UK (GDPR/ePrivacy): Essential cookies rely on legitimate interest; all other cookies require your consent via our cookie banner/settings. You can withdraw consent at any time in "Cookie Settings."
• U.S. (CCPA/CPRA and state laws): You may have the right to opt out of "sharing" or "selling" of personal information for cross-context behavioral advertising. We provide a "Do Not Sell or Share My Personal Information" link where applicable.
• APAC & Other Regions: We follow local requirements (e.g., APPI, PDPA, Australian Privacy Act) to obtain consent or provide opt-out mechanisms consistent with applicable law.

4. How We Use Cookies

We use cookies to:

• Operate and secure the Platform (login sessions, load balancing, fraud detection).
• Remember preferences (language, theme, wallet connection choices).
• Measure and improve performance (aggregated analytics).
• Where permitted, personalize content and measure marketing effectiveness.

We do not use cookies to access information on your device beyond what cookies store, and we do not allow third parties to set cookies for their own purposes without appropriate safeguards and, where required, your consent.

5. Managing Cookies

You can manage cookies in several ways:

• Cookie Banner/Settings: Use our on-site Cookie Settings to accept, reject, or granularly control non-essential cookies at any time.
• Browser Controls: Most browsers allow you to block or delete cookies. See your browser's help pages for instructions.
• Device Settings: Mobile devices may provide device-level settings for advertising identifiers.
• Industry Tools: You may opt out of interest-based advertising at the DAA (US), EDAA (EU), and DAAC (Canada) websites (effectiveness varies by participant and device).
• Global Privacy Control (GPC): When enabled in your browser, we treat it as an opt-out of sale/sharing (where legally required).

6. Retention

• Session cookies expire when you close your browser.
• Persistent cookies remain until their set expiry or until you delete them.

We apply proportionate retention aligned with the cookie's purpose and applicable law. Analytics data may be aggregated or pseudonymized where feasible.

7. First-Party vs Third-Party Cookies

• First-party cookies are set by Yieldable.
• Third-party cookies are set by providers acting on our behalf (processors) or by integrated services (e.g., embedded content). We contractually require processors to act only on our instructions and to protect your data appropriately.

We periodically review our third-party vendors. The exact set of cookies may change as we update services.

8. Illustrative Cookie List (Examples)

Note: The exact set of cookies may change as we update services.

A. Strictly Necessary

Cookie Name	Purpose	Type	Duration
yieldable_session	Maintains secure login/session state	First-party	Session
cookie_consent	Stores your consent choices	First-party	6–12 months
cf_* / __cf_bm	Bot management, performance, security (Cloudflare)	Third-party	Up to 30 min

B. Functional

Cookie Name	Purpose	Type	Duration
locale_pref	Saves language/region settings	First-party	Up to 12 months
ui_theme	Stores theme preferences	First-party	Up to 12 months
wallet_pref	Remembers wallet connection choices	First-party	Up to 6 months

C. Performance & Analytics

Cookie Name	Purpose	Type	Duration
_ga / _gid / _gat	Aggregated traffic insights (Google Analytics)	Third-party	Varies
plausible_ignore	Privacy-centric analytics opt-out	First/Third-party	Varies

Where required by law, analytics runs only with your consent and IP addresses may be truncated or anonymized.

D. Advertising & Measurement (if enabled)

Cookie Name	Purpose	Type	Duration
_fbp	Advertising/retargeting (Meta Pixel)	Third-party	3 months
_gcl_au	Conversion tracking (Google Ads)	Third-party	3 months
ttclid	Campaign attribution (TikTok)	Third-party	Varies

These cookies are off by default in consent-required regions and only enabled after opt-in.

E. Social & Embedded Content

• YouTube/Vimeo player cookies — Video playback and preferences (Third-party; varies).
• Social share widgets — Enable share functionality; may set third-party cookies.

9. Do Not Track (DNT) & Global Privacy Control (GPC)

• DNT: There is no common industry standard for DNT. We do not respond to DNT signals.
• GPC: We treat GPC as a valid request to opt out of sale/sharing where required by law and technically feasible.

10. Children

Our Platform is intended for adults (18+). We do not knowingly place non-essential cookies on users we know are under 18. If you believe a minor has used the Platform, contact us and we will take appropriate steps.

11. Regional Addenda

EU/UK Addendum (GDPR & ePrivacy)

• Non-essential cookies require prior consent.
• You may withdraw consent at any time via Cookie Settings.
• Legal bases: Legitimate interest (strictly necessary), Consent (all others).

U.S. Addendum (CCPA/CPRA & State Laws)

• You may have the right to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising.
• Use our "Do Not Sell or Share My Personal Information" link (where provided) and Cookie Settings to manage preferences.

APAC & Other Jurisdictions

We follow local requirements for consent/opt-out. Contact us for region-specific details if needed.

12. Updates to This Policy

We may update this Cookie Policy to reflect changes to technologies, vendors, or legal requirements. We will post updates here and revise the "Last Updated" date. If changes are material (e.g., introducing advertising cookies in a consent-required region), we will present the updated banner or otherwise notify you as required.