Privaata Cookie and Browser Storage Policy

Privaata Cookie and Browser Storage Policy

Effective Date: September 1, 2026 Last Updated: September 1, 2026

This Cookie and Browser Storage Policy (“Policy”) explains how Privaata, a software-as-a-service platform operated by Kinfolk Technologies Limited (“Kinfolk Technologies,” “we,” “us,” or “our”), uses cookies, browser storage and similar technologies on the Privaata website and within the Privaata application.

This Policy should be read together with the Privaata Privacy Policy.

1. What This Policy Covers

Privaata uses cookies and browser-based storage technologies to operate and secure the service, maintain user sessions, remember appropriate preferences and support the reliability and performance of the platform.

These technologies may include:

HTTP cookies;

local storage;

session storage; and

other similar browser-based technologies.

For simplicity, this Policy may collectively refer to these technologies as “cookies and browser storage.”

Privaata does not use third-party behavioural advertising cookies or advertising trackers as part of the privacy management platform.

2. What Are Cookies?

Cookies are small pieces of information that a website or online service can store through a user’s browser.

Cookies can perform different functions. For example, they can help a service recognize an authenticated session, remember preferences, maintain security controls or understand how a website performs.

Some cookies disappear when a browser session ends, while others may remain for a defined period.

3. Browser Storage and Similar Technologies

Privaata may also use browser technologies that are not technically cookies.

For example, local storage or session storage may allow the application to retain certain information necessary to provide a consistent application experience.

Because these technologies can perform functions similar to cookies, this Policy addresses them together rather than limiting the disclosure solely to traditional cookies.

4. Strictly Necessary Cookies and Storage

Privaata uses or may use cookies and browser storage that are necessary for the platform to operate securely and correctly.

Strictly necessary technologies may support functions such as:

user authentication;

maintaining authenticated sessions;

account security;

maintaining an active workspace;

secure communication with Privaata services;

preserving necessary session state;

maintaining security controls; and

remembering applicable privacy or cookie choices.

Because these technologies are necessary to provide or secure the service, they may be enabled without optional cookie consent where permitted by applicable law.

Blocking strictly necessary cookies or browser storage may prevent important parts of Privaata from functioning correctly.

5. Authentication and Sessions

Privaata may use cookies or browser storage to authenticate users and maintain secure sessions.

These technologies help Privaata determine whether a user has successfully authenticated and may reduce the need to repeatedly authenticate during an active session.

Where Privaata offers a “stay signed in” or similar function, persistent authentication information may be retained for a longer period on the user’s device.

Users should not select a persistent sign-in option on a public, shared or otherwise untrusted device.

Users should sign out when they have finished using Privaata on a device that may be accessible to others.

6. Workspace and Application Preferences

Privaata may use browser storage to remember settings that improve the user’s experience within the application.

Depending on the functionality available, these may include information necessary to remember:

an active or selected workspace;

interface preferences;

application state;

onboarding progress;

selected settings; and

similar user preferences.

These technologies allow Privaata to provide a more consistent experience without requiring the user to reconfigure appropriate preferences during every session.

7. Security and Abuse Prevention

Cookies, session information and similar technologies may also support Privaata’s security controls.

They may be used where appropriate to:

protect authenticated sessions;

identify potentially suspicious session activity;

support account-security controls;

reduce unauthorized access;

support abuse prevention; and

protect Privaata’s infrastructure and users.

Security-related storage will be treated as strictly necessary where it is reasonably required to protect the service or users.

8. Analytics and Performance

Privaata may use privacy-conscious analytics and performance technologies to understand matters such as:

website traffic;

service performance;

application reliability;

technical errors;

general usage patterns; and

opportunities to improve the service.

Privaata does not use analytics technologies to inspect Customer Data for behavioural advertising or unrelated commercial profiling.

Where an analytics technology constitutes a non-essential cookie or similar technology for which consent is legally required in a visitor’s jurisdiction, Privaata will obtain the required consent before activating that technology.

9. Cloudflare Analytics

Privaata uses Cloudflare Analytics in connection with website or service performance and traffic analysis.

The precise technologies used by Cloudflare and the information processed can depend on Privaata’s configuration and the Cloudflare services enabled.

Privaata will maintain its analytics configuration in a manner consistent with this Policy and the Privaata Privacy Policy.

The specific implementation, including whether a particular Cloudflare function uses cookies or other client-side storage, should be reflected in Privaata’s current cookie inventory.

10. No Advertising Cookies or Behavioural Advertising Trackers

Privaata does not use third-party advertising cookies or behavioural advertising trackers as part of the privacy management platform.

This means Privaata does not currently use technologies such as:

Meta Pixel;

Google Ads behavioural tracking;

TikTok Pixel;

LinkedIn advertising trackers; or

similar cross-site behavioural advertising technologies

for the purpose of tracking Privaata users across unrelated websites to build advertising profiles.

If Privaata’s practices materially change in the future, this Policy and any applicable consent mechanisms will be updated before or when those technologies are introduced, as required.

11. Customer Data Is Not Used for Advertising Profiling

Privaata is designed to help organizations manage privacy and data-protection activities.

Cookies, analytics and browser-storage technologies are not used to inspect Customer Data for behavioural advertising, advertising profiling or unrelated commercial exploitation.

Information contained within Customer workspaces is governed by the Privaata Privacy Policy, Terms of Service and, where applicable, a Data Processing Agreement.

12. Third-Party Embedded Content

The Privaata website does not currently use embedded third-party content such as YouTube or Vimeo videos, Calendly widgets, live-chat widgets or social-media widgets that independently place cookies through those embedded services.

If such functionality is introduced, Kinfolk Technologies will assess its cookie and privacy implications and update its disclosures and consent controls where appropriate.

13. Essential and Optional Technologies

Privaata distinguishes between technologies required to operate or secure the service and technologies that are optional.

Essential technologies may operate because they are reasonably necessary to provide functionality requested by the user, maintain authentication, preserve security or otherwise operate Privaata.

Optional technologies will be subject to applicable consent requirements.

Where applicable law requires prior consent for a non-essential technology, Privaata will not intentionally activate that technology before obtaining the required consent.

14. Cookie Consent

Where required, Privaata may present visitors with a cookie consent interface.

The interface may allow visitors to:

understand the categories of technologies used;

accept optional technologies;

reject optional technologies; and

manage applicable preferences.

Strictly necessary technologies may remain active because disabling them could prevent the website or application from functioning securely or correctly.

A consent interface will not be used to imply that optional tracking occurs where Privaata does not actually use such tracking.

15. Cookie Settings and Withdrawal of Consent

Where optional cookie consent applies, users should be able to review or change their choices through a Cookie Settings control or equivalent mechanism.

Withdrawing consent will apply to applicable future processing using the relevant optional technologies.

Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

Users may also manage cookies through their browser settings.

16. Browser Controls

Most browsers allow users to view, block or delete cookies and browser storage.

The exact controls vary by browser and device.

Users should be aware that blocking or deleting Privaata’s essential storage may:

sign the user out;

end an authenticated session;

reset application preferences;

require the user to authenticate again;

reset applicable consent choices; or

prevent certain Privaata functionality from operating correctly.

17. Storage Duration

Different cookies and browser-storage technologies may remain on a device for different periods.

For example:

session technologies may expire when the applicable browser session ends;

authentication technologies may remain for an appropriate authentication period;

preference storage may remain until it expires, is replaced or is deleted; and

consent records may remain for a reasonable period so Privaata can remember the user’s choices.

Privaata will maintain a technical inventory identifying the actual storage technologies used and their applicable duration where appropriate.

Because the precise technical inventory is subject to implementation changes, this Policy does not invent or prescribe cookie names or expiration periods that have not been technically verified.

18. Changes to Technologies Used

Privaata may modify the technologies used to operate the service as the platform evolves.

For example, technologies may change because of:

security improvements;

authentication changes;

infrastructure changes;

new functionality;

analytics changes;

browser developments; or

changes to third-party service providers.

When a material change affects Privaata’s privacy or cookie practices, Kinfolk Technologies will update this Policy and applicable consent mechanisms as required.

19. Changes to This Policy

Kinfolk Technologies may update this Policy periodically to reflect changes to Privaata, applicable technology, legal requirements or privacy practices.

The “Last Updated” date identifies the current version.

Where required, Kinfolk Technologies will provide appropriate notice of material changes.

20. Contact Us

Questions about Privaata’s use of cookies, browser storage or related privacy practices may be directed to:

Kinfolk Technologies LimitedPrivaata18 Geranium PathMona HeightsKingston 6Jamaica

Telephone: (876) 298-4018Privacy: privacy@kinfolktechnologies.comTechnical Support: support@kinfolktechnologies.com

End of Cookie and Browser Storage Policy