Cookie Policy

1.Scope and Definitions

"Tracking Technologies" means cookies, pixels, tags, web beacons, software development kits (SDKs), scripts, application programming interfaces, local and session storage, device and advertising identifiers, browser or device fingerprinting technologies, embedded content, session-recording or replay tools, chat and customer-support technologies, and any similar or successor technology that stores or accesses information on a device, recognizes a device or user, observes interactions, or collects, records, links, analyzes, or transmits information. References to "cookies" in the Services or this Policy include Tracking Technologies generally unless the context states otherwise.

Tracking Technologies, configurations, and providers may be added, removed, replaced, or changed as the Services, law, and available technology evolve. This Policy therefore describes the categories of technologies, providers, information, and purposes rather than identifying every individual technology or provider.

2. Information Collected or Received

Depending on the Service, device, configuration, and choices you make, Tracking Technologies may collect, record, derive, link, or receive:

(a) Device and network information, such as IP address, browser and operating-system information, device type, device and advertising identifiers, language, time zone, network information, and approximate location derived from technical signals;

(b) Usage and interaction information, such as pages or screens viewed, features used, content viewed, searches, clicks, taps, scrolling, cursor or touch movement, navigation paths, session timing and duration, errors, performance events, referral sources, and interactions with page elements;

(c) Advertising and campaign information, such as ad impressions, campaign and referral identifiers, audience membership, attribution data, and whether an advertisement, communication, registration, purchase, or other conversion event occurred;

(d) Account, transaction, and contextual information, such as logged-in status, internal or pseudonymous identifiers, subscription or purchase events, registration events, and hashed or otherwise transformed contact or account identifiers where used for matching, measurement, security, or advertising; and

(e) Inferences and linked information created by Dacr or a provider from information collected through the Services or information the provider already holds, as permitted by applicable law and the provider's own terms and privacy practices.

3.Categories and Purposes

Necessary (Required). These technologies are required to operate, secure, and deliver the Services or a feature you specifically request. Purposes may include authentication, account access, security, fraud and abuse prevention, network management, load balancing, payment and transaction support, consent and preference storage, accessibility, language or region settings requested by you, and maintaining essential session state. Necessary technologies may operate without separate consent where permitted by law and cannot always be disabled through Dacr's preference center.

Analytics and Experience. These technologies help Dacr understand, measure, troubleshoot, protect, and improve the Services and user experience. Purposes may include audience and usage measurement, interaction analytics, performance and error monitoring, product research, feature testing, service optimization, preference and experience personalization, session recording or replay, and evaluating how users navigate and interact with the Services. Where required by law, these technologies operate only after the applicable consent is given.

Advertising and Marketing. These technologies support advertising, promotion, audience creation, matching, retargeting, cross- context behavioral or interest-based advertising, personalization, frequency control, campaign management, conversion measurement, attribution, and fraud prevention. They may enable Dacr and advertising or marketing providers to recognize or associate a browser, device, account, or activity across services, devices, or contexts and may result in advertisements related to Dacr appearing on third-party services. Where required by law, these technologies operate only after the applicable consent is given.

A Tracking Technology may support more than one purpose. Dacr classifies technologies in the applicable Service and consent interface according to the purposes for which they are used. Classification based on a principal purpose does not permit a non-essential purpose to operate without any consent or choice required by applicable law. Where required by applicable law and reasonably technically feasible, Dacr separates, disables, or withholds optional functions of a multi-purpose technology until the applicable choice is made. Rejecting non-essential technologies does not disable Necessary technologies or prevent ordinary server logs, security records, transaction records, or other processing that does not depend on a non-essential Tracking Technology.

4. Third-Party Providers and Data Sharing

Dacr may use Tracking Technologies supplied or operated by categories of third parties that include analytics and measurement providers, advertising networks and exchanges, social-media and digital platforms, search and marketing platforms, session-replay and customer-experience providers, communications and customer-support providers, hosting, content-delivery, security, fraud-prevention, identity, payment, commerce, and other technology or service providers. The number, identity, and role of providers may change without a revision to this Policy when their use remains within the categories and purposes described here.

These providers may collect or receive information directly from your browser, device, or interactions with the Services and may process it on Dacr's behalf or for their own permitted purposes. Depending on the arrangement and applicable law, a provider may act as Dacr's processor or service provider, as an independent controller or business, or in another legally recognized role. Providers may use identifiers to link information across devices or services, combine it with information from other sources, generate inferences or audiences, and retain it under their own terms and privacy practices. Dacr does not control a provider's independent processing and, to the fullest extent permitted by law, is not responsible for acts or practices outside Dacr's reasonable control.

Where applicable law requires additional or more specific information, Dacr may provide it through the relevant banner, consent interface, just- in-time notice, platform permission, supplemental notice, or another legally permitted method. You may also request additional information by contacting Dacr as described below.

Current Cookies and Technologies. The tables below list the cookies and similar technologies identified through Dacr's consent- management process, together with their providers, purposes, and typical durations. The tables are populated and updated from that process as deployments change. The categories, purposes, and disclosures in this Policy apply to all Tracking Technologies in use; current details for any technology deployed between table updates are available through the cookie preference center. Before activating a new non-essential Tracking Technology that requires consent, Dacr will make the applicable disclosure and choice available as required by applicable law.

Necessary

Analytics and Experience

Advertising and Marketing

5. Consent, Acknowledgment, and Legal Bases

Necessary Tracking Technologies operate as permitted by applicable law because they are required to provide, secure, or support the Services or a function you request. By accessing or using the Services, you acknowledge the operation of Necessary Tracking Technologies.

Where applicable law requires prior consent, Dacr will seek an affirmative choice before activating non-essential Analytics and Experience or Advertising and Marketing technologies. Selecting "Accept All," enabling a category, or otherwise giving an affirmative consent through a Dacr- provided mechanism authorizes Dacr and the applicable categories of providers, before the relevant technologies operate, to:

(a) store information on, or access information from, your browser, device, application, or account;

(b) collect, observe, record, link, derive, transmit, disclose, and otherwise process the information described in this Policy;

(c) use that information for the purposes associated with the category or categories you enabled; and

(d) transfer and process that information in the United States and other countries as described in the Privacy Policy.

This authorization describes the anticipated geographic scope of processing and does not replace any transfer mechanism, contractual safeguard, assessment, notice, or other protection required by applicable law.

In jurisdictions where prior consent is not legally required, Dacr may use non-essential Tracking Technologies on another lawful basis, including legitimate interests or another basis permitted by applicable law, subject to any required notice, opt-out, or preference signal. Dacr may maintain records of your choices and consent for security, compliance, audit, dispute-resolution, and evidentiary purposes.

6. Interaction Recording; Consent to Monitoring and Interception

Analytics and Experience technologies may include session-recording, replay, monitoring, or similar tools that observe or reconstruct interactions with the Services. Depending on configuration, this may include page and screen views, clicks, taps, scrolling, cursor or touch movements, navigation, timing, technical events, interactions with page elements, and information entered into or exchanged through non-password page elements, search fields, chat interfaces, support tools, or similar features. Dacr may use masking, exclusion, or configuration controls designed to reduce collection of designated sensitive fields, but no technical control can be guaranteed to prevent every unintended capture.

To the fullest extent permitted by applicable law, by selecting "Accept All," enabling the applicable category, or otherwise providing affirmative consent after receiving this disclosure, you consent in advance, as a party to and participant in the relevant electronic interactions, to Dacr and the applicable categories of providers monitoring, observing, recording, intercepting, collecting, processing, and transmitting those interactions for the disclosed purposes. This consent is intended to constitute prior, informed, all-party consent under the California Invasion of Privacy Act, California Penal Code Sections 631 and 632, and any similar law to the maximum extent permitted. To support the authorization described in this Section, Dacr will seek affirmative consent before activating session-recording or replay technologies or third-party monitoring of chat or support content, through the applicable cookie banner, category control, platform permission, account acceptance, or conspicuous just-in-time notice. This requirement applies regardless of whether another Tracking Technology may operate on an opt-out or other lawful basis.

7.Duration and Retention

Tracking Technologies may be session-based or persistent. Their operation and duration vary according to their purpose, configuration, device, browser, Service, and provider. Some are removed when a session ends, while others remain until they expire, are replaced, are deleted, or are disabled through available controls. The specific technologies identified through Dacr's consent-management process, their providers, and their storage durations are listed in the tables in Section 4 of this Policy and in the cookie preference center, each maintained and updated to reflect Dacr's current deployment. The preference center is available through the cookie banner and the Your Privacy Choices link in the site footer. Information collected through a Tracking Technology may be retained separately from the technology itself for the period permitted by the Privacy Policy, a provider's practices, applicable contracts, and law. Deleting or blocking a Tracking Technology does not itself delete information previously collected through that technology. Dacr and applicable providers will cease processing, delete, restrict, or retain previously collected information as required or permitted by applicable law, the Privacy Policy, and any applicable independent legal obligation, lawful basis, or retention exception.

Dacr may retain consent and preference records after other Tracking Technologies expire or are deleted when reasonably necessary to demonstrate compliance, enforce agreements, prevent fraud, resolve disputes, or protect Dacr and its users.

8.Your Choices

Where available, you can accept all non-essential technologies, reject non-essential technologies, or make category-level choices through the cookie banner or preference center. You can review or change those choices through the "Your Privacy Choices" link or another privacy-control link made available in the Services. Withdrawal or opt-out applies prospectively and does not affect the lawfulness of processing lawfully conducted on the basis of valid consent before withdrawal.

Your choice may be specific to a browser, device, application, account, Service, or domain. You may need to repeat it when you use another device or browser, clear storage, use private browsing, reset identifiers, are not signed in, or access a separately configured government-branded portal. Dacr may ask you to make a new choice when consent expires, law or technology changes, or Dacr introduces a materially different purpose.

Browser, device, operating-system, and industry controls may block or delete certain technologies, limit advertising identifiers, or reduce tracking. Those controls may not affect every technology, server-side processing, information already transmitted, or processing conducted by a third party outside Dacr's control. Disabling technologies may reduce functionality, personalization, security, measurement, or the quality of the Services.

Global Privacy Control and Other Preference Signals. Dacr honors legally recognized opt-out preference signals, including Global Privacy Control (GPC), to the extent and in the manner required by applicable law. A signal may apply only to the browser or device from which it is sent and may not authenticate you across accounts or devices. A cookie preference interface may not by itself exercise every privacy right available under a U.S. state law; additional rights and submission methods are described in the Privacy Policy and the Your Privacy Choices interface.

Do Not Track. Because there is no uniform legal or technical standard for legacy Do Not Track signals, the Services do not respond to DNT unless Dacr states otherwise. Dacr may recognize newer legally required preference signals as they become applicable.

Advertising Opt-Out. Opting out of Advertising and Marketing technologies limits certain targeted, personalized, or cross- context advertising activities. It does not eliminate advertising and does not prevent ads based on context, general location, non-tracking information, or information lawfully obtained through other means.

9. Mobile Applications and Other Devices

Dacr applications and other device-based Services may use SDKs, application identifiers, advertising identifiers, push or notification tokens, local storage, device APIs, and similar technologies. Operating- system or platform permission frameworks may supplement the notices and choices described in this Policy. A platform permission does not necessarily control all analytics, storage, security, or processing within an application, and application settings may provide additional controls.

10. Government-Branded Portals and Supplemental Notices

Government-branded portals and jurisdiction-specific Services may use different configurations or categories of Tracking Technologies and may provide additional, local, or government-specific notices and controls. A government authority may determine or participate in determining certain purposes and means of processing for its portal. Where a supplemental notice applies to a particular portal or jurisdiction, it supplements this Policy and controls to the extent of a direct conflict for that portal or jurisdiction.

11.International Processing

Dacr and its providers may process information collected through Tracking Technologies in the United States and other countries. Those countries may have privacy laws different from the laws where you live. International transfers and applicable safeguards are described in the Privacy Policy. Provider systems, networks, and advertising or analytics ecosystems may route or replicate data across multiple jurisdictions.

12. Changes to Technologies and This Policy

Dacr may add, remove, replace, reconfigure, or change Tracking Technologies and providers without revising this Policy when the change remains within the categories, information types, and purposes described here. Dacr may revise this Policy when appropriate, and the effective date above reflects the latest version.

Where a current technology, provider, or storage duration is identified through the tables in Section 4 or the cookie preference center, Dacr will update that information as appropriate when the relevant deployment changes.

Material changes will be communicated as described in the Privacy Policy or through another appropriate notice. Where applicable law requires new or renewed consent for a materially different non-essential purpose, Dacr will request that consent before activating the affected technology. Continued use alone will not substitute for affirmative consent where affirmative consent is legally required; where permitted by law, continued use after notice constitutes acknowledgment of the revised Policy.

13.Contact

Questions or requests concerning this Cookie Policy may be sent to legal@dacr.com with the subject line "Cookie Policy Inquiry," or mailed to: Dacr Inc., 20801 Biscayne Blvd, Suite 506, Aventura, Florida 33180, USA.

Copyright 2026 Dacr Inc. All rights reserved.