Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and understand how you use it. Similar technologies include local storage, session storage, and pixel tags.

We use a limited number of cookies, grouped into the following categories: **Essential Cookies** (always active) These are strictly necessary for the website to function. They enable core features like page navigation, secure areas, and your cookie preference settings. Without these cookies, the website cannot function properly. Examples: • Session cookie — maintains your browsing session • Cookie consent cookie — remembers your cookie preferences • Locale cookie (NEXT_LOCALE) — remembers your language preference **Attribution Cookies** (set when you arrive from a campaign or partner link) If you reach us through an advertisement, a partner link, or a creator's referral link, we store which one it was so that we can tell which channels actually reach people — and so a partner who referred you gets credited. These cookies hold a short label such as "instagram" or a partner's referral code. They are set by us only, are readable only on intiwave.com, and are not shared with advertising networks. They do not follow you around the internet: there is no third-party pixel, no cross-site identifier, and nothing that builds a profile of you. If you arrive at intiwave.com directly, they are never set at all. **Analytics** (currently cookie-free) We measure traffic with Plausible, which sets no cookie, assigns no cross-site identifier, and reports only aggregate numbers. Nothing about it can single you out, which is why it runs without asking. **Advertising measurement** (only if you accept) Running a crowdfunding campaign means we may need to know which advertisement brought people here, which is a job the advertising platforms do with their own tags — Google Analytics and the Meta (Facebook) pixel. Those do set cookies and do recognise you across sites. So they are loaded only after you have accepted this banner. Decline, or simply ignore it, and they are never loaded; an unanswered banner counts as a no. Whatever we enable: • No cookie will ever profile your intimate preferences, the content you play, or how you use the device • Nothing from inside the app is sent to an advertising platform • We will not enable a new category of tracking without updating this policy first

| Name | Type | Purpose | Duration | |--------|------|---------|----------| | NEXT_LOCALE | Essential | Stores your preferred language | 1 year | | NEXT_LOCALE_EXPLICIT | Essential | Records that the language was your own choice, so we stop guessing it | 1 year | | intiwave_ref | Attribution | The partner or creator referral code you arrived with | 30 days | | intiwave_utm | Attribution | The campaign you arrived from (source, medium, campaign name) | 30 days | | intiwave-cookie-consent | Essential | Your choice on the cookie banner. Stored in your browser's local storage rather than as a cookie | Until you clear your browser data | Attribution entries are set at the moment you arrive, before you have answered the banner, because that first page view is the only time the information exists. We are working on bringing them under the banner's control; until then, clearing them is described in section 4, and section 7 tells you how to ask us to delete what a form submission already recorded. We will not add advertising, cross-site tracking, or profiling cookies without updating this policy first.

• **Your choice, and how to undo it**: The box below shows what you last chose and lets you withdraw it, which brings the banner back. Withdrawing reloads the page so that anything already loaded stops. • **Do Not Track**: If your browser sends a "Do Not Track" signal, advertising measurement is not loaded — even if you accepted the banner. The stricter of the two answers wins. • **Browser Settings**: Most browsers can block or delete cookies outright, including the attribution entries in section 3. Blocking the essential ones will break language switching. • **Deleting what we already recorded**: Clearing cookies stops future collection but does not reach anything a form submission already stored. For that, email us (section 7) — that is a data deletion request and we answer it.

No advertising network can place a cookie here on its own initiative, and none is loaded unless you have accepted the banner. If you do accept and we have advertising measurement enabled, the Google and Meta tags described in section 2 are third-party tags and do set their own cookies. If we embed third-party content (such as a video player in the future), we will ensure the embed does not set tracking cookies, or we will require your consent before loading such content.

We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last modified" date. For significant changes, we will display a new cookie consent prompt.

If you have questions about our cookie practices: **Email**: privacy@intiwave.com **Postal Address**: Intiwave Inc., [Address to be updated upon incorporation]