Cookie Policy

1. Overview

This Cookie Policy explains how TokenUity LLC (“TokenUity”, “we”) uses cookies and similar technologies on the TokenUity Platform (the “Platform”), and is incorporated into the Privacy Policy and Terms of Service. The TokenUity application itself sets no cookies. TokenUity does not use advertising cookies, cross site tracking cookies, or behavioral advertising cookies. We do not collect analytics about your activity across the Platform, and we do not sell or share cookie data. A one way hash of your IP address is collected separately for fraud and chargeback defense and procurement audit logging, as disclosed in the Privacy Policy; cookies are not used to collect, log, or track your IP address.

2. What We Do Not Do

• No product analytics or session replay tracking: the in app activity log is stored only in your browser's local storage and never transmitted to TokenUity or any third party.
• No advertising or cross context behavioral advertising cookies.
• No third party tracking pixels, marketing tags, or social media tracking.
• No cookies used to profile you for advertising or to build a cross site behavioral profile.

3. Cookies Set by the Hosting Platform

The Platform is hosted on infrastructure operated by the platform provider, Base44 (operated by Wix.com), which may set strictly necessary operational cookies to keep the service available and secure, for example, to route requests, protect against automated abuse of the infrastructure, and maintain the integrity of the runtime environment. Authentication on the Platform is token based and does not rely on a browser cookie; these operational cookies are not used to identify you personally or to track your activity. They are essential to the functioning of the Platform and cannot be disabled without preventing you from signing in or remaining signed in.

• Operational / runtime cookies: set by the hosting platform to keep the service available, route requests, and protect against automated abuse of the infrastructure.

4. Cookies Set by Cloudflare Turnstile

The registration and procurement request forms use Cloudflare Turnstile to screen for automated abuse. Turnstile may set one or more cookies (typically prefixed “cf_”) on the visitor's browser to validate that the request is from a real human. These cookies are limited to bot screening and do not carry your business, report, or vault data. Because Turnstile is required to prevent automated abuse of the signup and procurement flows, blocking these cookies may prevent you from submitting those forms.

5. Cookies Set by Stripe

Card and bank checkout and subscription billing are handled by Stripe, a PCI DSS compliant payment processor. When you are redirected to a Stripe hosted checkout page, Stripe sets its own cookies on the Stripe domain to maintain the integrity of the checkout session and prevent fraud. TokenUity does not control and does not receive the contents of Stripe's cookies; your full card details never reach the Platform. Stripe's use of cookies is governed by Stripe's own privacy policy, available at stripe.com. Digital asset payments (USDC on the Base network) are facilitated and settled by Coinbase Developer Platform (CDP) as an on chain wallet transaction and do not use a Stripe hosted checkout page, so no Stripe cookies are set for that payment path; any cookies set by Coinbase's own hosted components are governed by Coinbase's privacy policy.

6. Managing & Deleting Cookies

Because the operational, Turnstile, and Stripe cookies are strictly necessary to operate the Platform, blocking them will impair or prevent sign in, form submission, and checkout. You may clear these cookies at any time through your browser settings, which may sign you out. You can manage or disable third party cookies (Stripe, Cloudflare) in your browser, though doing so may affect checkout or form submission. Instructions for managing cookies in popular browsers are available in each browser's help documentation.

7. Consent

To the extent any cookie on the Platform is not strictly necessary under applicable law (for example, under the ePrivacy Directive in the EEA/UK), your continued use of the Platform after being presented with this Cookie Policy constitutes your consent to that cookie. TokenUity does not deploy a separate consent banner because it does not use nonessential analytics or advertising cookies.

8. Changes to This Policy

If TokenUity introduces any cookie or similar technology beyond those described above, we will update this Cookie Policy and reflect the change by the “Last updated” date, and where required by applicable law we will notify registered organization admins in advance.