Cookie Policy

How Phygitals uses cookies, pixels, and similar tracking technologies on our platform, and how you can manage your preferences.

1. What Are Cookies

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and supply information to the website operators.

In addition to cookies, we use similar tracking technologies such as pixels (also known as web beacons or tracking pixels), local storage, and session storage. These technologies serve similar purposes to cookies and are referenced collectively in this policy alongside cookies.

This Cookie Policy explains what cookies and similar technologies we use on the Phygitals platform (the "Service"), why we use them, and how you can manage your preferences. This policy should be read in conjunction with our Privacy Policy, which provides further details about how we process your personal data.

2. How We Use Cookies

We use cookies and similar technologies for several purposes, including:

• Authentication and Session Management: To recognize you when you log in, maintain your session, and remember your authentication state across pages;

• Security: To detect and prevent fraud, unauthorized access, and other malicious activity;

• Preferences: To remember your settings and preferences, such as language, display options, and theme;

• Analytics and Performance: To understand how users interact with our Service, measure page load times, identify errors, and improve platform performance;

• Feature Management: To manage feature flags and deliver personalized experiences through A/B testing;

• Marketing and Advertising: To measure the effectiveness of our advertising campaigns and track conversions from ads on third-party platforms.

3. Types of Cookies We Use

The cookies and tracking technologies used on our Service can be categorized as follows:

3.1 Essential Cookies

These cookies are strictly necessary for the Service to function and cannot be disabled without significantly impacting your experience. They enable core functionality such as:

• Authentication: Session tokens from Privy that maintain your login state and wallet connection;

• Security: Tokens that protect against cross-site request forgery (CSRF) and other security threats;

• Session Management: Cookies that track your active session, including cart state during pack purchases and checkout flows;

• Payment Processing: Cookies set by Coinflow and Stripe during payment flows to maintain transaction state and prevent fraud;

• Platform Preferences: Cookies that store your display settings, currency preferences, and other functional selections.

These cookies are set on a first-party basis and are typically session cookies (deleted when you close your browser) or short-lived persistent cookies. Because these cookies are essential to the operation of the Service, they do not require your consent.

3.2 Analytics & Performance Cookies

These cookies help us understand how users interact with the Service, which pages are visited most frequently, how users navigate through the platform, and where errors occur. This information helps us improve the Service and deliver a better experience. Analytics cookies we use include:

• Google Analytics: Collects data about page views, user sessions, events (such as pack openings, marketplace transactions, and feature usage), traffic sources, and user demographics. Google Analytics uses cookies such as _ga, _ga_*, and _gid. Data is processed by Google LLC. Google Privacy Policy;

• Google Tag Manager: Manages the deployment and configuration of other tracking tags. Google Tag Manager itself does not collect personal data but facilitates the loading of other analytics and marketing tags;

• PostHog: Collects product analytics data including user behavior, feature usage patterns, and feature flag assignments for A/B testing. PostHog also provides session recording functionality that captures user interactions (clicks, scrolls, page navigation) with sensitive fields masked. PostHog uses cookies and local storage to identify returning users and track sessions. PostHog Privacy Policy;

• Sentry: Captures error reports, stack traces, and browser performance data to help us identify and resolve technical issues. Sentry may use cookies or local storage for session tracking. Sentry Privacy Policy.

3.3 Marketing & Advertising Cookies

These cookies are used to measure the effectiveness of our advertising campaigns, track conversions, and build audience segments for targeted advertising on third-party platforms. Marketing cookies we use include:

• Meta (Facebook) Pixel: Tracks page views and conversion events (such as purchases and registrations) to measure the performance of advertising campaigns on Facebook and Instagram. The Meta Pixel may set cookies to associate your activity with campaign performance data. Data is processed by Meta Platforms, Inc. Meta Privacy Policy;

• Reddit Pixel: Tracks page visit events and, where available, receives hashed user identifiers (such as email address and external user ID) for advertising attribution and conversion measurement on Reddit. Data is processed by Reddit, Inc. Reddit Privacy Policy.

These cookies may track your activity across different websites and are typically set by third-party domains. They may be used to build a profile of your interests and show you relevant advertisements on other platforms.

4. Specific Tracking Technologies

The following table provides a summary of the key tracking technologies deployed on the Phygitals platform:

Technology	Provider	Type	Purpose	Duration
Google Analytics	Google LLC	Analytics	Page views, user sessions, events, traffic analysis	Up to 2 years
Google Tag Manager	Google LLC	Tag Management	Deploys and manages analytics and marketing tags	Session
PostHog	PostHog, Inc.	Analytics	Product analytics, feature flags, A/B testing, session recording	Up to 1 year
Meta (Facebook) Pixel	Meta Platforms, Inc.	Marketing	Conversion tracking, page view events	Up to 90 days
Reddit Pixel	Reddit, Inc.	Marketing	Conversion tracking, advertising attribution	Up to 90 days
Sentry	Functional Software, Inc.	Performance / Error Tracking	Error monitoring, performance tracking	Session / Up to 1 year

We use Google Analytics, Google Tag Manager, and PostHog for analytics and tag management purposes. Meta (Facebook) Pixel and Reddit Pixel are used for advertising measurement. Sentry is used for error monitoring and performance tracking.

5. Managing Your Cookie Preferences

You have several options for managing cookies and tracking technologies:

• Browser Settings: Most web browsers allow you to control cookies through their settings. You can typically set your browser to block all cookies, block third-party cookies, or alert you when a cookie is being set. The method for managing cookies varies by browser; please consult your browser's help documentation for instructions. Note that blocking essential cookies may prevent you from accessing or using certain features of the Service;

• Google Analytics Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on;

• Advertising Platforms: Most social media and advertising platforms offer ad preference controls. You can manage your ad preferences and opt out of interest-based advertising through each platform's privacy or ad settings;

• Industry Opt-Out Tools: You can opt out of interest-based advertising from participating companies through the Digital Advertising Alliance (DAA), the European Interactive Digital Advertising Alliance (EDAA), or the Network Advertising Initiative (NAI);

• Do Not Track: Some browsers offer a "Do Not Track" (DNT) signal. At this time, we do not respond to DNT signals, as there is no industry-standard approach to interpreting such signals. However, we honor Global Privacy Control (GPC) signals where required by applicable law.

Please note that if you choose to disable or block certain cookies, some features of the Service may not function properly, and your user experience may be degraded.

Cookie Consent: Where required by applicable law (including the EU ePrivacy Directive and GDPR), Phygitals presents a cookie consent mechanism upon your first visit. Non-essential cookies (analytics and marketing) are not activated until you provide consent. Essential cookies that are strictly necessary for the operation of the Service do not require consent. You may update your consent preferences at any time through the cookie settings accessible on the platform.

CCPA "Do Not Share": Under the California Consumer Privacy Act (CCPA/CPRA), the use of certain analytics and marketing cookies may constitute "sharing" of personal information for cross-context behavioral advertising. California residents may opt out of such sharing by declining analytics and marketing cookies through the consent mechanism described above or through their browser settings. Phygitals does not "sell" personal information as defined by the CCPA.

6. Third-Party Cookies

In addition to cookies set by Phygitals (first-party cookies), the Service may contain cookies set by third-party services that we have integrated into our platform. These third-party cookies are governed by the respective privacy policies of their providers, not by this Cookie Policy.

Third parties that may set cookies through our Service include:

• Google Analytics and Google Tag Manager (analytics)

• PostHog (analytics and session recording)

• Meta (Facebook) Pixel and Reddit Pixel (advertising)

• Sentry (error monitoring)

• Privy (authentication)

• Coinflow and Stripe (payment processing)

• Intercom (customer support)

• TalkJS (messaging)

• Cloudflare Turnstile (bot protection)

We do not control the cookies set by these third parties and are not responsible for their data collection practices. We encourage you to review the privacy and cookie policies of these third-party services to understand how they collect and use your data.

We also embed content or functionality from the Solana blockchain and related services. Interacting with blockchain-based features may result in on-chain transactions that are publicly recorded and permanent.

7. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies and tracking technologies we use, changes in applicable laws, or other operational changes. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, provide additional notice through the Service.

We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies and tracking technologies.

8. Contact Us

If you have any questions about this Cookie Policy or our use of cookies and tracking technologies, please contact us:

Phygitals, Inc. 1111B S Governors Ave STE 34931 Dover, DE 19904, United States Email: [email protected] General Support: [email protected]