What cookies and similar technologies are

Cookies are small text files placed on your browser or device. Crestpal also uses similar technologies such as local storage, session storage, pixels, logs, or identifiers that help the site remember choices, maintain sessions, secure checkout flows, and understand storefront performance.

Some of these technologies are necessary for the site to function. Others are optional and are used only where allowed by law and consistent with your choices.

Essential and functional technologies

Crestpal uses essential technologies that are reasonably necessary to operate the storefront, secure sessions, remember basic selections, prevent abuse, and complete core customer actions such as login, account access, cart continuity, checkout, payment verification, and consent recording.

These technologies may remain active even if you reject optional analytics because the site cannot reliably function without them.

• Authentication, session, and security technologies used to keep users signed in and protect account or checkout activity.
• Consent and preference technologies, including the cookie-consent record currently stored as `crestpal_cookie_consent` and related settings needed to remember your choice.
• Cart, locale, navigation, or operational storage used to support basic storefront behavior and complete requested transactions.

Analytics technologies

If analytics is enabled, Crestpal may use cookies or similar storage to assign visitor and session identifiers, understand page views, measure product and checkout interactions, evaluate traffic sources, and improve the storefront experience. Based on the current implementation, Crestpal may store visitor and session identifiers in browser storage and may collect events such as page views, cart actions, product interactions, checkout flow events, and consent updates.

Analytics data may include browser or device details, referrer information, page paths, timestamps, general location signals derived from network headers, and campaign parameters. Crestpal intends analytics data to support site improvement, performance monitoring, fraud review, and commercial decision-making, not to expose full payment card data or other unnecessary sensitive information.

• Optional analytics is currently enabled by default in the banner experience unless you actively reject it, so counsel should review whether this default aligns with the laws of the regions where Crestpal operates or markets.
• You can change your analytics preference later through the cookie controls made available on the site.

Third-party technologies

Some third-party providers used by Crestpal, such as payment providers, logistics partners, map services, messaging tools, or embedded external services, may place or read their own cookies or similar identifiers when you interact with their services. Crestpal does not directly control those third-party technologies.

Those third parties operate under their own notices and settings. If you use their services, their own cookie and privacy practices may apply in addition to Crestpal's policies.

Your choices and how to manage them

You can manage optional analytics through Crestpal's cookie banner and cookie settings controls. You can also use browser or device settings to block, clear, or limit cookies and local storage, although doing so may affect login, cart continuity, checkout, or other features.

If the law in your region requires consent for non-essential technologies, Crestpal intends to honor your choice for those technologies. Withdrawing consent will not affect prior lawful processing that occurred before withdrawal.

How long cookie-related data remains

Different cookies and storage technologies remain for different periods. Some last only for a browser session, while others remain until they expire, are overwritten, or are deleted by you or Crestpal's settings logic. For example, the current cookie-consent record is configured to persist for approximately one year unless changed or removed earlier.

Analytics backups, local storage values, session identifiers, and other operational browser storage may also persist until they expire programmatically, are cleared by the browser, or are removed when preferences are changed.

Updates to this policy

Crestpal may update this Cookie Policy to reflect changes in law, technology, vendors, or business practices. The updated version will be posted on the site with a new last-updated date.

Where required, Crestpal will seek fresh consent before using materially different optional technologies.

Contact us about cookies

If you have questions about Crestpal's use of cookies or similar technologies, contact Crestpal through the support details published on the site, including cs@crestpal.com.

Counsel should review this policy together with the current consent banner flow to confirm that the deployed consent mechanism matches the jurisdictions targeted by Crestpal.