Choose a language. Until you change it, we suggest one from your region (Brazil → Portuguese, US/UK → English, Mexico/Argentina → Spanish).Start for free
Back to home

Legal

Cookie & tracking technology policy

Jurisdiction-specific versions are available below. Choose the language that matches your region or preference.

This text reflects the version supplied for your selected language and region. It does not replace advice from your lawyer.

etrovvo.com EzShopper Technologies Inc.

Cookie & Tracking Technology Policy United States · Canada · United Kingdom · Australia · New Zealand

Effective Date: May 15, 2025 Version 1.0 Language: English

1. Introduction etrovvo.com ('etrovvo', 'we', 'us', 'our') uses cookies and similar tracking technologies on our Platform to operate core functionality, understand how visitors use our site, measure advertising effectiveness, and improve user experience. This Cookie Policy ('Policy') explains what these technologies are, why we use them, and your choices and rights regarding them. This Policy supplements our Privacy Policy (available at etrovvo.com/privacy) and forms part of our commitment to transparent data practices. Please read it carefully.

2. What Are Cookies and Tracking Technologies? Cookies are small text files placed on your device (computer, tablet, mobile) when you visit a website. They allow the website to recognize your device and store information about your preferences or past actions. Other tracking technologies we use include: • Pixel tags / Web beacons: Tiny invisible images embedded in web pages or emails that register when a page is opened or an email is read. • Local storage: Data stored directly in your browser (similar to cookies but persists longer). • Session replay scripts: Code that records mouse movements, clicks, and scrolling patterns during a session (anonymized and used for UX improvement). • Fingerprinting data: Technical attributes of your device/browser may be collected in limited contexts for security purposes.

3. Why We Use These Technologies We use cookies and tracking technologies for four main purposes: • Strictly Necessary: To make the Platform work — authentication, shopping cart, security. • Functional / Preference: To remember your settings (language, currency, region). • Analytics & Performance: To understand how visitors interact with the Platform so we can improve it. • Marketing & Advertising: To measure campaign effectiveness, retarget visitors, and personalize ads across third-party platforms.

4. Tracking Tools We Use — Detailed Inventory The following table lists every third-party tracking service active on etrovvo.com, the cookies they set, their purpose, and how long they persist.

4.1 Google Analytics 4 (GA4) Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Purpose: measures website traffic, user behavior, conversion paths, and attribution. Data is transferred to the USA (Google's servers) and governed by Google's Data Processing Terms and the EU Standard Contractual Clauses. Opt-out: tools.google.com/dlpage/gaoptout | Google Analytics Opt-out Browser Add-on

Cookie Name Type Purpose Duration Party _ga Analytics Assigns a unique Client ID to distinguish users across sessions 2 years 3rd _ga_XXXXXXXX Analytics Stores and updates session count and campaign attribution data (GA4 specific) 2 years 3rd _gid Analytics Distinguishes users; refreshes every 24 hours 24 hours 3rd _gat Analytics Throttles request rate (limits data collection at high traffic volumes) 1 minute 3rd _gac_XXXXXXXX Analytics / Ads Stores campaign-related information for Google Ads conversion linking 90 days 3rd

4.2 Google Ads (Google Advertising Platform) Provider: Google LLC. Purpose: conversion tracking (measures actions taken after clicking a Google Ad), remarketing (serves targeted ads to previous visitors on the Google Display Network and Search), and audience building. Data transferred to the USA under Google's DPA and SCCs. Opt-out: adssettings.google.com | youronlinechoices.eu (EU) | optout.aboutads.info (US)

Cookie Name Type Purpose Duration Party _gcl_aw Marketing Stores Google Ads click information (gclid) for conversion measurement 90 days 3rd _gcl_dc Marketing DoubleClick click ID for cross-channel attribution 90 days 3rd _gcl_gb Marketing Google Ads Browser ID for remarketing audiences 90 days 3rd _gcl_gf Marketing Google Ads conversion for Goal Flow tracking 90 days 3rd _gcl_ha Marketing Google Ads HA conversion tracking parameter 90 days 3rd NID Marketing Stores user preferences for Google services; used for ad personalization 6 months 3rd IDE Marketing Google DoubleClick: used to track user interactions with ads and measure conversions 13 months 3rd

4.3 Meta Ads — Meta Pixel (Facebook / Instagram) Provider: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Purpose: conversion tracking (measures purchases and other actions after clicking Meta ads), remarketing/retargeting (serves ads to previous visitors on Facebook, Instagram, and the Meta Audience Network), and Custom Audience building. Data transferred to the USA under Meta's Data Processing Terms and SCCs. Opt-out: facebook.com/adpreferences | youronlinechoices.eu | Global Privacy Control (GPC) honored ⚠ Under the CCPA/CPRA, sharing data with Meta Pixel for advertising cross-context behavioral targeting constitutes 'sharing' personal information. California residents may opt out via: privacy@etrovvo.com (Subject: 'Do Not Sell or Share My Personal Information').

Cookie Name Type Purpose Duration Party _fbp Marketing Facebook Pixel: identifies browser for ad delivery, frequency capping and conversion tracking 3 months 3rd _fbc Marketing Stores Facebook ad click data (fbclid parameter) to attribute conversions to specific ad clicks 2 years 3rd fr Marketing Facebook: encrypted Facebook ID and browser ID for targeted advertising 3 months 3rd datr Marketing Facebook: browser identification for security and integrity purposes 2 years 3rd

4.4 Microsoft Clarity Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Purpose: behavioral analytics — records anonymized session replays, generates heatmaps, and analyzes click/scroll behavior to identify UX friction points. Microsoft Clarity automatically masks sensitive form fields (passwords, credit card inputs). Session recordings are never used for advertising targeting. Data transferred to the USA under Microsoft's DPA and SCCs. Opt-out: clarity.microsoft.com | privacy.microsoft.com/en-US/privacystatement Microsoft Clarity automatically filters and obfuscates content that could contain sensitive personal data, including form inputs, text fields, and financial information. We have configured Clarity to mask all input fields on etrovvo.com.

Cookie Name Type Purpose Duration Party _clck Analytics Persists the Clarity user ID and preferences specific to the website 1 year 3rd _clsk Analytics Connects multiple page views by the same user in a single Clarity session recording 1 day 3rd CLID Analytics Identifies the first time Clarity saw this user on any site using Clarity 1 year 3rd ANONCHK Analytics Checks whether cookies can be stored; also used for Bing Ads reporting 10 minutes 3rd MR Analytics Indicates whether to refresh MUID 7 days 3rd MUID Analytics Identifies unique web browsers visiting Microsoft sites (used by Clarity and Bing) 13 months 3rd SM Analytics Used in synchronizing the MUID across Microsoft domains Session 3rd

4.5 Platform Operational Cookies (First-Party — Strictly Necessary) These cookies are set by etrovvo.com itself and are required for the Platform to function. They do not require consent.

Cookie Name Type Purpose Duration Party session_id Necessary Maintains your authenticated session; invalidated when you log out Session 1st csrf_token Necessary Prevents Cross-Site Request Forgery attacks Session 1st cart_token Necessary Preserves shopping cart contents between pages 7 days 1st cookie_consent Necessary Stores your cookie consent preferences to avoid repeated prompts 13 months 1st lang Functional Stores your preferred display language 1 year 1st currency Functional Stores your preferred display currency 1 year 1st

4.6 Payment Provider Cookies (Third-Party — Strictly Necessary) Stripe and PayPal set cookies required for fraud prevention and secure transaction processing. These are strictly necessary and cannot be disabled without breaking payment functionality.

Cookie Name Type Purpose Duration Party __stripe_mid Necessary Stripe: device fingerprint for fraud prevention and risk scoring 1 year 3rd __stripe_sid Necessary Stripe: short-term session identifier for fraud detection during checkout 30 minutes 3rd ts Necessary PayPal: fraud prevention and session authentication 3 years 3rd ts_c Necessary PayPal: fraud prevention and session authentication (secure) 3 years 3rd nsid Necessary PayPal: session identifier during PayPal flow Session 3rd

5. Consent — How We Obtain and Manage It 5.1 Consent Mechanism When you first visit etrovvo.com from a jurisdiction where prior consent is required (EU, UK, and others), you will see a Cookie Consent Banner. You may: • Accept All: enables all cookie categories including analytics and marketing. • Reject All (or Accept Necessary Only): enables only strictly necessary and functional cookies; all analytics and marketing cookies are blocked. • Manage Preferences: select individual cookie categories. Your preference is stored in the 'cookie_consent' cookie for 13 months. You may change your preferences at any time via the 'Cookie Settings' link in our website footer.

5.2 Google Consent Mode v2 For users in the EU and UK, we have implemented Google Consent Mode v2. This means Google Ads and Google Analytics are loaded in a restricted mode until consent is granted. If you decline analytics or marketing cookies, Google will collect minimal, non-identified data for modeling purposes only (no personal identifiers are transmitted).

5.3 Meta Consent Mode The Meta Pixel is only activated after you consent to marketing cookies. If you decline, no Meta cookies are set and no data is sent to Meta.

6. Your Rights and Choices by Jurisdiction

6.1 European Union / France / Italy / Netherlands — GDPR Legal basis for non-essential cookies: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. • Right to withdraw consent: via the Cookie Settings panel on etrovvo.com. • Right to access and portability of your data: see our Privacy Policy. • Right to lodge a complaint: with your national supervisory authority (CNIL — France: www.cnil.fr | Garante — Italy: www.garanteprivacy.it | AP — Netherlands: www.autoriteitpersoonsgegevens.nl).

6.2 United Kingdom — UK GDPR + PECR The Privacy and Electronic Communications Regulations (PECR) require prior consent for non-essential cookies. Our consent mechanism satisfies PECR requirements. You may withdraw consent at any time via Cookie Settings. Complaints: ICO (www.ico.org.uk).

6.3 United States — CCPA / CPRA Under California law, sharing personal information via analytics and advertising cookies with Google, Meta, and Microsoft for cross-context behavioral advertising may constitute 'sharing' personal information as defined by the CPRA. California residents have the right to: • Opt out of the sale or sharing of personal information: email privacy@etrovvo.com with subject 'Do Not Sell or Share My Personal Information', or use the 'Do Not Sell or Share' link in our website footer. • Honor Global Privacy Control (GPC) signals: etrovvo.com recognizes GPC browser signals as an opt-out of sale/sharing. • Non-discrimination: exercising this right will not affect your access to our services. Residents of Virginia, Colorado, Connecticut, Texas, Oregon, and other states with comprehensive privacy laws have similar opt-out rights. Contact privacy@etrovvo.com.

6.4 Canada — PIPEDA + Quebec Law 25 Non-essential cookies require meaningful consent under PIPEDA. Quebec Law 25 requires explicit consent for technology products that collect personal information. Our consent mechanism satisfies these requirements. You may withdraw consent at any time.

6.5 Brazil — LGPD Tracking cookies that process personal data require a legal basis under the LGPD, primarily consent (Art. 7(I)). You may withdraw consent at any time via Cookie Settings. All third-party data transfers comply with Art. 33 of the LGPD.

6.6 Australia / New Zealand We do not rely on opt-out consent for analytics or marketing cookies from Australian or New Zealand users; however, you may manage your preferences via Cookie Settings at any time. You may also opt out using the tool-specific opt-out links listed in Section 7.

7. How to Control Cookies 7.1 etrovvo.com Cookie Settings Use the 'Cookie Settings' link in the footer of any page on etrovvo.com to review and change your consent preferences at any time.

7.2 Tool-Specific Opt-Out Links Tool Opt-Out / Control Link Google Analytics tools.google.com/dlpage/gaoptout Google Ads Personalization adssettings.google.com Meta (Facebook) Ads facebook.com/adpreferences/ad_settings Microsoft Clarity privacy.microsoft.com/en-US/privacystatement Microsoft Advertising / Bing account.microsoft.com/privacy Network Advertising Initiative (NAI) optout.networkadvertising.org Digital Advertising Alliance (DAA — USA) optout.aboutads.info Your Online Choices (EU / UK) youronlinechoices.eu

7.3 Browser-Level Controls You can block or delete cookies through your browser settings. Instructions for the most common browsers: • Google Chrome: Settings > Privacy and security > Cookies and other site data • Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data • Apple Safari: Preferences > Privacy > Manage Website Data • Microsoft Edge: Settings > Cookies and site permissions > Cookies and data stored Note: Disabling all cookies through browser settings may prevent certain Platform features from functioning correctly. Strictly necessary cookies cannot be disabled without breaking core functionality.

7.4 Mobile Devices • iOS (iPhone/iPad): Settings > Privacy & Security > Tracking — disable 'Allow Apps to Request to Track.' • Android: Settings > Google > Ads — enable 'Opt out of Ads Personalization.'

7.5 Global Privacy Control (GPC) etrovvo.com recognizes the Global Privacy Control (GPC) browser signal as an opt-out of the sale or sharing of personal information for California residents and other applicable jurisdictions. Enable GPC in a compatible browser (e.g., Firefox, Brave) or browser extension to automatically signal your preference.

8. Data Transfers to the United States All third-party tracking tools we use (Google, Meta, Microsoft) are headquartered in the United States. When cookies collect personal data and transmit it to these providers, that data is transferred to the USA. We rely on the following safeguards for these transfers: • Google: EU-U.S. Data Privacy Framework (adequacy decision) + Standard Contractual Clauses (SCCs). • Meta: EU-U.S. Data Privacy Framework + SCCs. • Microsoft: EU-U.S. Data Privacy Framework + SCCs. For UK-to-USA transfers, we rely on the UK International Data Transfer Agreement (IDTA) where required. For transfers from Brazil, we rely on the contractual clauses and data protection agreements in place under Art. 33 of the LGPD.

9. Data Retention via Cookies Data collected via cookies is retained in accordance with each provider's retention practices and the durations specified in the cookie tables in Section 4. For analytics data retained by Google Analytics, we have configured a data retention period of 14 months in our GA4 property settings. Session recordings in Microsoft Clarity are retained for 30 days by default.

10. Children Our Platform is intended for users aged 18 and over. We do not knowingly permit tracking of minors. No tracking tools are activated for sessions where the user is identified as being under 18.

11. Changes to This Policy We may update this Cookie Policy to reflect changes in our tracking practices, the tools we use, or applicable legal requirements. We will notify you of material changes by updating the Effective Date above and displaying a notification on the Platform. Where required by law (e.g., EU/UK GDPR), we will re-request consent if we make material changes to our use of non-essential cookies.

12. Contact etrovvo.com Privacy Team / Cookie Compliance EzShopper Technologies Inc., Delaware, USA Email: privacy@etrovvo.com

© 2026 EzShopper Technologies Inc. — etrovvo.com. All rights reserved.