Cookie Policy

1. About This Policy

OrqestraX is a B2B operations and compliance platform operated by Orqestra LLC. It connects state-licensed operators for operator-to-operator wholesale activity in regulated industries. This policy explains how we use cookies and similar technologies (such as your browser's local storage) on orqestrax.com, what each one is for, and how you can control them. It applies to the website and the signed-in application at the same domain.

2. What Cookies and Local Storage Are

A cookie is a small text file a website stores on your device so it can recognize your browser on later requests. We also use your browser's local storage, which keeps small pieces of data on your device for similar purposes but is not transmitted with every request. Throughout this policy, "cookies" refers to both unless we say otherwise. We group everything we use into three categories below.

3. Strictly Necessary

These are required to run the platform and keep it secure. They cannot be turned off, because the site would not work without them — for example, you could not log in or stay logged in. They are set as a direct result of you using the service and are not used for tracking or advertising.

• Authentication and session — cookies set by our authentication provider (Supabase) to sign you in, keep you signed in across pages, and refresh your session securely.
• Security — cookies that help protect against fraud and request forgery and keep your session from being hijacked.
• Infrastructure — cookies used for load balancing and routing so requests reach a healthy server and the platform stays responsive.

Because these are essential, your consent is not required for them, and the consent banner does not let you switch them off. If your browser blocks them, core features — including signing in — will not work.

4. Functional

These remember choices you make so the platform behaves the way you expect. They are not strictly required, but turning them off may make parts of the experience less convenient. Where possible we keep these in your browser's local storage rather than in cookies.

• Your preferences — interface and display choices you set while using the app, so you do not have to set them again each visit.
• Your cookie-consent choice — we store the decision you make in the consent banner (for example, whether you allowed analytics) in local storage, so we can honor it and not show the banner on every page.

5. Analytics

We use basic, privacy-respecting analytics to measure how the platform is used in aggregate — for example, which pages are visited and whether features are working — so we can improve reliability and usability. We keep this minimal and aim to avoid collecting more than we need. We do not use analytics to build advertising profiles about you, and we do not sell analytics data. Analytics cookies are set only if you allow them through the consent banner; if you decline, we do not load them.

6. Our Consent Banner

We use our own first-party consent banner — we do not rely on a third-party consent-management platform. The banner appears on your first visit and lets you accept or decline non-essential (analytics) cookies. Strictly necessary cookies are always on because the platform cannot run without them. Your choice is remembered in local storage, and you can change it at any time using your browser settings (Section 7) or your privacy choices (Section 8).

7. Managing and Clearing Cookies

You can view, block, and delete cookies and clear local storage through your browser settings. Most browsers let you do this from their privacy or security menu, and offer help articles if you search for "clear cookies" for your specific browser. Keep in mind:

• Blocking or deleting strictly necessary cookies will sign you out and break core features.
• Clearing local storage will reset your saved preferences and your consent choice, so the banner will appear again.

8. No Cross-Context Behavioral Advertising

We do not use cookies for cross-context behavioral advertising, and we do not allow third parties to do so through our platform. We do not sell or share your information for targeted advertising. For more on how we handle your information and the choices available to you, see our Privacy Policy and your Privacy Choices.

9. Changes to This Policy

We may update this Cookie Policy as our platform or the technologies we use change. When we do, we will revise the "Last updated" date above. Continued use of the platform after an update means you accept the revised policy.

10. Contact

Questions about this policy? Email info@orqestrax.com.