Cookie and Browser Storage Notice

1. Scope

Effective date: for each account, the date the account is created and this agreement is accepted (published October 4, 2026). This Notice applies to cookies, local storage, session storage, and similar technologies used by Ownsera, operated by Ownsera and its stakeholders. It should be read with our Privacy Policy. These technologies can store information on, or access information from, a device. Some are necessary to provide a requested service; others require a separate choice.

A technology's purpose and actual behavior determine how it is treated. Calling something 'essential' does not make unrelated advertising, profiling, or optional monitoring necessary.

2. Necessary and requested functions

Authentication and sessions: Supabase authentication uses browser storage to support sign-in and sessions. This information allows the service to recognize an authenticated session and apply access permissions. Signing out removes or invalidates the applicable session information according to the authentication system's operation. Blocking required authentication storage can prevent signed-in features from working.

Company preference: the service can keep the selected-company identifier in local storage under a key beginning 'ownsera:selected-company:'. This supports your selected workspace view. Local storage can remain until replaced, removed by the application, or cleared through browser settings; it is not automatically a short-lived cookie.

Payment and security functions: embedded Stripe features and supporting infrastructure may use technologies necessary for the payment or security functions you request. The applicable feature and provider information should identify the technologies used. A provider must not receive private financial inputs merely because it supports payments.

Information required to remember your privacy choice may itself be stored so that the service can honor that choice. Necessary functions remain limited to their disclosed purpose.

3. Optional technologies and consent

Optional advertising, cross-service tracking, session recording, or analytics technologies must not be activated unless the relevant notice and required choice or other lawful authorization have been implemented. When optional technologies are offered, you can accept, reject, or customize them through the privacy controls provided with that feature. Rejecting optional technologies must be as straightforward as accepting them.

Your preferences can be changed or consent withdrawn through the available privacy controls or by contacting ops@ownseraiq.com. Withdrawal stops the future activity covered by that choice; it does not undo processing that lawfully occurred before withdrawal. We will not treat silence, scrolling, continued browsing, or acceptance of general Terms as consent to optional tracking.

Some jurisdictions allow narrowly defined functions without consent when their conditions are satisfied. We must assess those conditions before relying on an exception and provide required information and objection rights. We do not treat every type of analytics as exempt.

4. Global Privacy Control and Do Not Track

Where required by applicable law, a recognized Global Privacy Control or other qualifying opt-out preference signal is treated as a request to stop the covered sale, sharing, or targeted-advertising processing. That request applies to the relevant browser or identifiable account according to the applicable requirements. It does not require disabling technologies needed for authentication, security, or a requested transaction.

Ownsera does not change its practices in response to legacy browser Do Not Track signals. This is separate from its treatment of Global Privacy Control and other qualifying opt-out preference signals described above. Browser and device settings may independently limit storage or tracking.

5. Browser controls and shared devices

You can inspect, restrict, or clear cookies and browser storage using your browser's settings. Clearing storage may sign you out, reset the selected company, or remove a recorded privacy choice. A preference recorded in one browser may not carry to another device or browser. On shared devices, sign out and avoid leaving downloaded confidential information accessible to others.

Before an additional technology is enabled, the relevant inventory must identify its provider, purpose, information handled, storage duration or persistence, and available control. Its function must match the description given to users.

6. Contact and updates

Questions about this Notice or a technology used by the service may be sent to ops@ownseraiq.com. Material changes will be reflected in the effective date and any additional notice or choice required before the changed use begins.