Stiple Cookie Policy

Cookies are small text files that are stored on your device (computer, tablet, or phone) when you visit a website. They are widely used to make websites work, to remember your preferences, and to help website operators understand how their sites are being used.

Cookies can be "session" cookies, which are deleted when you close your browser, or "persistent" cookies, which remain on your device for a set period of time or until you delete them manually.

Cookies can be set by the website you are visiting ("first-party cookies") or by third-party services that the website uses ("third-party cookies").

We also use similar technologies such as local storage (which stores data in your browser without an expiration date) and session storage (which stores data for the duration of your browser session). Throughout this policy, we use the term "cookies" to refer to all of these technologies collectively.

We use cookies for the purposes described in the table below. We have categorized them by type so you can understand which cookies are essential for the Services to function and which are optional.

The above two categories are the only cookie categories Stiple uses across stiple.ca and labs.stiple.ca. We do not use analytics cookies, advertising cookies, or any third-party tracking on our own properties.

Transparency is one of our core values. We want you to know not only what we do with cookies, but also what we deliberately choose not to do. Stiple does not use any of the following:

• Analytics cookies. We do not run any first-party or third-party web analytics on stiple.ca or labs.stiple.ca.
• Advertising cookies. We do not serve ads on our platform and do not use cookies to build advertising profiles or serve targeted advertisements.
• Third-party tracking cookies. We do not allow third-party advertising networks to place tracking cookies on our websites or within our applications.
• Social media tracking pixels. We do not embed tracking pixels from social media platforms (such as Facebook Pixel, LinkedIn Insight Tag, or Twitter conversion tracking) that would monitor your activity on our sites.
• Cross-site tracking. We do not track your browsing activity across other websites. Our cookies are used exclusively within Stiple's own web properties.
• Data selling. Stiple does not sell, rent, trade, or otherwise monetize cookie data, user tracking data, or any analytics data derived from your use of our Services. Period.

We use a limited number of third-party services that may set their own cookies when you use our Services. We carefully select privacy-respecting providers and minimize third-party cookie usage wherever possible.

4.1 Payment Processing

If you purchase a paid Stiple Labs subscription, our payment processor Stripe may set cookies necessary to process your payment securely and to prevent fraud. Payments apply to Stiple Labs only; the Mapdesk app is free and involves no payment processing. These cookies are strictly necessary for the transaction and are governed by Stripe's own cookie and privacy policies.

• Stripe: stripe.com/privacy · stripe.com/cookie-settings

4.2 Authentication Providers

Authentication for the Services is provided by WorkOS (workos.com/privacy). WorkOS may set cookies necessary for authentication, session management, and SSO/OAuth flows. If you sign in using an identity provider facilitated through WorkOS (such as Google or Microsoft single sign-on), that identity provider may also set its own cookies as part of the authentication flow. These cookies are governed by the respective provider's privacy and cookie policies.

For the full list of sub-processors and where data is located, see the Stiple Sub-Processor List at stiple.ca/legal/sub-processors.

5.1 Cookie Consent

When you first visit our websites, you will see a cookie consent banner that allows you to accept or decline non-essential cookies. You can change your preferences at any time through our cookie settings panel, accessible from the footer of any page on our websites.

5.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically set your browser to block all cookies, block only third-party cookies, or delete cookies when you close your browser. The method varies by browser:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Manage and delete cookies

For more detailed instructions, consult your browser's help documentation.

5.3 Impact of Disabling Cookies

If you disable strictly necessary cookies, the Services may not function correctly. You may be unable to sign in, maintain a session, or access core features. Disabling functional cookies will not prevent you from using the Services, but some preferences may not be remembered between sessions.

You have the right to:

• Withdraw consent for non-essential cookies at any time, through our cookie settings panel or by adjusting your browser settings. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal;
• Access information about the cookies we use and the purposes for which we use them (this policy serves that purpose);
• Request deletion of cookie data we hold about you, to the extent technically feasible.

For broader rights regarding your personal information (including rights of access, correction, withdrawal of consent, and data portability) under PIPEDA and Quebec's Law 25, please refer to the Stiple Privacy Policy at stiple.ca/legal/privacy.

We may update this Cookie Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document;
• Post the revised policy at stiple.ca/legal/cookies;
• Where the changes are significant, notify you through a cookie consent banner or other reasonable notice.

We encourage you to review this policy periodically.

If you have questions about this Cookie Policy, our use of cookies, or your rights, please contact our Privacy Officer.