Cookie Policy & Consent Notice

This Cookie Policy explains how ConstructionPartsNetwork.com (“we,” “us,” “our”) uses cookies and similar technologies on the Platform, and how you can manage your preferences. We currently use cookies only for functional purposes. We also use Stripe, which sets cookies needed for onboarding and secure payments. ________________________________________________________ 1) What are cookies? Cookies are small text files stored on your device by your browser. They can be “session” (deleted when you close your browser) or “persistent” (kept until they expire, or you delete them). ________________________________________________________ 2) How we use cookies (categories) - Strictly necessary / functional (always on): required to sign in, keep you logged in, remember your cookie preferences, and enable secure payments. - Preferences (optional): remember choices like language or saved filters. - Analytics (optional): help us understand site usage to improve features (e.g., Google Analytics configured for privacy). - Marketing/advertising: Not used. We do not run third-party ads or use ad tracking. ________________________________________________________ 3) Cookies we set (current) Cookie / Storage Category Purpose Typical Duration cookieConsent Functional Stores your granular cookie preferences 6-12 months (essential / preferences / analytics / marketing) + timestamp accessToken Functional Short-lived token to authorize API calls Hours (short TTL) (Auth) (session security) refreshToken Functional Rotating token to obtain new access tokens; Up to 30-90 days moving to HttpOnly cookie _ga Analytics Used by Google Analytics to distinguish Up to 2 years visitors and measure site usage _ga_* Analytics Used by Google Analytics to persist Up to 2 years session state Stripe cookies Functional / Required for Stripe Connect Per Stripe's policy (various, set by Security onboarding and secure payment Stripe) processing (fraud prevention, session continuity) Note on storage: accessToken and refreshToken are currently stored in web storage/cookies as applicable; we are migrating refresh tokens to HttpOnly cookies to enhance security. ________________________________________________________ 4) Google Analytics We use Google Analytics to understand how visitors use the Platform, such as which pages are visited, how users move through the site, and whether features are working as intended. This helps us improve the Platform and troubleshoot issues. Google Analytics may set cookies such as _ga and _ga_* when analytics cookies are accepted. These cookies help Google Analytics distinguish visitors and maintain session information. We do not use Google Analytics to serve third-party advertisements. We also do not use Google Analytics for cross-context behavioral advertising. You can turn analytics cookies on or off at any time using the “Cookie Settings” link in the footer or go to "More" menu than "User Settings" and then click on "Cookie Settings". ________________________________________________________ 5) Managing your cookie preferences - Cookie banner & preferences center: Use the banner on first visit and the “Cookie Settings” link in the footer to adjust choices at any time. - Browser controls: You can block or delete cookies via your browser settings (may impact functionality). - Global Privacy Control (GPC): If applicable in your region, we endeavor to honor GPC signals for analytics/marketing categories. Essential/functional cookies are required for the site to operate and cannot be switched off. ________________________________________________________ 6) Third-party cookies - Stripe: Sets cookies necessary for payments and seller onboarding. See Stripe Privacy Policy: https://stripe.com/privacy. - Google Analytics: If analytics cookies are accepted, Google may set cookies to measure site usage. Learn more: https://policies.google.com/technologies/cookies We do not serve third-party advertisements. ________________________________________________________ 7) Do we “sell” or “share” personal information via cookies? No. We do not sell personal information, and we do not share it for cross-context behavioral advertising under CPRA. If this changes (e.g., enabling ad features), we will update this Policy and provide required opt-out mechanisms. ________________________________________________________ 8) Changes to this Cookie Policy We may update this Cookie Policy as our use of cookies evolves (for example, when enabling analytics). We will post the updated version with a new effective date and, where required, request consent again. ________________________________________________________ 9) Contact Questions about cookies? Email support@constructionpartsnetwork.com.