Cookie Policy (DRAFT)

⚠️ Draft for review by a qualified attorney.

Effective date: August 12, 2026 · Provider: Todd Fishman (doing business as "Cinderella") — an LLC or C-Corp will be formed before the platform scales.

This Cookie Policy explains how Cinderella uses cookies and similar technologies on cinderella.fyi. It supplements our Privacy Policy.

1. What are cookies

Cookies are small text files placed on your device when you visit a website, letting the site remember your actions and preferences between visits. This policy also covers similar technologies:

• Local storage and session storage — data stored in your browser
• Pixels — small image files that track page views or actions
• SDKs and embedded scripts — third-party code that may set its own cookies

(e.g. Stripe, Google)

2. Cookies we use

2.1 Strictly necessary

Essential for the site to function — without them you cannot sign in, browse securely, or complete purchases. They cannot be disabled:

• Authentication/session — keeps you signed in (session duration)
• Security — CSRF tokens and fraud prevention (session duration)
• Checkout/payment — maintains payment session integrity (session duration)

2.2 Functional

Remember your preferences (e.g. display settings and recently viewed listings). Retained for up to 12 months.

2.3 Analytics

We use Plausible, a privacy-friendly analytics tool that is cookieless: it does not set cookies, does not track you across sites, and does not build individual profiles. Because of this, Cinderella sets no analytics cookies.

2.4 Third-party cookies

Some cookies are set by third-party services we use:

• Google (OAuth sign-in) — enables "Continue with Google" authentication;

session-scoped, governed by Google's policy.

• Stripe — payment processing and fraud prevention; governed by Stripe's

policy. These are essential for checkout.

2.5 Advertising cookies

We do not use advertising or retargeting cookies. If that ever changes, we will update this policy and obtain consent where required.

3. Cookie consent

• EU/UK users: all cookies we set directly are strictly necessary or

functional; we use no tracking or advertising cookies and our analytics are cookieless. If we ever add non-essential tracking cookies, we will ask for consent before placing them.

• California (CCPA/CPRA): we do not "sell" or "share" personal information

as those terms are defined by the CPRA. If we ever begin cross-context behavioral advertising, we will provide a "Do Not Sell or Share My Personal Information" link and honor Global Privacy Control signals.

4. Managing cookies

You can control cookies through your browser settings — view stored cookies, block all or third-party cookies, clear cookies, and set per-site preferences. Consult the cookie/privacy settings documentation for Chrome, Firefox, Safari, or Edge.

Note: if you disable strictly necessary cookies, you will not be able to sign in or complete purchases. For third-party cookies, you can also review Google's and Stripe's own cookie policies and opt-out tools.

5. Retention

• Session cookies (essential): until the browser is closed or the session

expires

• Functional cookies: up to 12 months
• Analytics: none — Plausible is cookieless
• Third-party (Stripe, Google OAuth): per those providers' policies

We periodically review retention periods to keep them no longer than necessary.

6. Updates

We may update this Cookie Policy to reflect changes in the cookies we use, in law, or in our practices. Material changes are posted here with an updated effective date; new cookie categories requiring consent will trigger a fresh consent request.

7. Contact

Questions about this Cookie Policy: privacy@cinderella.fyi. For how we handle personal data more broadly, see the Privacy Policy.