1. Introduction

This Cookie Policy (hereinafter referred to as the “Policy”) describes how STOQ FZ-LLC (FDRK5298, Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates), the provider of the STOQ platform (hereinafter referred to as “STOQ,” “we,” or “us”), uses cookies and similar technologies when users interact with the Service, including the website, web application, mobile applications, and other technical components of the platform.

This Policy constitutes an integral part of the STOQ Privacy Policy and is applied in conjunction with the Terms of Use (Terms of Service) and the Refund Policy. This Policy applies to all individual users of the Service. By using the Service, you acknowledge that you have read this Policy.

If you have any questions regarding this Policy, please contact: privacy@stoq.global.

2. What Are Cookies and Similar Technologies

A cookie is a small text file that a website or application saves on the user’s device when accessing the Service. Cookies enable the Service to recognise the user’s device upon subsequent visits, retain user preferences, and ensure the proper functioning of the platform’s features.

In addition to cookies, STOQ may use similar technologies, including:

• web beacons (“pixels”) — small graphic files embedded in pages or emails that enable the recording of the fact of download or opening

• device identifiers — unique identifiers of mobile devices used for analytics and security purposes

• local storage (localStorage, sessionStorage) — browser-based data storage technologies that are not automatically transmitted to the server

• third-party SDKs and libraries — embedded software components from analytics providers, payment systems, or user support services

• session logs and technical logs — records of user actions in the interface used for diagnostics and security purposes.

In this Policy, all of the aforementioned technologies are referred to collectively as “cookies,” unless otherwise specified.

3. Types of Cookies Used by STOQ

STOQ uses the following categories of cookies:

3.1. Strictly Necessary cookies (Essential / Strictly Necessary)

These ensure the basic operation of the Service. Without them, the use of the platform is not possible. This category includes:

• authentication and session management cookies (maintaining logged-in status of the account)

• security cookies (protection against CSRF attacks, request verification tokens)

• subscription management cookies (identification of the active Subscription status and subscription plan)

• cookies necessary for payment processing through the payment provider (transmission of technical parameters to the payment page)

• load balancing cookies (distribution of requests across servers).

Legal basis: legitimate interest and performance of the contract. User consent is not required for this category — these cookies cannot be disabled without disrupting the functioning of the Service.

3.2. Functional Cookies (Functional / Preference)

These retain user preferences and enable interface personalisation:

• interface language and regional settings

• display theme (light / dark, if applicable)

• user-defined data display and interface settings

• notification preferences.

Legal basis: legitimate interest. In jurisdictions requiring consent, this category is included in the consent banner.

3.3. Analytics and Performance Cookies

These are used to collect aggregated data on Service usage for the purpose of its improvement:

• page visit and feature usage statistics

• performance data (load times, interface errors)

• crash reports and technical incident reports

• A/B testing of new features.

STOQ may use third-party analytics tools (see Section 6). Data is collected in aggregated or anonymised form and is not used to identify specific users for marketing purposes.

Legal basis: legitimate interest (subject to anonymisation) or user consent (depending on the jurisdiction).

3.4. Security and Fraud Prevention Cookies

These are used to detect suspicious activity and protect the Service and its users:

• detection of anomalous behavioural patterns and unauthorised access attempts

• anti-fraud checks during payment processing

• device identification upon account or region change

• protection against automated requests (bot detection).

Legal basis: legitimate interest (ensuring the security of the Service and the protection of users).

3.5. Advertising and Marketing Cookies

STOQ does not currently use advertising cookies for targeted advertising in third-party networks. If such technologies are implemented in the future, users will be notified in advance and will be given the opportunity to manage their preferences through the consent mechanism (consent banner) prior to the commencement of use of the relevant tools.

Legal basis (upon introduction): explicit user consent (opt-in).

4. Purposes for Which STOQ Uses Cookies

5. Cookies Related to Account, Subscription, Billing, and Refunds

STOQ is a subscription-based platform. A number of cookies and technical identifiers are inseparable from the processes of Subscription management, payment processing, and refund handling.

5.1. Subscription and Access Status Management

During each session with the platform, STOQ uses technical identifiers to determine:

• Subscription status (active, suspended, expired, trial period)

• subscription plan and available functionality

• next charge date and payment period

• access rights to specific sections and features depending on the subscription plan.

These data are necessary for the proper provision of paid functionality and fall within the strictly necessary category.

5.2. Payment Processes

During the Subscription payment process, STOQ interacts with third-party payment providers certified under the PCI DSS standard. The payment provider may set its own technical identifiers on payment pages for the purposes of:

• transaction processing and payment instrument identification

• anti-fraud verification (verification of payment data accuracy and behavioural pattern consistency)

• prevention of duplicate charges

• compliance with PCI DSS requirements and anti-money laundering legislation.

STOQ does not store complete payment details (card data) and receives only technical transaction confirmation from the provider. The use of cookies by the payment provider is governed by its own privacy policy.

5.3. Auto-Renewal and Reminders

To facilitate automatic Subscription renewal and send reminders about upcoming charges, STOQ uses technical identifiers that enable:

• identification of the account for sending a notification 7 days prior to the charge

• recording the fact that the user has been informed of the auto-renewal notification

• processing a request to cancel the Subscription prior to the charge date.

These technical processes are carried out on the basis of STOQ’s contractual obligations and do not require separate consent.

5.4. Failed Payments and Refund Support

In the event of a failed payment, initiation of a refund, or transaction dispute (chargeback), STOQ may use technical identifiers for:

• identification of the relevant account and transaction

• transmission of data to the payment provider for dispute review

• recording the history of support enquiries related to refunds or cancellations.

Data collected in connection with a chargeback or refund may be retained longer than standard cookie retention periods — for the period necessary to complete the relevant procedures (see Section 9).

6. Third-Party Cookies and Service Providers

STOQ may use third-party tools that set their own cookies or similar technologies when working with the Service. The table below indicates the categories of providers and types of technologies that may be used.

Third-party cookies are governed by the privacy policies of the respective providers. STOQ does not control third-party service cookies and recommends reviewing their privacy policies.

7. Cookie Management and User Choice

7.1. Consent Banner

Upon the first visit to the web version of the Service, users from jurisdictions requiring consent (EU/EEA, United Kingdom, Canada, Brazil) are presented with a cookie management banner. The banner enables:

• acceptance of all cookie categories

• rejection of non-essential categories (analytics, marketing)

• customisation of preferences by category.

Strictly necessary cookies are set regardless of user choice, as disabling them would render the use of the Service impossible.

The selection made is saved and may be changed at any time through the account settings or the cookie management section in the Service interface.

7.2. Browser Settings

Most browsers allow cookie management through settings: blocking cookie installation, deleting previously installed cookies, or receiving notifications upon attempted installation. Please note: disabling strictly necessary cookies may disrupt the operation of the Service, including the ability to log in and manage the Subscription.

Instructions for managing cookies are available in the help sections of the browser being used.

7.3. Mobile Applications

In STOQ mobile applications, similar technologies (device identifiers, SDKs) are used instead of browser cookies. They are managed through the device’s system settings:

• iOS: Settings → Privacy & Security → Tracking

• Android: Settings → Privacy → Permissions and Advertising Identifiers.

7.4. Opting Out of Third-Party Analytics

If STOQ uses third-party analytics tools, the user may opt out of tracking through the relevant provider’s mechanisms (e.g., Google Analytics Opt-out Browser Add-on). Links to opt-out mechanisms are available in the Service’s cookie settings section.

8. Legal Bases and Consent Logic

In jurisdictions where no specific cookie consent requirements have been established (e.g., UAE), STOQ ensures transparency in the use of cookies in accordance with this Policy and industry best practices.

9. Cookie Retention Periods

Cookies may be session-based (deleted when the browser is closed) or persistent (stored for a defined period). Approximate retention periods:

Retention periods for account data and personal data processed in connection with the Subscription and refunds are governed by the STOQ Privacy Policy (Section 9).

10. International Data Transfers

STOQ is registered in the UAE. Due to the use of third-party analytics and infrastructure tools, data collected through cookies may be transferred and processed outside the user’s country of residence, including in the United States and other countries.

For the transfer of data of users from the EU/EEA to third countries, STOQ applies the EU Standard Contractual Clauses (EU Standard Contractual Clauses 2021) and other legally prescribed safeguards. Data transfer through cookie technologies is carried out exclusively by providers that have assumed the relevant data protection obligations.

For more information on international data transfers, see Section 8 of the STOQ Privacy Policy.

11. Consistency with the Privacy Policy, Terms of Use, and Refund Policy

This Policy forms part of the unified set of STOQ documents for individual users and shall be applied in conjunction with:

• the STOQ Platform Terms of Use — with respect to security obligations, acceptable use, and limitation of liability for third-party tools

• the STOQ Privacy Policy — with respect to categories of personal data, processing purposes, legal bases, user rights, retention periods, and international data transfers.

• the STOQ Refund Policy — with respect to technical processes accompanying Subscription cancellation, refund processing, and payment dispute resolution.

In the event of a conflict between this Policy and the STOQ Privacy Policy with respect to the processing of personal data, the provisions of the Privacy Policy shall prevail.

12. Updates to the Cookie Policy

STOQ reserves the right to periodically update this Policy in connection with changes in the technologies used, legislation, or internal processes.

We shall notify users of material changes affecting user rights no less than 14 (fourteen) days prior to the effective date of such changes — through the Service interface and/or by email. The date of the last update is indicated at the top of the document.

Continued use of the Service after the effective date of the changes shall constitute consent to the updated version of the Policy.

13. Contact Information

For enquiries relating to the use of cookies, the exercise of your data rights, or this Policy, please contact:

Privacy and cookie enquiries: privacy@stoq.global

Legal Enquiries: legal@stoq.global

Technical Support: support@stoq.global