OppAction Cookie Policy

1. Scope of this Cookie Policy

This Cookie Policy applies solely to the public OppAction Marketing Website.

This Cookie Policy does not apply to:

• the authenticated OppAction application;
• customer workspaces;
• merchant accounts;
• marketplace integrations;
• Shopify or other ecommerce platform connections;
• APIs;
• enterprise deployments;
• operational logs;
• AI functionality;
• automation systems;
• marketplace synchronization;
• analytics generated within the OppAction platform; or
• any third-party websites or services.

Those services may use additional technologies, authentication mechanisms, operational logs, or data-processing activities as described in the OppAction Privacy Policy, Terms of Service, and other applicable agreements.

2. What Cookies and Similar Technologies Are

Cookies are small text files placed on a user's device by websites to enable functionality, remember preferences, improve performance, enhance security, or collect information about website usage.

In addition to traditional browser cookies, modern websites may use other technologies that perform similar functions, including browser storage technologies, local storage, session storage, device identifiers, browser identifiers, authentication technologies, security tokens, operational telemetry, analytics technologies, diagnostic tools, performance monitoring systems, API monitoring technologies, synchronization technologies, software development kits (SDKs), pixels, tags, scripts, log files, and similar technologies that help operate, secure, or improve online services.

For convenience, this Cookie Policy refers to these technologies collectively as "cookies and similar technologies."

3. Technologies Currently Used by the OppAction Marketing Website

As of the Last Reviewed date above, the public OppAction Marketing Website is intentionally designed to minimize the use of browser-based tracking technologies.

The Marketing Website currently:

• serves statically generated pages built with Astro;
• serves self-hosted static assets;
• serves self-hosted Poppins font files;
• routes requests through Cloudflare Workers;
• uses Cloudflare infrastructure to deliver website content;
• applies security-related HTTP response headers;
• includes lead-capture forms that transmit information voluntarily submitted by visitors;
• includes hidden lead attribution fields that may contain UTM parameters, landing page information, and referring page information when a visitor submits a form;
• performs a dataLayer push only if a compatible window.dataLayer object already exists within the visitor's browser environment;

The Marketing Website does not currently intentionally deploy first-party marketing cookies through its source code.

As of the Last Reviewed date, the Marketing Website also does not intentionally load:

• Google Analytics;
• Google Tag Manager;
• Meta Pixel;
• TikTok Pixel;
• LinkedIn Insight Tag;
• Microsoft Clarity;
• Hotjar;
• FullStory;
• session replay technologies;
• advertising pixels;
• retargeting technologies;
• comparable marketing or behavioral tracking technologies;

Additionally, the Marketing Website does not currently intentionally use browser localStorage or browser sessionStorage for website functionality.

Because modern browsers, browser extensions, operating systems, third-party services, content delivery providers, or future website enhancements may introduce additional technologies outside the direct control of the Marketing Website, visitors should not interpret this section as a guarantee that no browser technologies will ever be present.

4. Strictly Necessary Technologies

Certain technologies may be used because they are reasonably necessary to deliver, secure, or operate the Marketing Website.

These technologies may include functionality associated with:

• website delivery;
• network routing;
• content delivery;
• website security;
• denial-of-service mitigation;
• fraud prevention;
• abuse detection;
• request processing;
• infrastructure monitoring;
• diagnostic logging;
• performance optimization;
• error handling;
• similar operational purposes;

These technologies are intended to support reliable website operation rather than visitor profiling or advertising.

5. Lead Attribution Information (UTM, Referrer & Landing Page Data)

The Marketing Website includes lead-capture forms that visitors may voluntarily submit.

When a visitor submits a form, the Marketing Website may include attribution information associated with that submission, including:

• UTM campaign parameters;
• referring page information;
• landing page information; and
• similar attribution data reasonably available at the time of submission.

This information is transmitted only when a visitor voluntarily submits a form.

As of the Last Reviewed date, OppAction does not intentionally store these attribution values within browser cookies for the Marketing Website.

These attribution values are used to better understand marketing performance, visitor acquisition, campaign effectiveness, and lead sources after a visitor voluntarily submits information.

6. Cloudflare & Edge Delivery Technologies

The Marketing Website is delivered through Cloudflare infrastructure, including Cloudflare Workers and Cloudflare's global content delivery network.

Cloudflare may process technical request information necessary to:

• route requests;
• deliver website content;
• improve availability;
• protect against malicious traffic;
• detect abuse;
• mitigate distributed denial-of-service (DDoS) attacks;
• improve network performance;
• maintain infrastructure security; and
• provide related operational services.

Cloudflare operates independently from OppAction and maintains its own privacy and security practices.

Use of Cloudflare infrastructure does not necessarily mean Cloudflare sets marketing cookies on behalf of OppAction.

Visitors should review Cloudflare's own privacy documentation for additional information regarding Cloudflare's services.

7. Third-Party Services

The Marketing Website may contain links to third-party websites, including social media platforms such as LinkedIn, X (formerly Twitter), or similar services.

As of the Last Reviewed date:

• the Marketing Website links to certain third-party services;
• it does not intentionally embed third-party social media tracking widgets; and
• OppAction does not control cookies or similar technologies used after a visitor leaves the Marketing Website.

Any interactions with third-party websites are governed by those third parties' own privacy practices, cookie policies, and terms.

8. Current Analytics & Advertising Status

As of the Last Reviewed date, OppAction has intentionally chosen not to deploy traditional website analytics or advertising technologies on the public Marketing Website.

Specifically, the Marketing Website does not intentionally load:

• Google Analytics;
• Google Tag Manager;
• advertising pixels;
• retargeting technologies;
• behavioral advertising technologies;
• heat-map technologies;
• session replay tools; or
• similar visitor analytics products.

The absence of these technologies today should not be interpreted as a commitment that such technologies will never be implemented.

OppAction may implement analytics, advertising, performance monitoring, consent management, or marketing technologies in the future as the Marketing Website evolves.

Any material changes will be reflected through updates to this Cookie Policy and, where required by applicable law, appropriate notice or consent mechanisms.

9. Cookie Categories That May Be Used in the Future

As the Marketing Website evolves, OppAction may implement additional categories of cookies or similar technologies, including:

• Strictly Necessary Cookies;
• Functional Cookies;
• Performance Cookies;
• Analytics Cookies;
• Security Cookies;
• Fraud Prevention Technologies;
• Advertising Cookies;
• Social Media Technologies;
• Consent Management Technologies;
• other technologies reasonably necessary to operate, improve, secure, measure, or market the Marketing Website;

The inclusion of these categories in this Cookie Policy does not indicate that they are currently in use.

Rather, this section is intended to provide transparency regarding categories of technologies that may reasonably be introduced as the Marketing Website grows.

10. Browser Controls

Most web browsers allow users to manage cookies through browser settings.

Depending on the browser, visitors may be able to:

• block cookies;
• delete cookies;
• receive notifications before cookies are stored;
• limit certain categories of cookies; or
• manage website permissions.

Disabling certain technologies may affect website functionality or prevent portions of the Marketing Website from operating as intended.

If analytics, advertising, or consent-management technologies are implemented in the future, additional controls or consent mechanisms may become available.

11. Future Technology Changes

Internet technologies evolve continuously.

OppAction reserves the right to implement, modify, replace, suspend, or discontinue cookies and similar technologies used by the Marketing Website for operational, security, legal, compliance, performance, analytics, advertising, fraud prevention, infrastructure, or business purposes.

Technologies used by the Marketing Website may change over time due to:

• website enhancements;
• infrastructure improvements;
• security requirements;
• legal obligations;
• marketplace expectations;
• third-party service changes;
• analytics implementation;
• advertising initiatives;
• consent management; or
• other legitimate business considerations.

This Cookie Policy may be updated periodically to reflect those changes.

12. Relationship to the Privacy Policy

This Cookie Policy should be read together with the OppAction Privacy Policy.

Where this Cookie Policy addresses cookies and similar technologies used by the public Marketing Website, the Privacy Policy explains more broadly how OppAction collects, uses, stores, protects, discloses, and processes personal information.

In the event of any inconsistency regarding website tracking technologies, this Cookie Policy governs the specific use of cookies and similar technologies for the public Marketing Website, while the Privacy Policy governs broader data-processing practices.

Nothing in this Cookie Policy modifies the Terms of Service or creates additional contractual obligations beyond those otherwise applicable under OppAction's legal documentation.

13. Contact Information

Questions regarding this Cookie Policy may be directed to:

Mugpire, LLC d/b/a OppAction

Legal & Compliance: legal@oppaction.com

Website: https://oppaction.com

OppAction may update this Cookie Policy periodically as technologies, legal requirements, operational practices, or business needs evolve. Continued use of the Marketing Website after updates become effective constitutes acknowledgment of the revised Cookie Policy to the extent permitted by applicable law.