KemiSync, Inc. Cookies

1. Cookie Banner Text (what users actually see on first visit)

Short Banner Version (recommended for CMP popup): 🍪 We use cookies KemiSync uses cookies to make the platform work, remember your preferences, analyze usage, and improve your experience. By clicking “Accept All”, you agree to our use of cookies as described in our [Cookie Notice]. [Accept All] [Reject Non-Essential] [Manage Preferences] (Design rule: "Accept All" and "Reject Non-Essential" buttons must be the same size, same font weight, same color contrast, and same prominence. No graying out "Reject" or hiding it behind a link — this is now considered a dark pattern in Delaware and many US states in 2026.)

2. Full Cookie Notice (dedicated page: kemisync.com/cookie-notice)

KemiSync Cookie NoticeEffective Date: March 1, 2026Last Updated: March 1, 2026 KemiSync, Inc. (“KemiSync”, “we”, “us”, or “our”) uses cookies and similar tracking technologies (“Cookies”) on our website, mobile applications, and professional matching platform (the “Platform”). This Cookie Notice explains what these technologies are, which ones we use, why, and how you can control them. This notice forms part of our [Privacy Policy] and should be read together with it. 1. What are Cookies? Cookies are small text files placed on your device when you visit a website or use an app. They help us:

• Recognize you when you return
• Remember your preferences and settings
• Understand how you use the Platform
• Improve security and performance We also use similar technologies such as pixels, tags, web beacons, and local storage. 2. Types of Cookies We Use

| Category | Purpose | Examples | Duration | Can be disabled? | | ---| ---| ---| ---| --- | | Strictly Necessary | Essential for the Platform to function (login, session security, fraud prevention, basic navigation) | Authentication tokens, CSRF protection | Session or 1 year | No | | Functional | Remember your choices (language, dark mode, saved searches, filter preferences) | Preference storage | 6–24 months | Yes | | Performance & Analytics | Understand usage patterns (pages visited, time spent, errors, device info) to improve features and fix bugs | Google Analytics 4 (if used), internal metrics | Up to 2 years | Yes | | Marketing / Advertising | (Currently not used) Track activity for relevant promotions or campaign measurement | N/A | N/A | N/A |

For users under 18, marketing/advertising cookies are disabled by default and cannot be enabled without explicit guardian consent. 3. Third-Party Cookies Some features rely on third-party services that may set their own cookies:

• Payment processors (e.g., Stripe) – secure transactions
• Video hosting (e.g., Vimeo/YouTube) – showreels/self-tapes
• Analytics providers (e.g., Google Analytics) – usage insights These third parties operate under their own privacy policies. We do not control their cookies. 4. Your Choices and Controls
• Cookie Banner: On first visit (and if consent is withdrawn), you will see a banner offering:
  • Accept All
  • Reject Non-Essential
  • Manage Preferences (granular opt-in/opt-out per category)
• Equal Prominence: “Accept All” and “Reject Non-Essential” buttons are displayed with equal size, color, contrast, and visibility — no dark patterns allowed.
• Change Preferences Anytime: Use the “Cookie Settings” link in the footer or your account dashboard to review and update choices.
• Browser Controls: Block or delete cookies via browser settings (e.g., Chrome → Privacy & security → Cookies). Blocking strictly necessary cookies may prevent Platform use.
• Global Privacy Control (GPC) & UOOM: We automatically recognize and honor Global Privacy Control signals and other universal opt-out mechanisms per Delaware DPDPA, CPRA, and similar laws. If your browser sends a GPC signal, we disable non-essential tracking and targeted advertising.
• Do Not Track: We do not currently respond to browser “Do Not Track” signals beyond GPC/UOOM. 5. Data Retention
• Session cookies: Deleted when you close your browser.
• Persistent cookies: Remain for the stated duration or until you delete them.
• Consent records: Retained for compliance proof (typically 1–2 years or longer if required by law). 6. Changes to This Notice We may update this notice. Material changes will be posted here with a new date and notified via banner or email if significant. 7. Contact Us Questions about cookies or your preferences: privacy@kemisync.com Kemisync, Inc. 8 The Green, Ste A Dover, DE 19901

3. Implementation Recommendations (2026 Best Practices)

| Requirement | Recommendation | Priority | | ---| ---| --- | | Equal Prominence Accept/Reject | Same size, color contrast, font weight, placement. No grayed-out “Reject”. | High | | No Pre-Checked Boxes | All non-essential categories unchecked by default in “Manage Preferences”. | High | | Consent Logging | Store user ID, timestamp, IP, exact choices (categories accepted/rejected). | High | | GPC/UOOM Auto-Honor | Integrate CMP that detects and applies GPC signals automatically. | High | | Auto-Block Non-Essential | Use CMP to block analytics/functional scripts until consent given. | High | | Minor Protection | Disable marketing cookies by default for under-18 accounts. | Medium | | Cookie Inventory | Maintain updated list (provider, purpose, duration, category) for audits. | Medium | | CMP Tool | Use Cookiebot, OneTrust, Osano, or Usercentrics (all support GPC in 2026). | High |