Effective Date: April 4, 2026

6. Cookies and Similar Technologies

6.1 What These Technologies Are

We use cookies and similar technologies—such as pixels, tags, local storage, software development kits, and tracking URLs—when you access our websites, checkout pages, emails, or other online services (collectively, the “Services”).

These technologies may collect or store information such as your IP address, device identifiers, browser type, operating system, referring pages, pages viewed, approximate location, interactions with the Services, and the date and time of your visit. Some of this information may constitute personal data under applicable law.

6.2 Categories of Cookies We Use

Depending on the features and services available, we may use the following categories:

• Strictly Necessary Cookies. These cookies are required for the Services to function, including security, fraud prevention, network management, checkout processing, authentication, and remembering your privacy preferences. Because these cookies are necessary to provide requested services, they generally cannot be disabled through our consent-management tool.• Functional Cookies. These cookies remember choices such as language, region, account settings, or other preferences and provide enhanced functionality.• Analytics and Performance Cookies. These cookies help us understand how visitors use the Services, measure traffic and engagement, identify technical problems, and improve performance. The information may be collected in aggregated or pseudonymous form.• Advertising and Targeting Cookies. These cookies may be used to measure advertising campaigns, limit how often advertisements are displayed, create or infer audience segments, or deliver advertising based on activity across websites or services.• Social Media and Embedded-Content Cookies. Third-party videos, social-media features, payment tools, or other embedded services may place cookies or collect information when you interact with them.

6.3 First-Party and Third-Party Cookies

First-party cookies are placed directly by us. Third-party cookies are placed by service providers or other third parties, such as payment processors, analytics providers, advertising platforms, video-hosting services, or customer-support tools.

Third parties may process information collected through their technologies under their own privacy policies. We encourage you to review those policies. A current description of the cookies and providers used by the Services, including their purposes and retention periods, is available through our [Cookie Settings] tool.

6.4 Consent and Legal Basis

Where applicable law requires consent, we will not place or access non-essential cookies—including functional, analytics, or advertising cookies—until you provide consent through our cookie banner or preference center.

You may accept or reject non-essential cookies by category. Refusing non-essential cookies will not prevent you from accessing the core features of the Services, although some optional functionality may be unavailable or work differently.

You may withdraw or change your consent at any time by selecting [Cookie Settings] in the footer of our website. Withdrawing consent does not affect processing that occurred before withdrawal.

6.5 Managing Cookies and Privacy Choices

You may manage cookies through:

• Our [Cookie Settings] preference center;• Your browser or device settings, which may allow you to block, delete, or receive warnings about cookies; and• Any legally required [Do Not Sell or Share My Personal Information / Targeted Advertising Opt-Out] mechanism.

Preferences stored through cookies may be specific to the browser and device you use. If you clear cookies, use another browser or device, or reset your device, you may need to submit your preferences again.

If we are legally required to recognize browser-based opt-out signals, we will treat a supported Global Privacy Control (“GPC”) signal as a request to opt out of the sale or sharing of personal data, or its use for targeted advertising, for the browser or device sending the signal. Other “Do Not Track” signals may not be recognized where no applicable legal or technical standard requires recognition.

6.6 Sensitive Information

Because the nature of our Services may permit inferences concerning highly personal matters, we do not use information collected through cookies to infer or target advertising based on a person’s health, sexual behavior, sexual orientation, religious beliefs, or other legally protected sensitive characteristics, except where expressly disclosed and permitted by applicable law.

We do not knowingly permit advertising partners to use information indicating that a person purchased or accessed the Hyp-NO P*rn Protocol for their independent targeted-advertising purposes.

6.7 Cookie Duration

Cookies may be:

• Session cookies, which expire when you close your browser; or• Persistent cookies, which remain until their stated expiration date or until you delete them.

We retain cookie-derived information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. Specific durations should be disclosed in our [Cookie Settings] tool or cookie list.

6.8 Updates to Our Cookie Practices

We may update our use of cookies as our Services, providers, or legal obligations change. When required, we will notify you and request renewed consent. The “Effective Date” at the beginning of this Privacy Policy indicates when it was most recently updated.

Questions about our cookie practices may be sent to [email protected].

Before publishing, ZenFish should confirm that:

Non-essential cookies are actually blocked until consent where required. Merely describing cookies in a privacy policy is not sufficient under UK guidance. UK Information Commissioner’s Office• “Reject All” is as accessible as “Accept All,” and withdrawing consent is straightforward.The cookie tool lists each cookie/provider, purpose, category, and duration.• Advertising and analytics vendors are accurately identified.• The site honors GPC signals if subject to laws requiring it. California expressly treats GPC as a valid opt-out request. California Attorney General• If ZenFish sells data or uses it for targeted advertising, its opt-out process satisfies the applicable requirements, including the Utah Consumer Privacy Act.• The sensitive-information promises above are technically and contractually true.

This language is a drafting aid, not legal advice. Given the potentially sensitive nature of the product, counsel should review the complete privacy policy, actual tracking configuration, vendor contracts, and consent banner—not only this section.

ZenFish, LLC

63 East 11400 S,
Ste 140, Sandy, UT,
84070

[email protected]