Cookie Policy

Cookies are small text files stored on the user's device during browsing. They can be first-party (set by the visited site) or third-party (set by external services). This Cookie Policy describes the types of cookies used by the Sherlok platform and how to manage them, in compliance with Regulation (EU) 2016/679 (GDPR) and the guidelines of the Italian Data Protection Authority regarding cookies.

The cookies used on the Platform fall into the following categories: a) Technical / Necessary Cookies (no consent required) These are essential for the Platform to function and cannot be disabled. They include: - Session cookies for user authentication (next-auth.session-token) - Language preference cookies - Security cookies (CSRF protection) b) Analytics Cookies (consent required) Used to collect aggregate information about Platform usage to improve the service: - Google Analytics (GA4): anonymous collection of browsing data, pages visited, session duration, traffic source. IP address is anonymized. c) Functional Cookies (consent required) Enable additional features such as map integration: - Google Maps: used to display the location of businesses on listings. Note on email notifications. The transactional emails sent by the Platform (account notifications, messages, AI matching suggestions, notices regarding profile visibility to advertisers) do not use cookies. Their purposes and legal bases are described in the Privacy Policy. The "anonymous visibility" preference is an account setting stored server-side and not in a cookie.

| Cookie | Type | Duration | Purpose | |---|---|---|---| | next-auth.session-token | Necessary | Session | User authentication | | __Secure-next-auth.session-token | Necessary | Session | User authentication (HTTPS) | | cookie-consent | Necessary | 365 days | Stores cookie preferences | | _ga, _ga_* | Analytics | 2 years | Google Analytics - browsing statistics | | NIDP, CONSENT | Functional | Variable | Google Maps - map display |

On first access to the Platform, an informational banner requests consent for the activation of analytics and functional cookies. The user can: - Accept all cookies by clicking "Accept all." - Reject non-essential cookies by clicking "Necessary only." - Change preferences at any time through their browser settings. Technical/necessary cookies are always active as they are essential for the Platform to function.

Users can manage or delete cookies directly from their browser. Below are instructions for the main browsers: - Google Chrome: Settings → Privacy and security → Cookies and other site data - Firefox: Settings → Privacy & Security → Cookies and Site Data - Safari: Preferences → Privacy → Manage Website Data - Safari (iOS): Settings → Safari → Block Cookies - Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies Disabling certain cookies may limit the functionality of the Platform.

Some cookies are set by third-party services integrated into the Platform. For more information on their privacy policies: - Google Analytics: https://policies.google.com/privacy - Google Maps: https://policies.google.com/privacy - Google OAuth: https://policies.google.com/privacy Users can disable Google Analytics by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

Under the GDPR, users have the right to access, rectify, erase, restrict, and port their data, as well as to object to processing. To exercise these rights or for information about cookies, contact: info@sherlok.it Users also have the right to file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

We reserve the right to update this Cookie Policy. The last update date is indicated at the top of this document. In the event of substantial changes, the consent banner will be updated.

Sherlok Milan, Italy Email: info@sherlok.it