Cookies Notice

1. Introduction

This Cookies Notice explains how BLRB Digital LLC ("we," "us," or "our") uses cookies and similar tracking technologies on the Shortlist mobile application and website (collectively, the "Platform"). By using the Platform, you consent to the use of cookies as described in this notice.

This notice should be read alongside our Privacy Policy, which provides additional information about how we collect, use, and protect your personal information.

2. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website or use an app. They allow the Platform to recognize your device and store information about your preferences and past actions.

We also use similar technologies including:

• Pixel tags / web beacons: Tiny graphics embedded in web pages or emails used to track user activity and measure engagement.

• Local storage: Data stored in your browser or device that persists across sessions, similar to cookies but with greater capacity.

• Session storage: Temporary data stored for the duration of a single browser session.

• SDKs (Software Development Kits): Code embedded in our mobile app that may collect device identifiers and behavioral data.

3. Categories of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be switched off in our systems. They are usually set in response to actions you take, such as setting your privacy preferences, logging in, or filling in forms. These cookies do not store any personally identifiable information.

Examples include:

• Authentication tokens to keep you logged in to your account.

• Session identifiers to maintain your session state.

• Security cookies to protect against cross-site request forgery (CSRF).

3.2 Performance and Analytics Cookies

These cookies allow us to count visits and measure traffic sources so we can measure and improve the performance of the Platform. They help us understand which features are most popular and how users interact with our ranking and discovery tools.

Examples include:

• Analytics tools (e.g., Google Analytics, Mixpanel, Amplitude) that track page views, session duration, feature usage, and crash reports.

• A/B testing cookies to help us evaluate new features such as ranking UI variations or recommendation algorithms.

3.3 Functional Cookies

These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to the Platform.

Examples include:

• Remembering your display preferences (e.g., dark mode, grid vs. list view).

• Storing your preferred content genres, rating scales, or filter settings.

• Maintaining your watchlist or ranking list progress between sessions.

3.4 Targeting and Advertising Cookies

These cookies may be set through the Platform by our advertising partners. They may be used to build a profile of your interests and show you relevant advertising on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and device.

Examples include:

• Social media pixels (e.g., Meta Pixel, TikTok Pixel) used for conversion tracking and retargeting.

• Ad network cookies that deliver tailored promotional content based on your viewing and ranking behavior.

3.5 Social Media and Sharing Cookies

These cookies are set by social media services that we have added to the Platform to enable you to share content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests.

4. Third-Party Cookies

Some cookies on the Platform are placed by third parties on our behalf. These third parties may include:

• Analytics providers (e.g., Google LLC, Mixpanel Inc.)

• Advertising networks and demand-side platforms

• Social media platforms (e.g., Meta, X/Twitter, TikTok)

• Cloud infrastructure and CDN providers

• Customer support and chat services

We do not control the use of third-party cookies and are not responsible for the privacy practices of these third parties. We encourage you to review the privacy and cookie policies of these third parties directly.

5. Cookies and Mobile Applications

The Shortlist mobile application may use mobile advertising IDs (such as Apple's IDFA or Google's GAID/AAID) and similar device-level identifiers in addition to cookies. These identifiers function similarly to cookies and are used for analytics, personalization, and, where applicable, advertising purposes.

You can reset or limit the use of your mobile advertising ID through your device settings:

• iOS: Settings > Privacy & Security > Tracking — disable 'Allow Apps to Request to Track.'

• Android: Settings > Privacy > Ads — select 'Delete advertising ID' or 'Opt out of Ads Personalization.'

6. How to Manage and Control Cookies

6.1 Managing Your Cookie Preferences

At this time, the Platform does not include a built-in cookie preference or consent management tool. You can control the use of cookies through your browser settings (see Section 6.2 below) and, for mobile users, through your device’s privacy settings (see Section 5). We intend to implement an in-app cookie preference center in a future update to the Platform.

6.2 Browser Controls

Most web browsers allow you to manage cookies through their settings. You can typically:

• View cookies currently stored on your device.

• Delete all or specific cookies.

• Block cookies from specific or all websites.

• Set your browser to notify you when a cookie is set.

Please note that blocking or deleting cookies may impair the functionality of the Platform, including your ability to log in, save rankings, or receive personalized recommendations. For instructions specific to your browser, please visit the browser's help center.

6.3 Opt-Out Links for Specific Third Parties

You may opt out of certain third-party data collection practices using the following links:

• Google Analytics: https://tools.google.com/dlpage/gaoptout

• Network Advertising Initiative opt-out: https://optout.networkadvertising.org

• Digital Advertising Alliance opt-out: https://optout.aboutads.info

Please note that opting out through these tools does not mean you will stop seeing advertisements; it means that the ads you see may be less tailored to your interests.

7. Do Not Track Signals

Some browsers include a 'Do Not Track' (DNT) feature that signals websites that you do not want your online activity tracked. The Platform does not currently respond to DNT signals. We will update this Cookies Notice if we adopt a standard DNT response in the future.

8. Cookie Retention Periods

The duration for which a cookie remains on your device depends on its type:

• Session cookies: Deleted automatically when you close your browser or app session.

• Persistent cookies: Remain on your device for a set period (ranging from 30 days to 2 years, depending on the cookie) or until you delete them manually.

For specific retention periods associated with individual third-party cookies, please refer to those third parties' privacy and cookie policies.

9. Updates to This Cookies Notice

We may update this Cookies Notice from time to time to reflect changes in technology, regulation, or our business practices. When we make material changes, we will notify you via a prominent notice on the Platform or through in-app notification prior to the change becoming effective.

The 'Effective Date' at the top of this notice indicates when it was last revised. We encourage you to review this notice periodically.

10. Contact Us

If you have any questions or concerns about our use of cookies or this Cookies Notice, please contact us at admin@blrbdigital.com.

Exhibit A – Cookie Preference Selection Form

Until Shortlist implements an in-app cookie preference center, users may indicate their cookie preferences by completing this form and submitting it to privacy@shortlist.app. Strictly Necessary cookies cannot be declined as they are required for the Platform to function. Your selections will be honored within a reasonable period of receipt and will remain in effect until you submit a revised form or until a self-service tool becomes available.

Instructions: Check ☑ to ACCEPT or ☒ to DECLINE each cookie category below.

Cookie Category	Purpose	Accept	Decline
Strictly Necessary (Required – cannot be declined)	Authentication, session management, and core security functions essential to Platform operation.	☑	N/A
Performance & Analytics	Usage analytics, performance monitoring, and A/B testing to improve the Platform.	☐	☐
Functional	Personalization, saved preferences, display settings, and ranking list continuity.	☐	☐
Targeting & Advertising	Interest-based advertising, retargeting, and ad personalization across third-party platforms.	☐	☐
Social Media & Sharing	Social platform integrations enabling content sharing and cross-platform activity tracking.	☐	☐

Signature: _________________________________________________