QUOME COOKIE POLICY

Last Updated: April 18, 2026
Version: 1.0

This Cookie Policy explains how Quome, Inc. ("Quome", "we", "us", or "our") uses cookies and similar technologies when you visit our websites at quome.com, app.quome.com, and applications deployed on our platform. It should be read alongside our Privacy Notice.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They let sites remember information about your visit — preferences, session state, usage patterns — so the site works properly and, where you consent, so we can understand how it's used.

We also use similar technologies — localStorage, sessionStorage, pixels, and embedded scripts — and we treat them the same as cookies for consent purposes.

2. How We Categorize Cookies

A complete inventory — every cookie we or our vendors set, with name, purpose, duration, and storage type — is published at /cookies. We run automated scans nightly to keep it accurate.

3. Your Choices

Cookie Banner

On your first visit, we show a banner that lets you accept all, reject all, or customize non-essential cookies. In the EU, UK, and Switzerland the "Accept" and "Reject" buttons are presented with equal visual weight. In US states with opt-out laws (California, Colorado, Connecticut, Virginia, Utah, Texas), the banner shows a "Do Not Sell or Share My Personal Information" link.

Preference Center

You can change your choices at any time from:

• The "Cookie preferences" link in our site footer
• The dedicated /cookies preference center
• The keyboard shortcut Shift+Alt+C

Disabling a category already active on your browser requires a page refresh to fully take effect, because some third-party scripts cannot be cleanly unloaded. We will purge the cookies we can and the banner will tell you if a refresh is needed.

Global Privacy Control (GPC)

If your browser sends the Sec-GPC: 1 signal, we automatically opt you out of Marketing and Social categories. You do not need to interact with the banner for this to take effect — we record your GPC signal as your consent decision.

Browser-Level Controls

All modern browsers let you block or delete cookies directly. Blocking all cookies will prevent Strictly Necessary cookies from working, which will break login and other platform functions. We recommend using our banner's category toggles instead.

4. Evidence of Consent

When you make a cookie choice, we record:

• Your consent ID (random identifier stored in the quome_consent cookie)
• The categories you accepted
• Your IP address (encrypted at rest under our KMS)
• Your user agent
• The region derived from your IP
• The version of this policy you saw
• Whether a GPC signal was detected

We retain these consent records for five years to satisfy GDPR Article 7 and ePrivacy Directive burden-of-proof requirements. You can reset your consent ID — clearing the association with your prior choices — from the /cookies preference center; doing so forces re-consent on your next action.

5. Cookies on Apps Deployed Through Quome

Applications deployed by our customers on Quome (on *.quome-apps.com or a custom domain) may include a version of our consent banner with the customer's branding and their own cookie inventory. In those cases:

• Quome is the processor. The customer is the data controller responsible for deciding what cookies their app uses and for responding to data-subject requests about visitor consent records.
• Platform-level cookies (e.g., session cookies set by our edge) are always disclosed even when a customer brands the banner.

If you have a question about an app deployed on Quome, please contact that app's operator directly.

6. International Transfers

Consent records may be processed in the United States on our control plane. For EU/EEA/UK visitors, we rely on Standard Contractual Clauses and supplementary technical measures (encryption in transit and at rest, access controls, audit logging) for any transfers. See our Privacy Notice for full details.

7. Changes to This Policy

When we add a new cookie category, a material new vendor, or make other changes requiring re-consent, the banner re-prompts automatically. Non-material updates (typo fixes, clarifications) do not trigger re-prompting; you can review the change history in the preference center.

8. Contact

Questions about this policy, or requests to access or delete a consent record, should go to:

• Email: privacy@quome.site
• Compliance: compliance@quome.site
• Postal: see Privacy Notice § "How to Contact Us"

This Cookie Policy is informational and, together with the Privacy Notice, describes our practices. It is not a contract.