Cookies & Similar Technologies Policy

1. Scope

This Policy explains how VettiGuard may use cookies, local storage, session storage and similar browser technologies on public websites, hosted verification pages and account services.

Australia does not rely on a single standalone "cookie law" equivalent to some overseas regimes. However, information collected through cookies or tracking technologies may be personal information and may therefore be subject to the Privacy Act and APPs where applicable. Marketing and electronic communications may also be subject to the Spam Act.

2. Essential and security technologies

VettiGuard may use technologies that are necessary to:

• authenticate users and maintain secure sessions;
• protect against cross-site request forgery, replay and abuse;
• remember security-sensitive workflow state;
• remember display preferences such as colour theme;
• route hosted verification safely;
• support rate limiting and fraud prevention; and
• maintain the reliability of website functions.

These technologies are used because the relevant feature would not operate securely or consistently without them.

3. Analytics

If VettiGuard uses analytics, it will seek to minimise the information collected and avoid placing raw identity evidence, passwords, API secrets or biometric material in analytics events.

Any material third-party analytics service introduced after this Policy is published should be identified in this Policy or the Data Hosting & Subprocessor Notice before production use.

4. Advertising and cross-site tracking

VettiGuard does not use biometric information for advertising profiles. VettiGuard does not intentionally place advertising trackers on hosted biometric or identity-verification journeys.

If advertising or cross-site marketing technology is introduced on public marketing pages in the future, the legal and consent requirements must be assessed before deployment and this Policy must be updated.

5. Browser controls

Users can control many cookies through browser settings. Blocking essential or security cookies may prevent sign-in, hosted verification or other protected features from functioning correctly.

6. Do not store secrets in browser storage

VettiGuard customers must not place private API secrets, server credentials, unrestricted identity-document data or reusable biometric evidence in local storage or other browser-accessible storage unless a specific VettiGuard integration contract expressly requires and protects that value.

7. Changes

The cookie inventory and this Policy should be reviewed whenever analytics, consent management, marketing technology or a new third-party web service is introduced.