This Cookie Policy explains how Sourcez ("we", "us", or "our") uses cookies and similar technologies on our platform. Cookies are small data files sent from a web server to your browser, enabling the server to recognize your browser on subsequent visits.

Your Privacy Matters: We respect your right to control how cookies are used on your device. When you first visit our platform, you'll see a cookie consent banner where you can choose to accept all cookies, reject non-essential cookies, or customize your preferences by cookie category. You can change these settings at any time using the "Cookie Settings" link in our footer.

Cookie Consent Management

We provide you with granular control over cookie usage through our consent management system:

Cookie Consent Banner: Displays when you first visit, allowing you to accept all, reject non-essential, or customize preferences
Cookie Settings: Accessible anytime via the footer link to update your preferences
Consent Storage: Your preferences are stored securely and persist across sessions
Consent Withdrawal: You can withdraw consent at any time by updating your preferences or clearing cookies
Dual Consent (iOS App): If using our iOS app, you must grant both iOS App Tracking Transparency permission and web cookie consent for marketing tracking

Cookie Categories

We use cookies in the following categories. Each category can be managed independently through your cookie preferences:

1. Essential Cookies (Always Active)

These cookies are essential for the basic functionality of our platform and cannot be disabled. They enable core features such as:

Authentication (Supabase): Maintain your login session so you don't have to sign in repeatedly. These cookies remember your authentication state and keep your account secure.
Shopping Cart: Remember the items you've added to your cart as you browse our platform. Without these cookies, your cart would be empty every time you navigate to a new page.
Security & Fraud Prevention: Protect your account and our platform from unauthorized access, fraudulent transactions, and security threats.
Payment Processing (Stripe): Enable secure payment transactions through our payment processor. These cookies ensure your payment information is handled safely and transactions complete successfully.
Cookie Consent Preferences: Remember your cookie consent choices so we can respect your preferences on future visits.

Legal Basis: Essential cookies are processed based on legitimate interest (GDPR Article 6(1)(f)) and contract performance (GDPR Article 6(1)(b)). They are necessary to provide the service you have requested.

2. Functional Cookies (Requires Consent)

These cookies enhance your experience by remembering your preferences and settings:

Language Preferences: Remember your preferred language
Region Settings: Remember your country/region selection
Display Preferences: Remember your preferred view modes and filters
Accessibility Settings: Remember accessibility preferences for better usability

Impact of Disabling: Without functional cookies, you may need to re-enter your preferences on each visit.

3. Analytics Cookies (Requires Consent)

These cookies help us understand how visitors interact with our platform:

Usage Statistics: Understand which pages are visited most frequently
Performance Monitoring: Identify and fix performance issues
User Behavior Analysis: Improve navigation and user experience
Feature Usage: Understand which features are most valuable to users

Data Collection: Analytics cookies collect anonymized data. We do not use this data to identify you personally.

4. Marketing Cookies (Requires Consent)

These cookies enable personalized advertising and campaign measurement:

Campaign Attribution: Track which marketing campaigns led you to our platform (see Campaign Tracking section below)
Personalized Offers: Show you relevant offers based on your browsing behavior
Ad Targeting: Display relevant advertisements on other websites
Frequency Capping: Limit how often you see the same advertisement
Conversion Tracking: Measure the effectiveness of our marketing campaigns

Third-Party Networks: Marketing cookies may be set by third-party advertising networks. These partners adhere to strict data protection standards and use data only for the purposes we've authorized.

Impact of Disabling: You will still see advertisements, but they will be generic rather than tailored to your interests.

Campaign Tracking and Attribution

When you visit our platform through a marketing campaign (such as from an email, social media post, or advertisement), we may capture campaign parameters to understand how you discovered us.

What Information We Collect:

Campaign Source (utm_source): Where the traffic came from (e.g., google, facebook, newsletter)
Campaign Medium (utm_medium): The type of marketing channel (e.g., email, social, cpc)
Campaign Name (utm_campaign): The specific campaign name
Campaign Content (utm_content): To differentiate similar content or links
Campaign Term (utm_term): Search keywords (for paid search)
Landing Page URL: The first page you visited on our platform
Referrer URL: The previous webpage you were on before arriving

How Campaign Tracking Works with Consent:

With Marketing Consent Granted: Campaign information is immediately stored in the "sourcez_utm" cookie with a 30-day retention period to properly attribute your activities to the marketing source.
Without Marketing Consent: Campaign parameters are temporarily stored in a "sourcez_pending_utm" cookie for 30 minutes. If you grant marketing consent within this period, the campaign information is processed. Otherwise, it is automatically deleted.
Consent Required: Campaign tracking requires your consent for marketing cookies. We will not track campaign information unless you explicitly allow marketing cookies.

Why We Track Campaigns: This information helps us understand which marketing efforts are effective, allowing us to invest in channels that bring value to our customers and improve our marketing efficiency.

iOS App Tracking Transparency (ATT)

If you use our iOS mobile application, additional tracking controls apply under Apple's App Tracking Transparency (ATT) framework.

Dual Consent Requirement:

For marketing tracking to occur in our iOS app, you must grant permission at two levels:

iOS System-Level Permission: Apple's ATT permission dialog will appear when you first launch the app, requesting permission to track your activity across other companies' apps and websites.
Web-Level Cookie Consent: Our cookie consent banner within the app allows you to manage web-based tracking preferences.

Important: If you deny iOS tracking permission, marketing cookies will be automatically disabled in the app, even if you later accept them in the web-based cookie consent banner. This ensures compliance with both Apple's requirements and GDPR regulations.

Managing iOS Tracking Permission:

Open your device Settings app
Scroll down and select "Sourcez"
Toggle "Allow Apps to Request to Track" on or off

Changes to your iOS tracking permission are immediately reflected in the app, and your marketing cookie preferences are automatically updated.

Legal Basis (GDPR Compliance)

We process cookie data based on the following legal grounds under GDPR Article 6:

Legitimate Interest (Article 6(1)(f)): Essential cookies are necessary for the legitimate operation of our e-commerce platform and to protect against security threats.
Contract Performance (Article 6(1)(b)): Cookies are necessary to fulfill our contract with you (processing your orders, maintaining your account, enabling checkout).
Consent (Article 6(1)(a)): Functional, analytics, and marketing cookies are only used with your explicit, freely given, specific, and informed consent. You can withdraw consent at any time.

Third-Party Service Providers

Some essential cookies are set by third-party services that we use to operate our platform. These service providers are data processors, not data controllers, and only use cookies for the specific services we've contracted them for:

Supabase: Authentication and database services (servers located in EU, GDPR compliant)
Stripe: Payment processing (PCI-DSS Level 1 certified, uses tokenization for security)

Important: These service providers do not use your data for their own purposes, advertising, or data brokerage. They only process data on our behalf to deliver the specific services required for our platform to function.

Data Retention

We retain cookie data for the following periods, depending on the cookie category:

Session Cookies: Deleted automatically when you close your browser
Persistent Authentication Cookies: Up to 2 hours from last activity
Shopping Cart Cookies: Up to 30 days to preserve your cart between sessions
Security Cookies: Up to 1 year for fraud prevention purposes
Cookie Consent Preferences: Up to 1 year to remember your consent choices
Functional Preference Cookies: Up to 1 year to remember your settings
Analytics Cookies: Up to 2 years for trend analysis and platform improvement
Marketing & Campaign Tracking Cookies: Up to 30 days for campaign attribution
Pending UTM Cookies (no consent): Up to 30 minutes, then automatically deleted

After these retention periods, cookies are automatically deleted or expired. You can also manually delete cookies at any time through your browser settings.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding cookies and your data:

Access: Request information about the cookies stored on your device
Consent Management: Grant, refuse, or withdraw consent for non-essential cookies at any time through our Cookie Settings
Deletion: Clear cookies through your browser settings or by withdrawing consent in Cookie Settings
Objection: Object to the processing of your data for specific purposes
Portability: Request your data in a portable format where applicable
Complaint: File a complaint with your local data protection authority (Cyprus: Office of the Commissioner for Personal Data Protection)

To Exercise Your Rights: You can manage your cookie preferences anytime by clicking the "Cookie Settings" link in our website footer. For other data rights requests, contact us at info@sourcez.co.

Browser Cookie Controls

You can manage or delete cookies through your browser settings:

Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Privacy, search, and services → Cookies and site permissions

Note: Blocking or deleting essential cookies will prevent you from using key features of our platform, such as staying logged in, maintaining your shopping cart, and completing purchases.

International Data Transfers

Our service providers (Supabase and Stripe) may transfer cookie data outside the European Economic Area (EEA). We ensure that such transfers are protected by appropriate safeguards, including adequacy decisions and standard contractual clauses approved by the European Commission.

Contact Information

If you have any questions about our use of cookies or this Cookie Policy, please contact us:

Email: customersupport@sourcez.co
Address: Ezekia Papaioannou 9 St., Executive House, Nicosia 1075, Cyprus
Phone: +357 99 240 255

Policy Updates

We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will update the version number and date below. We encourage you to review this policy periodically.

Last Updated: October 21, 2025
Version: 3.0