1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website or use a web application. They are widely used to make websites and applications work efficiently, to remember your preferences, and to provide information to the site operator.

Similar technologies include:

• Local storage and session storage: Browser-based storage mechanisms that function similarly to cookies but are stored differently on your device.
• Pixel tags / web beacons: Small invisible images embedded in web pages or emails that can track whether a page or email has been accessed.
• Device fingerprinting: The collection of device and browser characteristics to identify a device across sessions.

Where we refer to "cookies" in this Policy, we mean all of the above technologies unless otherwise specified.

2. Who Sets Cookies on This Platform?

Cookies on the Unrelenting Resilience platform are set by:

• Us (first-party cookies): Cookies set directly by Piero Corradetti Consulting on the unrelenting-resilience.ca domain to operate and improve the Platform.
• Third-party service providers (third-party cookies): Cookies set by trusted third-party providers whose services we use, such as analytics providers and payment processors. These providers are listed in Section 4.

We do not permit third-party advertising networks or data brokers to set cookies on the Platform.

3. Categories of Cookies We Use

We use four categories of cookies, described below. The first category is essential and cannot be disabled. The remaining categories are optional and subject to your consent where required by applicable law.

3.1 Strictly Necessary Cookies

What they do: These cookies are essential to the operation of the Platform. Without them, core functions — including logging in, maintaining your session, and accessing your account — would not work.

Do they require consent? No. Strictly necessary cookies do not require your consent under GDPR, PIPEDA, or applicable Canadian privacy law because they are essential to providing the service you have requested.

Examples:

Cookie Name	Purpose	Duration
ur_session	Maintains your authenticated session while you are logged in	Session (deleted when browser closes)
ur_csrf	Cross-site request forgery protection token — prevents unauthorized form submissions	Session
ur_auth_token	Stores your authentication state to keep you logged in across page loads	30 days (or until logout)
ur_consent	Records your cookie consent preferences	12 months
ur_onboarding	Tracks completion of required onboarding steps (e.g., disclaimer acceptance)	30 days

3.2 Functional Cookies

What they do: These cookies remember your preferences and settings to provide a more personalized experience. They are not strictly essential but improve the usability of the Platform.

Do they require consent? Yes, where required under applicable law. We will request your consent before setting functional cookies where legally required.

Examples:

Cookie Name	Purpose	Duration
ur_lang	Remembers your language preference	12 months
ur_theme	Remembers your display preference (e.g., dark mode)	12 months
ur_timezone	Stores your timezone for accurate mission board scheduling	12 months
ur_notifications	Stores your notification preferences	12 months

3.3 Analytics Cookies

What they do: These cookies help us understand how the Platform is being used — which features are popular, where users encounter problems, and how engagement patterns develop over time. This information is used in aggregated and anonymized form to improve the program.

Do they require consent? Yes. We will only set analytics cookies where you have given explicit consent through the cookie consent banner.

Examples:

Cookie Name / Provider	Purpose	Duration
Analytics provider (first-party)	Tracks page views, session duration, feature usage, and navigation paths in aggregated form	Up to 13 months
ur_perf	Measures platform performance and load times	Session

We do not use Google Analytics or any other analytics provider that shares your data for advertising purposes. Where we use a third-party analytics provider, that provider is bound by a data processing agreement that prohibits use of your data for any purpose other than providing analytics services to us.

3.4 Cookies We Do Not Use

We explicitly do not use:

• Advertising or targeting cookies — cookies used to build profiles of your interests for the purpose of delivering targeted advertising.
• Social media tracking pixels — cookies or pixels set by social media platforms to track your activity across sites.
• Third-party data broker cookies — cookies that share your data with data brokers or advertising networks.

4. Third-Party Cookies and Providers

The following third-party providers may set cookies or receive data in connection with your use of the Platform:

Provider	Purpose	Data Shared	Privacy Policy
Payment processor (Stripe, Inc.)	Processing subscription payments and license fees	Billing information only — no browsing or activity data	Provider's privacy policy applies
Cloud infrastructure provider (Supabase, Inc. / Vercel, Inc.)	Hosting and serving the Platform	Server logs (IP address, request metadata)	Provider's privacy policy applies
Email delivery provider (Resend, Inc.)	Sending transactional and onboarding emails	Email address and message delivery metadata	Provider's privacy policy applies

We review our third-party providers periodically and update this table when providers change. All providers are bound by contractual data processing obligations consistent with our Privacy Policy and applicable law.

5. Cookie Consent

5.1 How We Obtain Consent

On your first visit to the Platform, a cookie consent banner will be displayed. This banner:

• Describes the categories of cookies we use.
• Allows you to accept all optional cookies, reject all optional cookies, or customize your preferences by category.
• Links to this Cookie Policy for full details.
• Does not pre-select optional cookie categories — your default is strictly necessary cookies only until you make a choice.

Your consent preferences are recorded in the ur_consent cookie and stored server-side linked to your account where you are logged in.

5.2 Consent Under GDPR

For users in the European Economic Area, we obtain consent for optional cookies in accordance with Article 7 GDPR and the requirements of the ePrivacy Directive. This means:

• Consent is freely given, specific, informed, and unambiguous.
• Consent is obtained through a clear affirmative action (not pre-ticked boxes or continued browsing).
• You can withdraw consent at any time as easily as you gave it.
• We maintain records of consent including the date, version of the consent notice, and the choices made.

5.3 Consent Under PIPEDA and Law 25

For Canadian users, we follow the principle of meaningful consent under PIPEDA. For Quebec users, we comply with Law 25's requirements, which include:

• Providing clear disclosure of the purposes for which cookies are used before consent is obtained.
• Enabling users to withdraw consent easily.
• Not conditioning use of the Platform on acceptance of optional cookies.

5.4 Strictly Necessary Cookies and Consent

Strictly necessary cookies are placed without consent as they are essential to providing the service you have requested. This is consistent with GDPR recital 47, PIPEDA's implied consent framework for essential service delivery, and Law 25.

6. Managing and Withdrawing Cookie Consent

6.1 Through the Platform

You can review and update your cookie preferences at any time by:

• Clicking the "Cookie Preferences" link in the Platform footer.
• Navigating to Account Settings → Privacy → Cookie Preferences.

Withdrawing consent to optional cookies does not affect the lawfulness of processing that occurred before withdrawal.

6.2 Through Your Browser

Most browsers allow you to control cookies through their settings. You can typically:

• View cookies currently stored on your device.
• Delete individual cookies or all cookies.
• Block cookies from specific sites or all sites.
• Set your browser to notify you when a cookie is set.

Please note that blocking strictly necessary cookies through your browser settings will prevent you from logging in and using the Platform.

Browser cookie management instructions are available from the following resources:

• Google Chrome: support.google.com/chrome/answer/95647
• Mozilla Firefox: support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop
• Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
• Microsoft Edge: support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge

6.3 Do Not Track

Some browsers transmit a "Do Not Track" signal. The Platform currently does not alter its behavior in response to Do Not Track signals, as there is no universal standard for interpreting them. We will revisit this position as standards develop.

7. Cookies and the Facilitator Portal / Master Command Dashboard

The Facilitator Portal and Master Command Dashboard use strictly necessary and functional cookies for the same purposes described in Section 3. No additional cookie categories are applied to these interfaces beyond those described in this Policy.

Session and authentication cookies used in the Facilitator Portal are scoped to the facilitator's account and do not interact with Operative accounts or cohort data at the cookie level.

8. Cookies and The Eye

The Eye AI mentor feature does not use cookies beyond those already described in this Policy. Conversation context within a session is maintained through session storage (not cookies) and is cleared when your session ends, subject to the data retention provisions of the Privacy Policy.

9. Data Collected Through Cookies

Data collected through cookies is personal information where it is linked to an identifiable individual. Such data is handled in accordance with our Privacy Policy, including the rights, retention, security, and international transfer provisions described there.

IP addresses collected through server logs and analytics are treated as personal information and are subject to the same protections.

10. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, our service providers, or applicable law. The effective date at the top of this document reflects the most recent revision.

When we make material changes, we will reset the cookie consent banner so that you have the opportunity to review the updated policy and confirm or update your preferences. We will also notify registered users by email where material changes affect previously given consent.

11. Contact

Piero Corradetti Consulting
Operating as Unrelenting Resilience
Website: unrelenting-resilience.ca
Jurisdiction: Ontario, Canada

For complaints about our use of cookies, you may also contact the applicable supervisory authority:

• Canada: Office of the Privacy Commissioner of Canada — www.priv.gc.ca
• Quebec: Commission d'accès à l'information — www.cai.gouv.qc.ca
• European Union: Your national data protection authority — www.edpb.europa.eu
• United Kingdom: Information Commissioner's Office — www.ico.org.uk