Cookie Policy

1. Scope

This Cookie Policy explains how EverXCloud Inc., a Delaware corporation ("EverXCloud", "we", "us") uses cookies and similar technologies (such as local storage, pixels and device fingerprinting) on the everxcloud.ai website and on the Portal. It supplements the Privacy Policy, available at everxcloud.ai/legal/privacy.

A cookie is a small text file placed on your device by a website. Cookies set by the website you visit are first-party cookies; cookies set by another domain are third-party cookies.

2. The website

Without your consent, the everxcloud.ai website sets no cookies other than the strictly necessary cookies listed below, uses neither local storage nor session storage, and loads no analytics, advertising or social media tools.

Our own page-view measurement uses no cookies. It keeps only daily counters aggregated by page category, referring domain, device category, language of the page, country and visits (the first page viewed in a browser tab). The country is derived from the IP address by our content delivery provider; the IP address is not kept in these counters. For the first page of a visit, the counters also record the campaign parameters of the link you followed, the name of the advertising network when the link carries an advertising click identifier, and whether it carries a referral code, but never the identifier or the code itself. No visitor identifier, IP address or device fingerprint is kept in these counters. This measurement respects Do Not Track and Global Privacy Control. Your language is determined by the address of the page you visit, not by a cookie. The information on how you reached us that is passed to the sign-up page travels in the link itself and is described in Section 5 of the Privacy Policy.

The following cookies are strictly necessary:

• Consent choice (EverXCloud): evx_consent, set only when you make a choice in the consent banner, to remember that choice. It records only whether you accepted audience measurement and advertising. Duration: six months.
• Security (Cloudflare, Inc.): our content delivery and security provider may set a security cookie (such as __cf_bm or cf_clearance) when it needs to distinguish legitimate visitors from automated traffic or after you complete a security challenge. These cookies are strictly necessary to protect the website and do not identify you.

3. Audience measurement and advertising, with your consent

When one or more of the tools below is in use on the website, a consent banner asks for your choice on your first visit. Only the tools in use at that time are listed in the banner. None of these tools is loaded, and none of their cookies is set, before you accept the category to which it belongs. "Accept all" and "Reject all" are offered with equal prominence, and "Customize" lets you choose each category separately.

Audience measurement:

• Google Analytics (Google Ireland Limited; Google LLC): measures the pages viewed, visits, how visitors reach the website and clicks on sign-up links, so that we can improve the website. Cookies: _ga and a cookie whose name begins with _ga_, on the website's domain. Duration: 13 months. Google signals and the use of this data to personalise advertising are disabled.

Advertising (to measure the results of our advertising, for example the sign-ups that follow an ad, and to show our advertising to relevant audiences):

• Google Ads (Google Ireland Limited; Google LLC): _gcl_au and other cookies beginning with _gcl_, on the website's domain. Duration: 90 days.
• Microsoft Advertising (Microsoft Corporation): Universal Event Tracking tag; _uetsid (one day) and _uetvid (13 months) on the website's domain, and MUID on Microsoft domains (up to 13 months).
• Meta (Meta Platforms Ireland Limited; Meta Platforms, Inc.): Meta Pixel; _fbp and _fbc, on the website's domain. Duration: 90 days.
• LinkedIn (LinkedIn Ireland Unlimited Company; LinkedIn Corporation): Insight Tag; li_fat_id (30 days) and cookies on LinkedIn domains, such as bcookie, lidc and UserMatchHistory (up to one year).
• TikTok (TikTok Technology Limited; TikTok Inc.): TikTok Pixel; _ttp and _tt_enable_cookie, on the website's domain. Duration: 13 months.
• X (Twitter International Unlimited Company; X Corp.): X Pixel; _twpid on the website's domain and cookies on X domains, such as personalization_id and muc_ads. Duration: up to two years.
• Reddit (Reddit, Inc.): Reddit Pixel; _rdt_uuid and _rdt_cid, on the website's domain. Duration: 90 days.

With your consent, each tool collects through its cookies or similar technologies information such as the pages you view, the referring page, the click identifier that the advertising network adds to the link of an ad, technical information about your browser and device, and your IP address. Its provider uses this information to provide its measurement service to us and, under its own privacy policy, for its own purposes, which may include improving its services and personalising advertising. For the collection and transmission of this information through our website, EverXCloud and the provider may act as joint controllers; the provider alone is responsible for its subsequent processing. These providers may process the information in the United States and in other countries (see Section 13 of the Privacy Policy). Durations are those set by the providers at the effective date of this Policy and may change.

4. The Portal

The Portal uses only the following cookies and technologies, all of which are strictly necessary to provide the service you request:

• Authentication (Clerk, Inc., our authentication provider): __session, __client_uat and related cookies, which may carry a suffix, on the Portal domain, and __client on our authentication domain. They keep you signed in and protect your session. Duration: from the length of the session up to the duration of your sign-in, as configured.
• Language (EverXCloud): NEXT_LOCALE, set only when you choose a language with the language selector, to remember that choice. Duration: browser session.
• Security (Cloudflare, Inc.): __cf_bm, cf_clearance and _cfuvid, used to detect automated traffic, apply rate limits and record that a security challenge was passed. Duration: from 30 minutes for __cf_bm up to one year for cf_clearance, as configured. A security check may also be displayed during sign-up to prevent automated account creation.
• Payment (Stripe): when you add a card or make a top-up, our payment processor's script is loaded on the billing pages and may set __stripe_mid (one year) and __stripe_sid (30 minutes) and collect device information, solely to prevent fraud and secure the payment. If you are redirected to a payment page hosted by Stripe, Stripe's own cookies apply on that page under Stripe's privacy and cookie notices.

The Portal does not store business data in your browser's local or session storage, and does not use analytics, advertising or social media cookies.

5. Consent and how to change your choice

Under the rules that apply in the European Economic Area and the United Kingdom (Article 5(3) of the ePrivacy Directive as implemented in each Member State, and regulation 6 of the Privacy and Electronic Communications Regulations in the United Kingdom), consent is not required for cookies that are strictly necessary to provide a service explicitly requested by the user, including authentication, security, fraud prevention for a payment you initiate and the storage of a preference you set yourself, such as your consent choice. The audience measurement and advertising tools described in Section 3 are used only with your prior consent.

You can change or withdraw your choice at any time, as easily as you gave it, with the "Manage cookies" link at the bottom of each page of the website. When you withdraw consent, the cookies of the tools concerned that are set on the website's domain are deleted and the page is reloaded, so that no tool you refused remains active. Cookies that a provider sets on its own domain are governed by that provider's policy and can be deleted in your browser settings. Withdrawal does not affect the lawfulness of processing carried out before it. Your choice is kept for six months; we then ask you again, and we also ask again if we materially change the tools we use.

If your browser sends a Global Privacy Control signal, advertising is refused automatically and the advertising tools are not loaded, whatever you choose in the banner.

The Portal uses only strictly necessary cookies and therefore does not display a consent banner.

6. How to control cookies

You can refuse or withdraw your consent at any time with the consent banner, as described in Section 5. You can also block or delete cookies through the settings of your browser. Most browsers also allow you to block third-party cookies only. Blocking the strictly necessary cookies described in Section 4 will prevent you from signing in to the Portal, completing a security check or making a payment, but will not affect your use of the website.

Signing out of the Portal ends your session. Instructions are available in the help pages of your browser.

7. Changes and contact

We may update this Cookie Policy, in particular if the technologies we use change. The current version is always available on this page with its effective date.

For any question, write to [email protected].

Effective date: 25 October 2026. Version 2026-10-25.