StampEzee Cookie and Similar Technologies Policy
Effective date: 25 September 2026
Last updated: 25 September 2026
Table of contents
Operator: Elyon Techno Labs Inc. operating as StampEzee
Contact: hello@stampezee.com
Address: Tiffany Court, Mississauga, Ontario, Canada
This Policy explains how StampEzee uses cookies, local storage, software development kits, pixels, device identifiers and comparable technologies when people use our public websites, retailer dashboard, Shopify application, mobile applications and related online services. It should be read with the StampEzee Privacy Policy. It does not replace a retailer’s own privacy or cookie notice for technologies that the retailer selects or controls on its own website, point-of-sale environment or communications.
At launch, StampEzee is intended to use only technologies that are necessary to provide, secure and remember choices within the Service. StampEzee will not activate optional analytics, advertising or cross-context behavioural tracking technologies unless this Policy and the consent interface are updated before those technologies are deployed.
1. Scope and responsibility
Elyon Techno Labs Inc., operating as StampEzee, is responsible for the technologies it places or controls on StampEzee-operated properties. A participating retailer may separately control technologies on its own storefront, website, devices, point-of-sale system or marketing channels. Shopify, Apple, Google, payment providers, communications providers and integration partners may also use technologies under their own terms when a user accesses their services.
This Policy applies to browser-based technologies and, where relevant, comparable identifiers or storage used by mobile applications. Mobile apps do not always use browser cookies, but they may use secure local storage, app-instance identifiers, push-notification tokens and diagnostic records for similar operational purposes.
2. What these technologies are
Cookies: Small text files stored by a browser. They may last for one session or for a defined period.
Local or session storage: Browser storage used for session state, preferences, consent records or temporary workflow data.
SDKs and app identifiers: Code and identifiers used in mobile or connected applications for authentication, security, push delivery and core app operation.
Pixels and tags: Small code elements that can record that a page, message or feature was loaded or used. StampEzee does not intend to use advertising pixels at launch.
Server logs: Records generated when a device connects to the Service, including timestamps, IP address, request details, authentication events and security signals.
3. Technologies used at launch
The precise technical name of a cookie or storage key may vary by environment, deployment or provider. The categories below describe the purposes, providers and maximum intended durations. StampEzee will maintain the deployed inventory and update this table when a material technology is added or its purpose changes.
| Category and example | Purpose | Party | Typical duration |
|---|---|---|---|
| Authentication and session | Sign users in, maintain an authenticated session, route requests and prevent unauthorized access. | StampEzee or its hosting/authentication provider | Session or up to 30 days, depending on “remember me” and security settings |
| Security and anti-abuse | CSRF protection, rate limiting, bot and fraud detection, OTP integrity, account protection and suspicious-activity monitoring. | StampEzee and security/communications providers | Session to 13 months, depending on the security record |
| Consent and privacy choices | Remember whether a user accepted, rejected or customized optional technologies. | StampEzee or its consent-management provider | Up to 13 months, then the choice may be requested again |
| Preferences | Remember language, region, accessibility and interface choices requested by the user. | StampEzee | Session to 12 months |
| Shopify app operation | Authenticate the merchant installation, validate requests, maintain embedded-app state and process required privacy events. | StampEzee and Shopify | Session or as required for the installed app and security controls |
| Mobile app operation | Maintain secure sign-in state, app settings, device/app instance and push-notification routing. | StampEzee, Apple or Google, as applicable | Until logout, token rotation, app removal or account deletion; security logs may be retained longer |
| Wallet pass operation | Provision, update and revoke an Apple Wallet or Google Wallet loyalty pass when requested. | StampEzee, Apple or Google, as applicable | For the life of the pass or until removal, revocation or account deletion, subject to platform records |
| Operational diagnostics | Record service errors, availability and security events needed to maintain the Service. No optional cross-site advertising profile is created. | StampEzee and its infrastructure providers | Normally up to 12 months unless required longer for an incident or legal obligation |
4. Strictly necessary technologies
Technologies are treated as strictly necessary only when they are required to transmit a communication, provide a feature expressly requested by the user, protect the Service, authenticate an account, record a privacy choice or complete another essential operation. Where the law permits, these technologies operate without optional consent because disabling them would prevent or materially impair the requested service.
A user may still block or delete them through browser or device settings, but sign-in, retailer-dashboard access, OTP verification, reward redemption, Wallet updates, checkout-related integration and other features may no longer work correctly.
5. Optional analytics advertising and personalization
StampEzee does not intend to deploy optional analytics, advertising, retargeting or cross-context behavioural tracking at launch. If StampEzee later introduces any such technology, StampEzee will, before activation:
- identify the provider, purpose, data involved and duration in this Policy or the live cookie inventory;
- obtain prior consent where required and keep optional technologies disabled until a valid choice is made;
- offer a reject option that is as accessible as the accept option;
- allow the user to withdraw or change consent without detriment to core service access; and
- avoid using sensitive information or children’s information for behavioural advertising.
Aggregated statistics that cannot reasonably be linked to an individual are not personal information, but the underlying collection technology may still require notice or consent.
6. Retailer storefronts and integrations
A retailer may install a StampEzee app embed, widget, link, QR experience or integration on a retailer-controlled storefront. StampEzee will limit its own storage and access technologies to what is needed to provide the requested loyalty function. The retailer remains responsible for its storefront consent banner and for disclosing retailer-selected advertising, analytics, point-of-sale or marketing technologies. A retailer must not configure StampEzee or another integration to place optional technologies before obtaining any legally required consent.
Shopify and other platform or POS providers may independently place or read technologies needed to operate their services. Their privacy and cookie notices apply to those activities. StampEzee does not control a third party’s independent technology choices.
7. Email WhatsApp SMS and push technologies
Operational messages may contain delivery identifiers or link parameters used to route a message, protect a redemption link, prevent fraud, measure technical delivery or honour an unsubscribe request. StampEzee will not use message-open pixels for advertising profiling at launch. Retailers are responsible for lawful authority and content when they initiate marketing campaigns; StampEzee may act as their service provider for delivery.
8. Your choices
Cookie settings. If StampEzee deploys optional technologies, a Cookie Settings control will allow users to accept, reject or change category choices.
Browser controls. Most browsers allow users to delete stored data, block cookies or restrict third-party storage. Browser controls may not govern mobile SDKs or server logs.
Mobile controls. Users can manage notification, advertising and permission settings through iOS or Android. Removing a Wallet pass does not necessarily delete the underlying loyalty account.
Marketing choices. Users may use the unsubscribe or preference mechanism provided with an eligible commercial message. Operational and security messages may continue where necessary to provide the account or protect it.
Where applicable law requires recognition of a browser-based opt-out preference signal, StampEzee will process supported signals as required. Because “Do Not Track” is not a uniform legal or technical standard, StampEzee may not respond to a generic Do Not Track header in every context.
9. Data retention and protection
StampEzee retains a cookie, token or comparable identifier only for the period reasonably necessary for its stated purpose, subject to shorter browser or provider expiry and longer preservation when required for security, fraud investigation, legal compliance or a dispute. StampEzee applies safeguards appropriate to the sensitivity and function of the information. No internet service can be guaranteed completely secure.
10. Changes to this Policy
StampEzee may update this Policy when its technology, providers, legal obligations or business practices change. The “Last updated” date will be revised. If a change materially expands optional tracking or changes the purposes for which consent was obtained, StampEzee will provide additional notice and obtain a new choice where required before the new use begins.
11. Contact
Questions, requests or complaints about cookies and similar technologies may be sent to hello@stampezee.com or mailed to Elyon Techno Labs Inc., Tiffany Court, Mississauga, Ontario, Canada.
Publication checklist
Complete these implementation items before publication. They are operational requirements, not optional drafting notes.
- Replace the address with the complete civic address and postal code.
- Confirm the deployed cookie and storage-key inventory against production and add exact technical names where feasible.
- Confirm that no analytics, crash-reporting or advertising SDK activates before the appropriate consent decision.
- Provide a persistent Cookie Settings link if optional technologies are enabled.
- Align the Privacy Policy, mobile-store disclosures and Shopify app disclosures with this Policy.