WrenchReady Cookie Policy

1. INTRODUCTION

This Cookie Policy explains how WrenchReady LLC ("Company," "we," "us," "our") uses cookies and similar tracking technologies on our website, application, and related services (collectively, the "Service"). Please read this policy carefully. By accessing and using WrenchReady, you consent to the use of cookies as described here, except for marketing and analytics cookies for which you may provide separate consent.

This Cookie Policy should be read in conjunction with our Privacy Policy and Terms of Service for complete information about our privacy and data practices.

2. WHAT ARE COOKIES?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit our website or use our Service. Cookies are widely used in web applications to:

• Remember you between visits
• Store your preferences
• Understand how you use the Service
• Improve functionality and user experience
• Provide security

2.1 Types of Cookies

Session Cookies:

• Temporary cookies deleted when you close your browser
• Used for authentication and security
• Essential for Service functionality

Persistent Cookies:

• Remain on your device for a specified period (days, months, or years)
• Facilitate "remember me" functionality
• Store user preferences

First-Party Cookies:

• Set directly by WrenchReady
• Retrieved only by WrenchReady
• Generally essential or functional

Third-Party Cookies:

• Set by external service providers (analytics, payment processors)
• Used for tracking and analytics
• May be shared with other parties
• Subject to third-party privacy policies

3. HOW WE USE COOKIES

3.1 Strictly Necessary Cookies

These cookies are essential for the Service to function and cannot be disabled without breaking functionality. They include:

• session_id - Maintain user login session
• auth_token - Authenticate user identity
• _csrf_token - Prevent cross-site request forgery attacks
• security_key - Verify secure connections
• consent_preferences - Remember your cookie consent choices (12 months)
• user_id - Associate requests with user account
• language_preference - Maintain language/region settings (12 months)
• accessibility_settings - Remember accessibility preferences (12 months)

Your Choice: These cookies cannot be disabled as they are necessary for the Service to function. If you disable these cookies, you will not be able to use WrenchReady.

3.2 Functional Cookies

These cookies enhance user experience but are not strictly required for basic functionality:

• ui_preferences - Remember layout and display preferences (12 months)
• saved_filters - Store recent search filters and queries (12 months)
• dashboard_layout - Remember dashboard customization (12 months)
• notification_settings - Store user notification preferences (12 months)
• timezone - Remember user's timezone (12 months)
• theme_preference - Store dark/light mode preference (12 months)

Your Choice: You can disable functional cookies through your browser settings or WrenchReady account preferences, though this may limit the Service experience.

3.3 Analytics Cookies

These cookies help us understand how users interact with the Service. They collect anonymized data about usage patterns, feature adoption, and performance:

• _ga (Google Analytics) - Track unique visitors and sessions (2 years)
• _ga_[ID] (Google Analytics) - Track page views and events (2 years)
• _gid (Google Analytics) - Identify session and user interactions (24 hours)
• _gat (Google Analytics) - Throttle request rate to Google (1 minute)

Data Collected:

• Pages visited and time spent
• Features used and interaction patterns
• Browser and device information
• Referral sources and entry points
• Exit pages and navigation flows

Your Choice: You can opt out of analytics cookies through our consent manager, using browser cookie settings, or enabling "Do Not Track" in your browser (we respect this signal).

3.4 Marketing and Conversion Cookies

These cookies are used to measure advertising effectiveness and track conversions:

• conversion_id - Track signup conversion (90 days)
• utm_source - Track marketing campaign source (90 days)
• utm_medium - Track campaign medium (90 days)
• utm_campaign - Track campaign name (90 days)
• _fbp (Meta Pixel) - Track visitors across Meta properties (90 days)
• _ga_ads (Google Ads) - Track Google Ads conversions (2 years)

Your Choice: You must provide explicit consent to marketing cookies. You can adjust preferences in your account settings or contact us at marketing@wrenchready.com.

4. SIMILAR TRACKING TECHNOLOGIES

Beyond cookies, we use other technologies to track and enhance user experience:

• Web Beacons (Pixels): Transparent 1x1 pixel images embedded in pages and emails that track page views and email opens
• Local Storage and Session Storage: Browser-based storage persisting across sessions (localStorage) or for the current session (sessionStorage)
• Device Identifiers: Device IDs and fingerprints used for analytics and personalization
• Server-Side Tracking: IP addresses, user agents, and session data logged on our servers for security, analytics, and troubleshooting

5. COOKIE CONSENT AND PREFERENCES

5.1 Consent Model

We implement a layered consent approach:

Automatically Applied (No Consent Required):

• Strictly necessary cookies (security, authentication, functionality)
• Legal compliance and fraud prevention
• Core Service functionality

Consent Required:

• Analytics cookies (Google Analytics)
• Marketing cookies (conversion tracking, remarketing)
• Non-essential functional cookies
• Third-party cookies for advertising

5.2 Managing Preferences

In Account Settings: Update cookie preferences anytime by navigating to Account Settings and selecting "Privacy & Cookies"

Browser Controls: Use your browser's built-in settings to block or delete cookies

Contact Us: Email privacy@wrenchready.com for assistance with cookie preferences

5.3 Right to Withdraw Consent

You may withdraw consent to non-essential cookies at any time with no penalty. The Service remains fully functional with necessary cookies only, though some features may be limited without analytics/functional cookies.

5.4 Respecting "Do Not Track"

We respect browser-based privacy preferences:

• Do Not Track (DNT) Signal: When enabled, we will not set analytics or marketing cookies
• Global Privacy Control (GPC): Similar browser signal that we honor for California residents
• Browser Settings: You can configure cookie blocking per site

6. THIRD-PARTY COOKIES AND PARTNERS

6.1 Google Analytics

Purpose: Understand how users interact with the Service

Data Collected: Pages visited, duration, bounce rate, geographic location, device and browser type, traffic source and referrer, user flow and navigation patterns

Opt-Out: Visit Google's Opt-Out Tool

6.2 Payment Processors (Stripe)

Purpose: Securely process credit card payments

Data Collected: Card information (tokenized, not stored by us), billing address, transaction history, fraud indicators

Note: These cookies cannot be disabled as they are essential for payment processing

6.3 Email Service Provider

Purpose: Send transactional and promotional emails

Data Collected: Email address, email open events, link clicks, unsubscribe status

Opt-Out: Unsubscribe link in emails or account settings

6.4 Cloud Infrastructure (Supabase, Vercel)

Purpose: Host application and store data

Cookies Set: Session management, security tokens, anonymized analytics

7. HOW TO MANAGE COOKIES

7.1 Browser-Level Management

Chrome: Settings → Privacy and Security → Cookies and other site data

Firefox: Settings → Privacy & Security → Cookies and Site Data

Safari: Preferences → Privacy → Manage Website Data

Edge: Settings → Privacy, Search, and Services → Cookies and other site data

7.2 Account-Level Management

Within your WrenchReady account:

1. Go to Account Settings
2. Select "Privacy & Cookies"
3. Toggle cookie categories on/off
4. Save preferences

7.3 Third-Party Opt-Out Tools

• Network Advertising Initiative
• Digital Advertising Alliance
• Your Online Choices
• Google Ads Preferences

8. SPECIAL CONSIDERATIONS FOR COMPLIANCE DATA

8.1 Hazardous Waste and OSHA Data

User Data containing hazardous waste manifests, SDSs, OSHA logs, and injury records is handled with enhanced protection:

• Not tracked by analytics cookies (except anonymized aggregate data)
• Not shared with marketing partners
• Encrypted at rest and in transit
• Retained per OSHA 30-year requirement (cookies do not override this)
• Subject to strict access controls

8.2 Employee Information

For employees identified in OSHA 300 logs or training records:

• Minimal cookies set (only authentication/session)
• No marketing or analytics cookies for their data
• Compliant with occupational privacy standards
• Data accessible only to authorized users

9. COOKIE POLICY UPDATES

9.1 Changes to This Policy

We may update this Cookie Policy to reflect new cookies or technologies, respond to legal requirement changes, improve clarity and transparency, or add or remove tracking tools.

9.2 Notification of Changes

Material changes will be communicated by posting on our website with an effective date. Continued use constitutes acceptance.

10. CONTACT AND DISPUTE RESOLUTION

10.1 Questions About Cookies

Email: privacy@wrenchready.com

10.2 Cookie-Specific Requests

• Opt-Out Requests: privacy@wrenchready.com
• Data Deletion (GDPR/CCPA): See Privacy Policy
• Cookie Audit: Contact DPO at dpo@wrenchready.com

10.3 Response Timeline

• 10 business days: Acknowledge receipt
• 30 calendar days: Detailed response (CCPA/GDPR compliance)
• 60 days: Complex requests or appeals

Disclaimer: This Cookie Policy is provided as a framework and should be reviewed by qualified legal counsel. It is not legal advice. Ensure compliance with current laws in jurisdictions where your service operates (GDPR, CCPA, ePrivacy Directive, PECR, LGPD, etc.). Update this policy when adding new cookies, third-party tools, or when regulations change.