Cookie Policy

Effective Date: March 28, 2026

1. Introduction

This Cookie Policy explains how PAWPASS LLC ("PawPass", "Company", "we", "us", "our") uses cookies and similar tracking technologies on the PawPass website located at https://www.pawpass.rs/en and any associated subdomains or digital interfaces (collectively, the "Platform"). This Cookie Policy should be read together with our Privacy Policy and Terms of Service, both of which are available on the Platform. When you visit the Platform, we may place cookies or similar files on your device in order to operate the Platform effectively, understand how it is used, remember your preferences, and, where you have provided consent, deliver relevant content and advertising. This Cookie Policy describes what these technologies are, why we use them, and what rights you have to control their use. By using the Platform and accepting our cookie consent banner (where applicable), you consent to our use of cookies and similar technologies as described in this Cookie Policy. Where consent is required by applicable law, including the EU ePrivacy Directive (Directive 2002/58/EC as amended), the UK Privacy and Electronic Communications Regulations 2003 ("PECR"), and the General Data Protection Regulation ("GDPR") or UK GDPR, we will only place non-essential cookies with your prior, freely given, specific, informed, and unambiguous consent.

2. What Are Cookies and Similar Technologies

2.1 Cookies

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. Cookies are widely used to make websites function correctly, to improve efficiency, and to provide information to website operators. A cookie contains a unique identifier that enables the Platform to recognize your device across different pages of the same visit or across multiple visits over time. Cookies are set either by the website operator ("first-party cookies") or by third parties whose services are embedded in the website ("third-party cookies"). Cookies may be stored for the duration of a single browsing session ("session cookies") or for a defined period after the session ends ("persistent cookies").

2.2 Web Beacons and Pixels

Web beacons (also known as tracking pixels, clear GIFs, or pixel tags) are small transparent image files embedded in web pages or email messages. When your browser or email client loads a page or email containing a web beacon, the beacon sends a request to the server hosting the image, which can be used to record that a page was visited or an email was opened, and may capture information such as your IP address, browser type, and the time of the interaction.

2.3 Local Storage and Session Storage

Local storage and session storage are browser-based storage mechanisms that allow websites to store data on your device. Unlike cookies, data stored in local storage is not automatically transmitted to the server with each request and has no built-in expiry unless explicitly cleared. We may use local storage or session storage for functionality purposes, such as storing your language preference or session state.

2.4 Device Fingerprinting

Device fingerprinting involves collecting and combining information about your device's characteristics (such as browser type, operating system, screen resolution, installed fonts, and time zone) to create a unique identifier for your device. We may use limited fingerprinting techniques for fraud detection and security purposes only. We do not use fingerprinting for advertising profiling.

2.5 Software Development Kit (SDK) Tracking

Where you access the Platform through a mobile application, we or our third-party service providers may use software development kits (SDKs) embedded in the application to collect analytics and diagnostic data. SDK-collected data is subject to the same protections described in this Cookie Policy and our Privacy Policy.

3. Categories of Cookies We Use

We classify cookies into the following categories based on their purpose and the legal basis on which they are used:

3.1 Strictly Necessary Cookies

Strictly necessary cookies are essential for the Platform to function and cannot be disabled without affecting core functionality. These cookies do not require your consent and are placed on the basis of our legitimate interest in operating a functional and secure platform. They do not store any personally identifiable information beyond what is necessary for the session. Strictly necessary cookies on the Platform include:

  • Session authentication cookies: Maintain your logged-in state across pages during a browsing session, enabling secure account access.
  • CSRF protection tokens: Prevent cross-site request forgery attacks by validating the origin of form submissions.
  • Load balancing cookies: Distribute traffic across servers to ensure Platform stability and performance.
  • Cookie consent preference cookies: Remember your cookie consent choices so you are not asked to consent repeatedly during the same session or across visits.
  • Shopping cart and checkout session cookies: Retain items in your cart and maintain the state of the checkout process.

Retention period: Session cookies expire when you close your browser. Consent preference cookies are retained for up to 12 months.

3.2 Functional Cookies

Functional cookies enable the Platform to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to the Platform. If you do not allow these cookies, some or all of these features may not function correctly. Functional cookies on the Platform include:

  • Language preference cookies: Remember your selected language (e.g., English, Serbian) and apply it on subsequent visits.
  • User preference cookies: Store your display preferences, notification settings, and other customizations.
  • Autofill and form convenience cookies: Retain partial form data to assist you in completing forms across sessions.
  • Accessibility settings cookies: Store accessibility-related preferences you have configured on the Platform.

Legal basis: Consent, or legitimate interests where the cookie is clearly required to fulfill a service explicitly requested by you. Retention period: Up to 12 months from date of placement.

3.3 Performance and Analytics Cookies

Performance and analytics cookies collect information about how visitors use the Platform, such as which pages are visited most often, how long users spend on each page, and whether any error messages were encountered. This information is used in aggregated or pseudonymized form to improve the operation of the Platform. These cookies do not identify you personally. Analytics cookies we may use include:

  • Google Analytics: Collects usage data including page views, session duration, device type, and traffic source. Google Analytics data is processed under Google's data processing terms and may involve transfer of data to the United States. You can opt out of Google Analytics tracking at https://tools.google.com/dlpage/gaoptout.
  • Internal Platform analytics: Proprietary analytics systems that track aggregate Platform usage metrics to support product development and service improvements.
  • Error and performance monitoring: Tools that record technical errors, page load times, and performance issues to support Platform reliability.

Legal basis: Consent. Retention period: Up to 24 months from date of placement, or as set by the specific analytics provider. Data is anonymized or aggregated where technically feasible.

3.4 Marketing and Advertising Cookies

Marketing cookies are used to track visitors across websites and to display advertisements that are relevant and engaging to the individual user. These cookies are placed by us or by third-party advertising partners. They may be used to build a profile of your interests and to show you relevant advertisements on other websites. They do not store personal data directly but uniquely identify your browser and device. We do not currently operate an active paid advertising program targeting third-party websites. Should we implement such a program, we will update this Cookie Policy accordingly and request appropriate consent prior to placing marketing cookies. Any marketing cookies placed on the Platform will be identified below. Legal basis: Explicit consent. You may withdraw consent at any time through the cookie preference center on the Platform. Retention period: Up to 12 months from date of placement.

3.5 Third-Party Cookies

Certain third-party services embedded in or integrated with the Platform may place their own cookies on your device. These third-party cookies are governed by the respective third party's cookie policy and privacy policy, over which PawPass has no direct control. Third parties whose services may result in cookies being placed on your device include:

  • Stripe, Inc.: Payment processing cookies that support secure transaction workflows. Governed by Stripe's Cookie Policy at https://stripe.com/cookie-settings.
  • Google LLC: Analytics and potentially font or API-related cookies. Governed by Google's Privacy Policy at https://policies.google.com/privacy.
  • Social media platforms: If you interact with social sharing features or embedded content from platforms such as Facebook, Instagram, or LinkedIn, those platforms may set their own cookies independently of PawPass.

PawPass is not responsible for the content or privacy practices of third-party cookie providers. We encourage you to review the cookie policies of any third-party services you interact with through the Platform.

4. Cookie Inventory

The following table provides a representative inventory of cookies currently used on the Platform. This list is updated periodically as our technology stack evolves. Please check this Cookie Policy regularly for the most current inventory. Strictly Necessary Cookies

  • Cookie Name: session_id | Purpose: Maintains authenticated session state | Set by: PawPass | Duration: Session | Type: First-party
  • Cookie Name: csrf_token | Purpose: Prevents cross-site request forgery | Set by: PawPass | Duration: Session | Type: First-party
  • Cookie Name: cookie_consent | Purpose: Stores your cookie consent preferences | Set by: PawPass | Duration: 12 months | Type: First-party
  • Cookie Name: cart_session | Purpose: Retains shopping cart contents during checkout | Set by: PawPass | Duration: Session | Type: First-party

Functional Cookies

  • Cookie Name: lang_pref | Purpose: Stores selected language preference | Set by: PawPass | Duration: 12 months | Type: First-party
  • Cookie Name: user_prefs | Purpose: Stores display and notification preferences | Set by: PawPass | Duration: 12 months | Type: First-party

Analytics Cookies

  • Cookie Name: _ga | Purpose: Google Analytics unique visitor identifier | Set by: Google LLC | Duration: 24 months | Type: Third-party
  • Cookie Name: _ga_[ID] | Purpose: Google Analytics session counter | Set by: Google LLC | Duration: 24 months | Type: Third-party
  • Cookie Name: _gid | Purpose: Google Analytics session identifier | Set by: Google LLC | Duration: 24 hours | Type: Third-party

Payment Processing Cookies

  • Cookie Name: __stripe_mid | Purpose: Stripe fraud prevention and transaction security | Set by: Stripe, Inc. | Duration: 12 months | Type: Third-party
  • Cookie Name: __stripe_sid | Purpose: Stripe session identifier for payment workflows | Set by: Stripe, Inc. | Duration: 30 minutes | Type: Third-party

Note: Cookie names, durations, and providers are subject to change as we update our technology stack and third-party integrations. This inventory is reviewed and updated at least every six months. If you identify a cookie on the Platform that is not listed here, please contact us at office@pawpass.rs.

5. Cookie Consent and Consent Management

5.1 Consent Mechanism

On your first visit to the Platform from a jurisdiction requiring cookie consent (including all EU/EEA member states and the United Kingdom), you will be presented with a cookie consent banner that provides you with clear information about the categories of cookies we use and the ability to accept or decline non-essential cookie categories individually. Strictly necessary cookies are placed without requiring consent, as they are essential for the Platform to function. Your consent is: (a) freely given, meaning that declining non-essential cookies does not prevent you from accessing core Platform functionality; (b) specific, meaning that you can consent to individual categories of cookies separately; (c) informed, meaning that you are provided with clear information about each category before consenting; and (d) unambiguous, meaning that consent is indicated by an affirmative action (clicking "Accept" or selecting specific categories), not by pre-ticked boxes or continued scrolling.

5.2 Recording Consent

When you interact with the cookie consent banner, we record your consent choice, the date and time of consent, the version of the Cookie Policy that was displayed, and the categories of cookies you accepted or declined. This record is maintained to demonstrate compliance with applicable law and is stored for as long as your consent remains valid.

5.3 Withdrawing or Modifying Consent

You may withdraw or modify your cookie consent at any time by:

  • Accessing the cookie preference center available via the "Cookie Settings" link in the Platform footer.
  • Clearing all cookies from your browser settings (note: this will delete all cookies, including strictly necessary cookies, and may affect your ability to use certain Platform features until they are re-established).
  • Using your browser's built-in controls to block or delete specific cookies (see Section 6 for browser-specific instructions).

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. After withdrawal, we will cease placing the relevant non-essential cookies on your device on future page loads. Please note that removing consent for certain functional cookies may affect the availability of personalization features.

5.4 Consent Expiry

Cookie consent records expire after 12 months. At the end of this period, you will be presented with the consent banner again and asked to renew your preferences. This ensures that your consent remains current and reflective of your preferences over time.

5.5 Visitors from Outside the EU/EEA and UK

Visitors from jurisdictions where cookie consent is not legally mandated may not be presented with the consent banner. However, the opt-out mechanisms described in this Cookie Policy remain available to all users globally. Visitors from U.S. states with applicable privacy laws (including California, Virginia, Colorado, and Connecticut) may exercise their data rights as described in our Privacy Policy.

6. Browser-Level Cookie Controls

In addition to the cookie preference center on the Platform, you can control cookies through your web browser settings. Most browsers allow you to view, delete, and block cookies from specific websites or all websites. Instructions for the most commonly used browsers are as follows:

  • Google Chrome: Settings > Privacy and security > Cookies and other site data. Visit https://support.google.com/chrome/answer/95647 for detailed instructions.
  • Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data. Visit https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer for detailed instructions.
  • Apple Safari (desktop): Preferences > Privacy > Manage Website Data. Visit https://support.apple.com/guide/safari/manage-cookies-sfri11471 for detailed instructions.
  • Apple Safari (iOS): Settings > Safari > Privacy & Security. Visit https://support.apple.com/en-us/HT201265 for detailed instructions.
  • Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data. Visit https://support.microsoft.com/en-us/windows/delete-and-manage-cookies for detailed instructions.
  • Opera: Settings > Advanced > Privacy & security > Site Settings > Cookies and site data.

Please note that blocking all cookies through your browser settings may prevent certain features of the Platform from functioning correctly, including the ability to log in, complete a purchase, or maintain your language preferences. If you block all cookies and experience Platform issues, please contact us at office@pawpass.rs for assistance.

7. Do Not Track Signals

Some browsers include a "Do Not Track" ("DNT") feature that signals to websites that you do not want to be tracked across sites. There is currently no universally accepted standard for how websites should respond to DNT signals, and the DNT header is not consistently implemented across browsers or honored by all websites. At this time, the Platform does not alter its data collection or use practices in response to browser-generated DNT signals. We continue to offer opt-out mechanisms through our cookie preference center and the browser controls described in Section 6, which provide a more reliable and granular means of managing your cookie preferences. If a universal DNT standard is established and adopted, we will review our practices accordingly and update this Cookie Policy to reflect any changes in our approach.

8. Global Privacy Control

Global Privacy Control ("GPC") is a browser-based signal that allows users to communicate their privacy preferences automatically to websites. GPC is recognized as a valid opt-out signal under the California Privacy Rights Act (CPRA) and may be recognized under other applicable state privacy laws. Where technically feasible and legally required, PawPass will honor GPC signals received from your browser as an expression of your preference to opt out of the sale or sharing of personal data (to the extent PawPass engages in such activities). As noted in our Privacy Policy, PawPass does not sell personal data. We are monitoring regulatory developments regarding GPC obligations and will update our practices accordingly.

9. Third-Party Opt-Out Tools

In addition to the Platform's cookie preference center and browser controls, you may use the following third-party opt-out mechanisms to limit the use of cookies by specific providers:

  • Google Analytics Opt-Out: Install the Google Analytics Opt-Out Browser Add-On available at https://tools.google.com/dlpage/gaoptout. This add-on prevents Google Analytics from collecting data about your visits.
  • Network Advertising Initiative (NAI) Opt-Out: Available at https://optout.networkadvertising.org. Allows you to opt out of interest-based advertising from NAI member companies.
  • Digital Advertising Alliance (DAA) Opt-Out: Available at https://optout.aboutads.info. Provides opt-out mechanisms for participating companies in the United States.
  • European Interactive Digital Advertising Alliance (EDAA): Available at https://www.youronlinechoices.eu. Provides opt-out tools for interest-based advertising in the EU/EEA.
  • Stripe Cookie Settings: Available at https://stripe.com/cookie-settings for managing Stripe's payment-related cookies.

Please note that using third-party opt-out tools may not be effective for all cookies, particularly first-party cookies placed directly by PawPass. For comprehensive control, use the Platform's cookie preference center in conjunction with browser-level controls.

10. Mobile Applications and App-Level Tracking

If you access the Platform through a mobile application, cookies as described in this policy may not apply in the traditional sense, as mobile applications typically use other technologies (such as SDKs, device identifiers, and in-app storage) to achieve similar functions. Mobile tracking may include:

  • Advertising Identifier (IDFA / GAID): Device-level advertising identifiers provided by Apple (IDFA) and Google (GAID) that may be used for analytics and attribution. You can reset or disable these identifiers through your device's privacy settings.
  • App Analytics SDKs: We may embed analytics SDKs in mobile applications to collect usage and performance data equivalent to that described in Section 3.3.
  • Push Notification Identifiers: If you enable push notifications, a push notification token is associated with your account. This is not used for advertising tracking but for delivering service-related notifications.

You can manage mobile tracking preferences through your device's privacy settings under "Privacy" or "Tracking" options, depending on your operating system and version.

11. Data Transfers Associated with Cookies

Some cookies, particularly those set by third parties such as Google Analytics and Stripe, may result in the transfer of data to servers located in countries outside the European Economic Area (EEA) or the United Kingdom, including the United States. Such transfers are subject to appropriate safeguards as described in our Privacy Policy, Section 7 (International Data Transfers). Where cookie-related data transfers to third countries are based on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms, those mechanisms are documented in the respective third-party processor's agreements. You may request further information about cross-border data transfers associated with specific cookies by contacting us at office@pawpass.rs.

12. Cookie Retention Periods

Cookie retention periods vary by cookie category and specific cookie function:

  • Session cookies: Automatically deleted when you close your browser.
  • Functional preference cookies: Retained for up to 12 months from the date of placement.
  • Analytics cookies: Retained for up to 24 months, depending on the analytics provider's settings.
  • Payment processing cookies: Retained for up to 12 months for security-related cookies; session duration for transactional cookies.
  • Consent preference cookies: Retained for 12 months from the date of consent, after which you will be re-prompted.

At the end of each retention period, cookies are automatically deleted from your device by the browser or by the setting platform. You may manually delete cookies at any time through your browser settings as described in Section 6.

13. Updates to This Cookie Policy

We review and update this Cookie Policy periodically to reflect changes in our use of cookies, changes in applicable law or regulatory guidance, and changes in the technologies we use. The "Effective Date" at the top of this document reflects the date of the most recent revision. Material changes to this Cookie Policy, such as the introduction of new categories of cookies or new third-party providers, will be communicated via an updated cookie consent banner and, where appropriate, by email notification to registered users. Non-material changes (such as corrections to cookie names or retention period adjustments) will be reflected in the updated Cookie Policy without a separate notification. We encourage you to review this Cookie Policy each time you visit the Platform to remain informed about our cookie practices. The current version is always available at https://www.pawpass.rs/en.

14. Contact Information

If you have any questions about this Cookie Policy, wish to exercise your rights in relation to cookie-processed data, or wish to report a cookie that does not appear in our inventory, please contact us: Company Name: PAWPASS LLC Mailing Address: 75 E 3rd St, Sheridan, WY 82801, United States Email: office@pawpass.rs Website: https://www.pawpass.rs/en For data protection complaints relating to cookie-based processing, EU and UK residents may also contact the relevant supervisory authority. EU supervisory authorities are listed at https://edpb.europa.eu. The UK supervisory authority is the Information Commissioner's Office, available at https://ico.org.uk.

Cookie Policy | PawPass