Exodus Enterprises — Cookie & Tracking Technologies Policy

Exodus Enterprises, LLC and our affiliates ("Exodus," "we," "us," "our") use cookies, software development kits ("SDKs"), pixels, tags, and similar technologies (collectively, "cookies") on exoclub.com and related properties. This policy explains what these technologies are, why we use them, and your choices.

Contact
• Email: support@exoclub.com
• Phone: 1-833-271-2956
• Mailing: 1712 Pioneer Ave, Ste 105, Cheyenne, WY 82001, USA

1) Scope & legal framework

This policy covers cookies placed by Exodus and by authorized third parties on our websites, storefronts, and support/marketing surfaces.

• EEA/UK: We follow GDPR and ePrivacy/PECR. Non-essential cookies (analytics/advertising) are opt-in by consent banner or settings.
• U.S. (e.g., CA): Under CPRA/CPA/CTDPA/etc., you may opt out of “selling” or “sharing” personal information (including cross-context behavioral advertising). We honor the Global Privacy Control (GPC) browser signal.

2) What are cookies & SDKs?

• Cookies: small files stored on your device by your browser.
• SDKs/pixels: snippets in our code or apps that can read/write identifiers or send events.
• First-party cookies are set by Exodus; third-party cookies are set by providers (e.g., analytics).

3) Categories we use

We practice data minimization. We do not set analytics/advertising cookies unless you consent (EEA/UK) or until you have a chance to opt out (U.S.).

A. Strictly Necessary (always on)

Essential for core functionality—e.g., cart/checkout, authentication, security (WAF/bot mitigation), load balancing, consent state. These do not require consent.

B. Performance & Analytics (consent in EEA/UK)

Help us understand site usage and improve services (aggregated reports, A/B tests, error telemetry). Examples: Google Analytics, PostHog. Configured with privacy-enhancing settings where available.

C. Advertising/Marketing (consent in EEA/UK; opt-out U.S.)

Measure campaign performance and (where enabled) personalize outreach or audiences. We do not share your data with independent third parties for their own marketing unless you explicitly opt in via our Privacy preferences.

4) Lawful bases & region logic

• EEA/UK:

  • Strictly necessary: legitimate interests (service delivery/security) or ePrivacy exemption.
  • Analytics/Advertising: consent (Art. 6(1)(a) GDPR). You can withdraw at any time.

• U.S.:

  • You can opt out of “sale” or “sharing” for cross-context behavioral advertising via our Do Not Sell or Share link (where displayed), the banner/settings, or GPC.

5) Your controls (consent & opt-out)

• Banner / Preferences Center: Change or withdraw consent by category at any time.
• Global Privacy Control: If your browser sends GPC, we treat it as an opt-out of selling/sharing for that browser.
• Browser controls: Most browsers let you block/delete cookies. Blocking strictly necessary cookies may break site functionality.
• Platform opt-outs: For analytics providers, see their controls below.
• Email pixels (Klaviyo): You can disable images in your email client or unsubscribe; we also minimize email tracking where possible.

6) Providers & examples of cookies/identifiers

Exact names and lifetimes may vary as vendors update SDKs. We keep an up-to-date list in our consent manager.

Provider policies & tools (for convenience):
• Google: Privacy · GA Opt-Out
• PostHog: Privacy
• Klaviyo: Privacy
• Vercel: Privacy
• Automattic/WooCommerce: Privacy · GDPR Notes

7) Do we “sell” or “share” personal information?

We do not sell your personal information in the traditional sense. Some analytics/advertising uses may be deemed “sharing” under U.S. laws. You can opt out via the banner/preferences, the site’s Do Not Sell or Share link (where shown), or a GPC signal.

8) Retention

Cookie lifetimes depend on category and provider. We configure shorter lifetimes where feasible and rotate identifiers. See the table above and our consent manager for current values. When you withdraw consent, we stop reading/writing non-essential cookies going forward and will attempt to remove previously set ones where technically feasible.

9) International transfers

Where cookie-derived personal data is transferred outside the EEA/UK, we rely on SCCs (EU 2021/914) and the UK IDTA/Addendum, plus supplementary measures (encryption in transit/at rest, access controls, data minimization, TIAs) consistent with our GDPR page.

10) Changes to this policy

We update this policy when technologies, providers, or laws change. Material changes will be communicated through our usual channels and reflected in the Effective Date above.

11) How to reach us

Questions or requests about this policy or your choices?
Email: support@exoclub.com · Phone: 1-833-271-2956

Related Policies & Resources

• Privacy Policy — Data collection & use
• GDPR Compliance — Privacy & data protection
• Terms of Service — Legal agreement
• Contact Support — Get help