Cookie & Advertising Notice
How Merch365 uses cookies and similar technologies, our no-third-party-ad-tech posture, and how we handle Global Privacy Control and 'Do Not Sell or Share.'
Scope: Both Merch365 surfaces — the platform at
merch365.aiand the storefronts/apex at*.merch365.shop. Referenced by the Privacy Notice and the Storefront Privacy Notice.
Last updated: June 8, 2026
This Notice explains how Merch365 uses cookies and similar technologies (pixels, SDKs, local storage) and your choices, including how we handle advertising and the California “Do Not Sell or Share” right.
1. Categories of cookies we use
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Core functions: authentication/session, security, load balancing, cart and checkout | session/auth cookies, tenant/store context, CSRF tokens |
| Functional | Remember preferences and onboarding progress | language/region, saved settings, onboarding state |
| Analytics / performance | Understand usage to improve the product | first-party product analytics |
| Advertising / targeting | Not used. We do not currently deploy third-party advertising or retargeting pixels. | — |
Strictly necessary cookies are required for the sites to work. The others are used to operate and improve the service, as permitted by law and, where required, with consent.
2. Third-party technologies
Some cookies/technologies are set by service providers acting for us (e.g., analytics, payments fraud-prevention via Stripe). See Subprocessors. Third parties’ own terms and privacy policies govern their technologies.
3. Your choices
3.1 Browser & device controls. You can block or delete cookies via your browser or device settings; strictly necessary cookies cannot be switched off without breaking core functions.
3.2 Consent / preference controls. Because we use only essential, functional, and first-party analytics cookies (no third-party ad tech), we do not currently operate a consent banner. If we later add technologies that require consent, we will deploy a consent/preference tool and describe how to change your choices here.
3.3 Analytics opt-out. You can limit analytics by blocking non-essential cookies in your browser settings and by sending a Global Privacy Control (GPC) signal, which we honor (see §4).
4. Advertising, “sale/share,” and Global Privacy Control
Merch365 does not sell, and does not share for cross-context behavioral advertising, your personal information. We use only first-party analytics to operate and improve the service. As a forward-looking commitment, if we ever adopt advertising technologies that constitute a “sale” or “share” under the CCPA/CPRA, we will:
- add a “Do Not Sell or Share My Personal Information” link to our site footer;
- treat a valid Global Privacy Control (GPC) browser signal as a request to opt out of sale/share for that browser/device;
- not require you to create an account to opt out; and
- not use dark patterns in the opt-out flow — the control will be easy to find and use.
We honor GPC signals today as part of this commitment.
5. Changes & contact
We may update this Notice; the current version is posted with its “Last updated” date. Questions: privacy@merch365.ai.