Cookie Policy

1. About This Policy

This Cookie Policy explains how Merxac Corp. ("Merxac", "we", "us", or "our") uses cookies, local storage, and similar storage or access technologies when you visit merxac.com or use the Commodity Market Intelligence Service (CMIS) platform. These technologies can support essential site functions, security, authentication, preferences, and performance measurement. This Policy should be read together with our Privacy Policy. The cookie consent banner shown on your first visit provides additional, immediate controls over the technologies described below.

2. What Is a Cookie?

A cookie is a small data file stored on or read from your browser or device. Some cookies are "session" cookies that expire when a browser session ends, while others are "persistent" cookies that remain for a defined period or until deleted. Similar technologies may store identifiers or preferences in local browser storage, or enable a service to recognize your session. The term "cookies" in this Policy is used broadly to include these similar technologies where the context permits.

3. Strictly Necessary Technologies

We use strictly necessary technologies to provide functions that are essential to operate and secure the website and CMIS platform. These include:

• Authentication and session management — keeping you signed in to your CMIS or Deal Portal account and maintaining session security (provided by our authentication infrastructure).
• Security and bot protection — verifying that form submissions come from a real person rather than automated software (provided by Cloudflare Turnstile on our contact and account forms).
• Preference storage — remembering your selected language and, if you are a CMIS subscriber, your saved map view and display settings.
• Cookie consent record — remembering whether you have accepted or rejected non-essential cookies, so the consent banner does not reappear on every visit.

Because these technologies are required for the site to function and cannot be disabled without breaking core functionality, applicable law does not require prior consent for them, and the cookie consent banner does not offer an option to reject them.

4. Analytics Technologies

We use Vercel Web Analytics to understand how visitors use our website — for example, which pages are viewed and how the site performs — so that we can improve navigation, fix errors, and support product development. This technology is designed to operate without setting a persistent tracking cookie or building an individual browsing profile across other websites. It does not use cookies and does not identify you across sessions or across other websites. It does process technical information such as approximate location derived from IP address, device and browser type, and page-view events. Because this analytics service is cookie-free and does not enable cross-site tracking or behavioral profiling, it is loaded for all visitors as part of our legitimate interest in understanding aggregate site usage. The consent banner does not offer an option to opt out of this technology; if you wish to prevent it, you may do so at the browser level as described in Section 9.

5. Interactive Maps and Third-Party Functionality

The CMIS platform and certain other pages use Mapbox to render interactive maps and perform geocoding. Loading a map requires contacting Mapbox's servers directly from your browser, and Mapbox may set its own cookies or use its own similar technologies subject to Mapbox's own privacy terms, independent of Merxac. Because map functionality is core content you have actively navigated to on those pages, we treat this as necessary to deliver the page you requested rather than as a separate non-essential advertising or profiling technology. We do not control Mapbox's own data practices and encourage you to review Mapbox's privacy policy if you have questions about its handling of technical information.

6. We Do Not Use Advertising Cookies

Merxac does not use advertising, retargeting, or cross-context behavioral advertising technologies on merxac.com or the CMIS platform. If this changes in the future, this Policy and the cookie consent banner will be updated to identify the relevant category, purpose, and opt-out or consent mechanism before any such technology is enabled. You should not infer from this Policy that Merxac currently conducts behavioral advertising.

7. Duration of Cookies and Local Storage

Session-based technologies are generally removed when you close your browser. Persistent technologies — such as your saved language preference, CMIS display settings, and cookie consent record — remain stored in your browser until you clear your browser storage, change the setting again, or (for consent records) make a different choice through the cookie settings control described below.

8. Your Consent Choices

When you first visit merxac.com, a cookie consent banner appears at the bottom of your screen. You may choose "Accept All" or "Reject Non-Essential" to acknowledge your preferences and dismiss the banner. Because Merxac does not currently use advertising, retargeting, or cross-site tracking cookies, both choices result in the same active technologies — strictly necessary functions and the cookie-free Vercel Web Analytics described in Section 4. Your choice is stored in your browser so the banner does not reappear on every page. You may reopen the banner at any time using the "Cookie Settings" button at the bottom of this page.

9. Managing Cookies Through Your Browser

Most browsers allow you to view, block, or delete cookies and to control site storage independently of our consent banner. Browser-level controls apply across all websites you visit and may cause certain unrelated site functions to behave differently. Private or incognito browsing modes may limit some local storage but do not necessarily prevent all server-side processing described in this Policy. We cannot guarantee that a browser or device setting will be communicated to every third-party service referenced above.

10. Privacy Preference Signals

Some browsers or browser extensions transmit privacy preference signals such as Global Privacy Control. Where applicable law requires us to honor a qualifying opt-out preference signal for a covered activity, we will process that signal as required for the browser or device from which it is received. We do not treat a generic "Do Not Track" browser signal as having a defined legal effect unless applicable law says otherwise.

11. Server Logs and Technical Information

Independent of cookies, our servers and infrastructure providers may record technical logs — such as authentication events, security events, and error logs — that are necessary to operate, secure, and troubleshoot our services. Disabling cookies does not prevent this server-side processing. Our Privacy Policy describes these activities and the purposes for which the resulting information may be used.

12. Changes to This Policy

We may update this Cookie Policy when the technologies, vendors, or legal requirements described above change. The updated version will be posted with a revised "Last Updated" date. Where a change introduces a new non-essential technology, we will update the consent banner and this Policy before that technology is enabled.

13. Contact

Questions about this Cookie Policy or your cookie choices may be sent to info@merxac.com.