Legal

Cookie Policy

v1.0 · Effective March 21, 2026

TRULO CORPORATION

Effective Date: March 1, 2026

Last Updated: April 4, 2026

This Cookie Policy explains how Trulo Corporation ("Trulo," "we," "us," or "our") uses cookies and similar tracking technologies on jointrulo.com and the Trulo

Platform (collectively, the "Site"). This Policy is incorporated by reference into Trulo's Privacy Policy.

HOW CHOICES WORK ON JOINTRULO.COM

On the Site, your non-essential cookie choice is stored only in this browser using localStorage under the key trulo_cookie_consent with value essential (no analytics scripts) or analytics (Google Analytics and Vercel Web Analytics may load). When you first visit, a bottom banner asks you to choose Essential only or Accept analytics. You can change your choice anytime from the Cookie Policy page (Cookie preferences at jointrulo.com/cookie-policy#cookie-preferences) or via Cookie settings in the footer.

Cookies are small text files placed on your device by a website when you visit. They allow the website to remember your actions and preferences (such as login

status, language, and display settings) over a period of time, so you do not have to re-enter them each time you return. Cookies are not programs and cannot

execute code or deliver viruses.

In addition to cookies, Trulo may use similar technologies including web beacons (transparent pixel images used to track page visits and email opens), local storage

(browser-side data storage), session storage (temporary in-browser storage cleared on browser close), and device fingerprinting (limited use, described below).

2.1 Strictly Necessary Cookies

These cookies are essential to the operation of the Platform and cannot be disabled without breaking core functionality. They do not track personal information for

marketing purposes and are set only in response to actions you take (e.g., logging in, submitting a form, processing a payment). No consent is required for strictly

necessary cookies under applicable law.

Authentication and session management — keeps you logged in during a session

CSRF protection tokens — prevents cross-site request forgery attacks

Load balancing — ensures your requests reach the correct server

Payment processing session tokens — required by Stripe for secure checkout

Access credential delivery — secure one-time tokens for Space access

2.2 Functional Cookies

These cookies enable enhanced functionality and personalization. They remember your preferences so you do not need to re-enter them. Disabling functional

cookies may reduce the quality of your Platform experience.

Language and locale preferences

Display preferences (list vs. map view, saved filters)

Recently viewed Listings

Saved search parameters

Chat and messaging session continuity

2.3 Analytics and Performance Cookies

These technologies collect aggregated information about how visitors use the Site — which pages are visited, session duration, and navigation. We use this data to improve the Platform. On jointrulo.com, Google Analytics and Vercel Web Analytics load only after you choose Accept analytics (or update your saved choice to analytics) via the banner or Cookie preferences; they do not load if you choose Essential only.

Google Analytics (measurement ID configured in the Site; page views and related usage metrics)

Vercel Web Analytics (page views and Web Vitals where enabled)

2.4 Marketing and Targeting Cookies

Marketing and advertising pixels (for example Meta Pixel, Google Ads, LinkedIn Insight Tag, or similar) are not deployed on the Site as of the Last Updated date above. If Trulo adds marketing or targeting technologies in the future, they will be described here and will require your explicit consent before they load.

2.5 Third-Party Cookies

Some cookies are set by third-party services embedded in the Platform (e.g., Stripe, Google Maps, Intercom customer support). These third parties have their own

privacy and cookie policies, which govern how they use any data they collect. Trulo does not control third-party cookies. Links to relevant third-party policies: Stripe

(stripe.com/privacy), Google (policies.google.com).

Session cookies: Expire when you close your browser. Used for authentication and temporary preferences.

Persistent cookies: Remain on your device for a set period (ranging from 30 days to 2 years depending on the cookie). Used for remembered preferences, analytics,

and marketing attribution.

Trulo periodically reviews cookie retention periods to ensure they are no longer than necessary for their stated purpose, consistent with Trulo's Privacy Policy data

minimization principles.

Trulo's cookie practices are governed by applicable U.S. law, including the California Consumer Privacy Act (CCPA) for California residents, and Trulo's voluntary

adoption of consent-based practices for non-essential cookies consistent with international best practices. Trulo does not currently operate in the European

Economic Area and this Policy does not constitute a GDPR-compliant cookie notice, though Trulo applies GDPR-equivalent consent standards for marketing and

analytics cookies as a matter of policy.

Strictly necessary cookies: Legitimate interest / operational necessity — no consent required

Functional cookies: Legitimate interest — opt-out available

Analytics cookies: Consent — opt-out available at any time

Marketing or targeting cookies (if introduced): Explicit consent required before placement — opt-out available at any time

5.1 Cookie banner and preferences

When you first visit the Site, a cookie banner at the bottom of the screen lets you choose Essential only (strictly necessary operation only; analytics scripts do not load) or Accept analytics (Google Analytics and Vercel Web Analytics may load as described in Section 2.3). Your choice is stored in this browser under trulo_cookie_consent. You can change it anytime via Cookie settings in the footer (links to jointrulo.com/cookie-policy#cookie-preferences) or the Cookie preferences section on the Cookie Policy page.

5.2 Browser-Level Controls

Most browsers allow you to refuse or delete cookies through browser settings. Instructions for managing cookies in common browsers:

Chrome: Settings > Privacy and Security > Cookies and other site data

Firefox: Options > Privacy & Security > Cookies and Site Data

Safari: Preferences > Privacy > Manage Website Data

Edge: Settings > Privacy, search, and services > Cookies

Note: blocking all cookies through browser settings will disable strictly necessary cookies and may prevent you from logging in or using core Platform features.

5.3 Opt-Out of Analytics

You may opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on available at

tools.google.com/dlpage/gaoptout.

5.4 Do Not Track (DNT) and Global Privacy Control (GPC)

Browser signals such as Do Not Track (DNT) or Global Privacy Control (GPC) may be supported by your browser or extensions. Trulo's Site currently relies on the explicit choices in this Policy (banner and Cookie preferences) to control whether analytics scripts load. For California privacy rights and opt-outs beyond cookies, see Trulo's Privacy Policy.

Trulo maintains an internal record of cookies and similar technologies used on the Platform. Material additions are reflected in updates to this Policy.

Trulo may update this Cookie Policy to reflect changes in cookie use, legal requirements, or Platform features. Material changes will be communicated by updating

the "Last Updated" date at the top of this Policy and by displaying a prominent notice on the Site for 14 days following the update. Continued use of the Site after the

effective date of a material change constitutes acceptance of the updated Policy.

Cookie and privacy questions: contact@jointrulo.com

Cookie preferences: jointrulo.com/cookie-policy#cookie-preferences (also linked as Cookie settings in the Site footer)

Mailing: Trulo Corporation, Attn: Privacy Office, 157 Weston Road, Wellesley, MA 02482