Cookie Policy

This Cookie Policy explains how MyLittleWorld uses cookies and similar technologies on our marketing website and web application (together, the "Services"). It should be read alongside our Privacy Policy, which explains more generally how we collect and use personal information.

1. What Cookies Are

Cookies are small text files that a website stores on your device (computer, tablet, or phone) when you visit it. They let a website remember things about your visit — like whether you're logged in, or which language you prefer — so you don't have to re-enter that information every time you load a page.

Cookies can be:

• First-party cookies: set directly by MyLittleWorld.
• Third-party cookies: set by a service we use, such as a payment processor.
• Session cookies: temporary, and deleted automatically when you close your browser.
• Persistent cookies: remain on your device for a set period, or until you delete them.

We also use closely related technologies, such as local storage, that work similarly to cookies to store small amounts of information in your browser. For simplicity, this policy refers to all of these collectively as "cookies."

2. How We Use Cookies

We group our cookies into four categories. The essential and authentication categories are always active because the Services cannot function without them. The analytics and marketing categories are described below for transparency and future planning — as of the date of this policy, we do not use any analytics or marketing cookies or similar tracking technologies.

2.1 Essential (Strictly Necessary) Cookies

These cookies are required for the Services to work and cannot be switched off in our systems. They are typically only set in response to actions you take, such as logging in or setting your language preference. Examples currently in use include:

• Locale preference cookie: remembers whether you'd like to use MyLittleWorld in English or French, so you don't have to reselect it on each visit.
• Load-balancing and infrastructure cookies: help route your requests reliably to keep the application responsive.

Because these cookies are necessary to deliver the Services you've requested, you cannot opt out of them through our cookie banner. You can still block them through your browser settings (see Section 4), but doing so may prevent parts of the Services from working properly, including logging in.

2.2 Authentication Cookies

MyLittleWorld's web application uses Supabase Auth (our authentication infrastructure provider) to manage user login sessions. When you log in, Supabase Auth sets essential session and authentication cookies that:

• Keep you signed in as you navigate between pages, so you're not asked to log in repeatedly.
• Identify which account and organization you're accessing, so the right childcare data is shown to the right authorized user.
• Expire automatically after a period of inactivity, or when you log out, for security.

These cookies are strictly necessary for the Services to function — without them, you would not be able to log in or stay logged in to MyLittleWorld — and cannot be disabled through the cookie banner.

2.3 Security Cookies

We use cookies to help protect you, your organization's data, and the Services from misuse. These include:

• CSRF (Cross-Site Request Forgery) protection cookies: help verify that requests made to our servers genuinely originate from you, protecting against attacks that try to perform actions on your behalf without your knowledge.
• Fraud- and abuse-prevention cookies: help us detect and prevent suspicious login activity or misuse of the platform.

Like essential and authentication cookies, security cookies are required for the Services to operate safely and cannot be disabled through the cookie banner.

2.4 Analytics Cookies — Not Currently in Use

As of the date of this policy, MyLittleWorld does not use any analytics cookies or tools. We do not currently use Google Analytics, PostHog, Mixpanel, or any similar product analytics or web analytics service on our marketing site or web application.

We are including this category now so that, if we introduce an analytics tool in the future, we can update this policy with the specific tool's name and details rather than rewriting the document from scratch. If activated, analytics cookies would typically help us understand things like:

• Which pages and features of the Services are used most often.
• How users navigate through the application, to identify points of confusion or friction.
• Aggregate usage patterns that help us prioritize product improvements.

If we begin using analytics cookies, this section will be updated to name the specific tool(s), describe the data collected, and — where the tool is non-essential — that category will be made available for you to accept or reject through the cookie banner described in Section 4.

2.5 Marketing Cookies — Not Currently in Use

As of the date of this policy, MyLittleWorld does not use any advertising, retargeting, or marketing cookies. We do not run advertising pixels (such as Meta/Facebook Pixel, Google Ads remarketing tags, or LinkedIn Insight Tag) and do not share cookie data with third parties for advertising purposes.

As with analytics cookies, this category is included for future-proofing. If activated, marketing cookies would typically be used to:

• Measure the effectiveness of marketing campaigns.
• Show you relevant content or ads about MyLittleWorld on other websites or platforms.
• Avoid showing you ads or messages you've already seen.

If we begin using marketing cookies, this section will be updated to name the specific tool(s), and that category will be made available for you to accept or reject through the cookie banner.

3. Third-Party Cookies

MyLittleWorld itself does not embed third-party analytics or advertising cookies in its marketing site or web application (see Sections 2.4 and 2.5 above). However, when you make a payment or manage billing for a MyLittleWorld subscription, you may be directed to a checkout or billing page hosted by Stripe, Inc. on Stripe's own domain, separate from MyLittleWorld.

While you are on a Stripe-hosted page, Stripe may set its own cookies to process your payment securely, prevent fraud, and operate its checkout experience. These cookies are set and controlled by Stripe, not by MyLittleWorld, and are governed by Stripe's own cookie and privacy policies, which we encourage you to review at stripe.com. We do not control, and are not responsible for, cookies set on Stripe-hosted pages.

If we add other third-party embedded tools in the future (for example, a chat widget, scheduling tool, or analytics provider) that set their own cookies, this section will be updated to name the provider and link to their relevant policy.

4. How to Control Cookies

4.1 Our Cookie Consent Banner

When you first visit the MyLittleWorld marketing site or web application, you will see a cookie banner offering the following choices:

• Accept All: allows all cookie categories described in Section 2, including any analytics or marketing categories that are active at the time.
• Reject Non-Essential: keeps only the essential, authentication, and security cookies active (these cannot be turned off, as explained in Sections 2.1–2.3), and disables any analytics or marketing cookies.
• Customize Preferences: lets you turn individual non-essential categories (such as analytics or marketing) on or off, where such categories are active.

Because MyLittleWorld does not currently use any analytics or marketing cookies, choosing "Accept All" or "Reject Non-Essential" today has the same practical effect: only essential, authentication, and security cookies will be set. The banner and preference options are in place so that, if we activate analytics or marketing cookies in the future, you will have clear, granular control over them from day one.

4.2 Changing Your Preferences Later

You can review or change your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer of our website and web application. This will reopen the preference panel so you can adjust your choices for any non-essential categories.

4.3 Browser Settings

Most web browsers also let you control cookies through their own settings — for example, you can typically block all cookies, block only third-party cookies, or delete cookies after each session. Check your browser's help documentation for instructions, as steps vary by browser and device.

Please note that blocking or deleting essential, authentication, or security cookies through your browser (as opposed to our cookie banner) may prevent you from logging in or using core features of the Services.

4.4 Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is currently no common industry standard for how to respond to this signal, MyLittleWorld does not currently respond to Do Not Track signals differently than described in this policy.

5. Changes to This Policy

We may update this Cookie Policy from time to time — for example, to reflect a new tool we've added, changes in law, or changes to how the Services work. If we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate (such as when we introduce a new category of cookies), we will notify you through the Services or by other reasonable means. We encourage you to review this policy periodically.

6. Contact Information

If you have questions about this Cookie Policy or how MyLittleWorld uses cookies, please contact us at:

MyLittleWorld Inc. Montreal, Quebec, Canada Email: privacy@mylittleworld.ca