COOKIE POLICY

LabTested, Co., a Delaware corporation (“LabTested,” “we,” “us,” or “our”), uses cookies and similar technologies in connection with https://www.labtested.co and the related LabTested platform.

This Cookie Policy describes the technologies used through the LabTested website, merchant dashboard, laboratory portal, embeddable widgets, hosted results pages, barcode and scan pages, application programming interfaces, and related services collectively referred to as the “Service.”

The Privacy Policy provides additional information about how LabTested collects, uses, discloses, retains, and protects personal information.

1. Cookies and Similar Technologies

1.1 A cookie is a small text file stored on a browser or device when a website is visited. Cookies may recognize a browser, maintain a session, remember settings, support security, or provide information about how a website or online service is used.

1.2 LabTested may also use technologies that perform similar functions, including:

1.2.1 local and session storage;

1.2.2 pixels and web beacons;

1.2.3 software development kits;

1.2.4 browser identifiers;

1.2.5 server, API, and access logs;

1.2.6 authentication tokens;

1.2.7 embedded scripts; and

1.2.8 device and network identifiers.

1.3 References to “cookies” in this Policy include cookies and comparable technologies unless the context requires otherwise.

2. First-Party and Third-Party Cookies

2.1 First-party cookies are placed or controlled by LabTested through the Service.

2.2 Third-party cookies are placed or controlled by external providers whose technologies are integrated with the Service.

2.3 Third-party providers may process information under their own privacy policies. LabTested does not control a third party’s independent use of information outside the services provided to LabTested.

3. Session and Persistent Cookies

3.1 Session cookies ordinarily expire when the browser is closed or the relevant session ends.

3.2 Persistent cookies remain on a browser or device until their stated expiration date, deletion by the user, replacement by the applicable provider, or removal through browser settings.

3.3 Storage periods differ according to the cookie’s purpose, configuration, and provider. LabTested seeks to retain cookie information only for as long as reasonably necessary for the applicable purpose.

4. Categories of Cookies

4.1 Strictly Necessary Cookies

Strictly necessary cookies support essential Service functions and cannot ordinarily be disabled through LabTested’s preference controls.

They may be used to:

4.1.1 authenticate users and maintain login sessions;

4.1.2 protect Accounts against unauthorized access;

4.1.3 prevent fraud, abuse, and malicious activity;

4.1.4 apply security and access-control settings;

4.1.5 balance network traffic and maintain availability;

4.1.6 process user requests and navigation;

4.1.7 maintain shopping, checkout, or Subscription activity;

4.1.8 remember privacy and cookie choices;

4.1.9 protect forms and prevent automated submissions; and

4.1.10 maintain essential widget, hosted-page, and scan-page functions.

When you use LabTested AI, a local-storage entry whose name starts with “labtested-ai-session:v1” holds a session token, expiry time, and remaining question allowance to maintain the question session and enforce usage limits. It does not contain your question or answer text. The session is valid for 24 hours; expired storage may remain until it is cleared or replaced, but is not accepted as a valid session. You can remove it through browser settings. Clearing this entry or the visible conversation does not delete LabTested’s separate question history. See the Privacy Policy for AI data handling and deletion requests.

Disabling these technologies through browser settings may prevent the Service from operating correctly.

4.2 Functional Cookies

Functional cookies may remember choices and provide enhanced functionality.

They may be used to remember:

4.2.1 language and regional settings;

4.2.2 dashboard preferences;

4.2.3 display and accessibility settings;

4.2.4 previously selected products, batches, or filters;

4.2.5 user-interface configurations; and

4.2.6 other optional Service preferences.

Where required by applicable law, functional cookies will not be activated without the required consent.

4.3 Analytics and Performance Cookies

Analytics and performance cookies help LabTested understand how visitors and users interact with the Service.

They may collect information about:

4.3.1 pages and screens viewed;

4.3.2 links, buttons, and features used;

4.3.3 session duration and navigation paths;

4.3.4 referring websites and storefront domains;

4.3.5 browser, device, and operating-system information;

4.3.6 approximate location derived from an IP address;

4.3.7 widget views and public-results-page activity;

4.3.8 barcode and QR-code scan events;

4.3.9 API performance and usage;

4.3.10 errors, crashes, and page-loading times; and

4.3.11 aggregated traffic and engagement patterns.

LabTested may use this information to measure performance, diagnose technical problems, understand feature adoption, generate merchant analytics, and improve the Service.

Non-essential analytics technologies will be subject to any consent or opt-out requirement applicable to the user.

4.4 Advertising and Marketing Cookies

LabTested does not currently use personal information for cross-context behavioral advertising.

LabTested may introduce advertising or marketing technologies in the future, including Google Analytics advertising features, Meta Pixel, or comparable services. Such technologies may measure advertising performance, attribute visits, build audiences, or support targeted advertising.

Before activating technologies that constitute targeted advertising, cross-context behavioral advertising, a sale, or sharing of personal information under applicable law, LabTested will provide legally required notices, consent tools, and opt-out mechanisms.

5. Cookies Used for Accounts and Authentication

5.1 Account and authentication technologies may recognize an authenticated user, maintain an active session, enforce Account permissions, and reduce repeated login requests.

5.2 Authentication providers may place or process session identifiers, security tokens, device information, IP addresses, and related technical information.

5.3 Merchant administrators are responsible for ensuring that Authorized Users protect their devices and credentials, log out of shared devices, and do not permit unauthorized Account access.

6. Payment and Subscription Technologies

6.1 LabTested may use Stripe to process direct Subscription payments and may use Shopify’s billing system for Subscriptions purchased through the Shopify App Store.

6.2 Stripe, Shopify, or another applicable provider may use cookies and similar technologies when a user interacts with checkout, app-pricing, billing, invoicing, payment, refund, or fraud-screening functionality.

6.3 Payment and billing technologies may process information concerning the transaction, subscription, browser, device, network, payment method, invoice, storefront, and risk indicators.

6.4 LabTested does not ordinarily receive or store complete payment-card numbers.

7. Shopify and Other Integrations

7.1 Merchants may install the LabTested Shopify app or connect Shopify or another third-party platform to the Service.

7.2 Shopify and other connected platforms may use cookies or similar technologies under their own policies, billing systems, and settings.

7.3 LabTested may receive storefront identifiers, product information, configuration details, authorization tokens, app-billing information, and technical information required to operate the integration.

7.4 Merchants are responsible for providing any notice or consent required for cookies and tracking technologies operating through their own websites, storefronts, applications, or integrations.

8. LabTested Widgets on Merchant Websites

8.1 A Merchant may embed a LabTested widget on a third-party website or product page.

8.2 The widget may process limited technical information necessary to:

8.2.1 retrieve and display published laboratory information;

8.2.2 connect the widget to the correct Merchant, product, batch, or results page;

8.2.3 maintain security and prevent misuse;

8.2.4 measure widget availability and performance;

8.2.5 record views and interactions;

8.2.6 diagnose errors; and

8.2.7 generate analytics for LabTested and the applicable Merchant.

8.3 Information may include an IP address, referring domain, browser type, device type, timestamp, page identifier, widget identifier, and interaction event.

8.4 The Merchant controls the website on which the widget appears and remains responsible for that website’s privacy notices, cookie banner, consent configuration, and unrelated tracking technologies.

8.5 The presence of a LabTested widget does not mean that LabTested controls or endorses the Merchant website, its products, or its privacy practices.

9. Hosted Results and Scan Pages

9.1 When a person opens a public results page or scans a barcode or QR code connected to LabTested, cookies and comparable technologies may be used to deliver the page, protect the Service, prevent abuse, and measure engagement.

9.2 LabTested may record the page or product viewed, scan event, approximate location, device type, browser information, IP address, referring source, and timestamp.

9.3 Scan and results-page information may be provided to the applicable Merchant in aggregated, de-identified, or limited identifiable form, subject to the Privacy Policy and applicable law.

10. Email Technologies

10.1 Transactional, support, and marketing emails may contain pixels or tracked links that indicate whether a message was delivered, opened, or selected.

10.2 Email information may be used to maintain deliverability, diagnose communication failures, measure engagement, protect against abuse, and improve communications.

10.3 Users may unsubscribe from marketing emails through the link included in the message. Account, billing, security, legal, and Service communications may continue where necessary.

10.4 Blocking images or disabling tracking through an email provider may limit email measurement.

11. Cookie Preferences

11.1 Where available, users may manage non-essential cookies through the LabTested cookie banner or preference center.

11.2 A preference may apply only to the browser and device through which it was submitted. Preferences may need to be set again after changing browsers, using another device, clearing cookies, or using private-browsing mode.

11.3 Necessary cookies cannot ordinarily be disabled through the preference center because they support essential Service functions.

11.4 Consent may be withdrawn at any time by reopening the cookie preference center and changing the selected settings.

12. Browser and Device Controls

12.1 Most browsers allow users to view, restrict, block, or delete cookies and other website data through their browser settings.

12.2 Instructions for managing cookies are available from the principal browser providers:

12.2.1 Google Chrome: https://support.google.com/chrome/answer/95647?hl=en

12.2.2 Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

12.2.3 Apple Safari on Mac: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

12.2.4 Microsoft Edge: https://support.microsoft.com/en-us/edge/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use

12.3 Mobile-device operating systems may provide additional controls concerning advertising identifiers, location information, permissions, application tracking, and stored website data.

12.4 Blocking or deleting all cookies may prevent authentication, payment, dashboard, widget, public-page, preference, or other Service functions from operating correctly.

12.5 Browser and device controls are maintained by their respective providers and may be changed, relocated, or discontinued independently of LabTested.

13. Global Privacy Control and Opt-Out Signals

13.1 Where LabTested is legally required to recognize an opt-out preference signal, including a qualifying Global Privacy Control signal, LabTested will process the signal as a request to opt out of the sale or sharing of personal information for the browser or device sending the signal.

13.2 LabTested does not currently sell personal information or share personal information for cross-context behavioral advertising.

13.3 Where future practices create an applicable opt-out right, LabTested will provide the required mechanism and honor legally recognized signals.

13.4 An opt-out preference signal does not disable cookies required to provide requested functionality, authenticate users, protect security, prevent fraud, or comply with law.

14. Do Not Track

14.1 Some browsers transmit “Do Not Track” signals.

14.2 No uniform industry standard currently governs how all websites must respond to those signals. LabTested does not respond to browser “Do Not Track” signals unless applicable law requires a response.

14.3 Legally recognized opt-out preference signals are handled separately under Section 13.

15. Sale and Sharing of Personal Information

15.1 LabTested does not currently sell personal information for monetary or other valuable consideration.

15.2 LabTested does not currently share personal information for cross-context behavioral advertising.

15.3 Service providers may process cookie information to provide hosting, authentication, payments, analytics, communications, fraud prevention, security, integrations, or other contracted services.

15.4 Contracted disclosures to service providers are not treated as sales or sharing where the applicable legal requirements are satisfied.

15.5 LabTested will update this Policy and provide applicable rights before materially changing these practices.

16. Cookie Retention

16.1 Session cookies ordinarily expire at the end of the browser session.

16.2 Authentication and security cookies may remain for the period needed to maintain a secure session, remember an authorized device, investigate misuse, or enforce security settings.

16.3 Preference cookies may remain until the user changes a preference, deletes the cookie, or the cookie expires.

16.4 Analytics information may be retained in identifiable, pseudonymous, aggregated, or de-identified form for the period reasonably necessary to analyze performance and improve the Service.

16.5 Provider-controlled retention periods may differ according to the provider’s configuration and policies.

17. Children

17.1 The Service is intended for businesses and is not directed to children under 13 years of age.

17.2 LabTested does not knowingly use cookies to collect personal information from children under 13 for targeted advertising or profiling.

17.3 A parent or guardian who believes that a child has provided personal information through the Service may contact hello@labtested.co.

18. Changes to This Policy

18.1 LabTested may update this Policy to reflect changes in technologies, providers, legal requirements, or Service functionality.

18.2 The “Last Updated” date identifies the most recent revision.

18.3 Material changes will be communicated through the Service, a cookie banner, email, or another method required by applicable law.

19. Contact

Questions about this Cookie Policy or LabTested’s use of cookies and similar technologies may be sent to:

LabTested, Co.

702 Cedar Street

Santa Monica, CA 90405

United States

Website: https://www.labtested.co

Email: hello@labtested.co