RedRadar Technologies Cookie Statement

---

Last updated: April 2026

This Cookies Notice ("Notice") explains how RedRadar Technologies Ltd. ("RedRadar") and EPCYBER LLC ("EPCYBER", and together with RedRadar, "we," "us," "our") use cookies and similar technologies on our websites and other online services.

This Notice forms part of our Privacy Statement and explains:

• what cookies and similar technologies are;
• the categories of cookies we use, and what each category does;
• the legal basis on which we set them;
• how long they remain on your device;
• the third parties whose technologies may run on our sites;
• how you can control or refuse cookies; and
• how to contact us about this Notice.

This Notice applies to the following sites we operate:

• https://redradar.ai
• https://epcyber.com
• Any subdomains and microsites of the above
• Other online services we directly operate that link to this Notice

This Notice does not apply to third-party sites that may be linked from our pages. When you follow a link to another site, that site's own cookie and privacy practices apply.

Cookies are small text files that a website places on your computer or mobile device when you visit it. They are widely used to make websites work, to remember your preferences between visits, and to give site operators information about how their sites are used. Cookies cannot, on their own, identify you personally; they identify the browser on the device you used to visit the site, and any preferences or behavior associated with that browser.

We also use similar technologies that work in comparable ways. In this Notice, when we refer to "cookies," we mean cookies and these similar technologies together unless we say otherwise.

How long a cookie stays on your device depends on whether it is a "session" or "persistent" cookie:

• Session cookies last only until you close your browser. They are then deleted automatically.
• Persistent cookies remain on your device until they expire or until you delete them.

Who owns and controls a cookie depends on whether it is a "first-party" or "third-party" cookie:

• First-party cookies are set and controlled by us.
• Third-party cookies are set by service providers whose technology runs on our sites. The third party — not us — controls how those cookies operate, and any data they collect is governed by that third party's own privacy policy. 
• We attempt to identify all third-party cookies on our sites in this Notice and through our cookie banner, but third parties can change their cookies at any time as their services evolve.

In addition to cookies, we may or may not potentially use the following technologies (or similar), which work in comparable ways:

Web beacons (also known as pixel tags, internet tags, or clear GIFs) are tiny graphics embedded in a web page or email that record information about a visitor or recipient — for example, that a page was viewed or an email was opened. Web beacons may also collect information such as the IP address and browser type of the visitor.

Local storage (including HTML5 localStorage and sessionStorage) is used by web applications to store small amounts of data on your device, typically to remember choices you have made or to cache information for better performance.

Software development kits (SDKs) are bundles of code that can collect information about how an application or page is used. We may use SDKs from analytics or infrastructure providers to support core site functionality. References in this Notice to "cookies" include all of the above unless we specify otherwise.

We use cookies in two categories. We do not use any other category.

Strictly necessary cookies are required for our sites to function. Without them, basic features such as page navigation, security, form submission, and remembering your cookie preferences would not work.

What these cookies do on our sites:

• Remember the cookie preferences you have set so we do not ask you again on every visit.
• Maintain the security and integrity of your session.
• Keep you on the secure (HTTPS) version of the site.
• Support contact and demo request forms.

Legal basis (GDPR / UK GDPR): Our legitimate interest in operating a secure, functional website. Under Section 25(2) No. 2 of the German Telecommunications and Telemedia Data Protection Act (TTDSG), strictly necessary cookies do not require consent because they are essential for providing the service you have requested.

You cannot refuse strictly necessary cookies without affecting how the site works.

Analytics cookies help us understand how visitors use our sites — which pages are read, how visitors arrive, where the site is slow or confusing — so we can improve the experience.

What these cookies do on our sites:

• Count visitors and page views in aggregate.
• Identify the source from which a visitor arrived (for example, a search engine or referring site).
• Measure how visitors move through the site.
• Detect and diagnose errors.

We aggregate the data these cookies produce. We do not use it to build advertising profiles, and we do not share it with third parties for their own purposes.

Legal basis (GDPR / UK GDPR): Your consent. Under Section 25(1) TTDSG, analytics cookies are set only after you have given consent through our cookie banner. You can withdraw consent at any time by reopening the cookie settings on the site.

In jurisdictions that do not require consent for analytics, we set these cookies on the basis of our legitimate interest in understanding how our sites are used.

We do not use, and do not allow third parties to use on our sites, any of the following:

• Advertising or targeting cookies. We do not run online advertising campaigns that follow you across other websites. We do not knowingly allow advertising networks to set cookies on our sites.
• Cross-context behavioral advertising. We do not knowingly share information with third parties to enable advertising on other sites or apps.
• Social media tracking pixels. We do not knowingly embed tracking pixels from Meta (Facebook), X/Twitter, LinkedIn, TikTok, or similar platforms on our sites.
• Data brokers or audience-segment vendors. We do not append third-party data to your activity on our sites, and we do not contribute your activity to third-party audience segments.

If this changes in the future, we will update this Notice and, where required by applicable law, ask for your consent before any new category of cookie is set.

• Session cookies are usually deleted automatically when you close your browser (unless there is a technical issue or reason for that not to happen automatically).
• Persistent cookies stay on your device until they expire or until you delete them. The maximum lifetime of any persistent cookie set by us is up to 13 months, in line with French CNIL and other European supervisory authority guidance. Many of our cookies expire much sooner.

The expiry of any specific cookie is shown in the cookie banner on each site, and in the inventory you can request from us.

You have several ways to control which cookies are set on your device.

When you first visit our sites, our cookie banner asks you to accept or decline non-essential cookies. You can change your choice at any time by reopening the cookie settings from the link in the website footer. Withdrawing consent does not affect the lawfulness of any processing that took place before the withdrawal.

Most browsers let you view, manage, block, and delete cookies, either site by site or across all sites. The exact steps depend on the browser you use.

For mobile devices, the equivalent settings are usually found in the privacy or content settings of your mobile browser, or in the system settings of your device. If you block strictly necessary cookies, parts of our sites may stop working as expected.

Most operating systems offer device-level privacy and tracking controls — for example, the App Tracking Transparency setting on iOS and the equivalent controls on Android. These work alongside the controls in your browser.

We recognize Global Privacy Control (GPC) signals where required by applicable law and treat them as an opt-out from any sale or sharing of personal information for cross-context behavioral advertising. As described above, we do not engage in cross-context behavioral advertising in any case, but the GPC signal is honored consistently. We do not currently respond to legacy "Do Not Track" browser signals because no consistent industry standard has emerged for them. We will revisit this position if a standard is adopted.

We may update this Notice from time to time to reflect changes in the cookies we use, in our service providers, or in legal or regulatory requirements. The "Last updated" date at the top of this Notice indicates when the most recent change was made. Material changes will be notified through our cookie banner or through a notice on the site. We encourage you to review this Notice periodically to stay informed about our use of cookies.