Cookie Policy

This Cookie Policy explains how Evergreen Exchange Enterprises, LLC (“The Evergreen Exchange,” “we,” “us,” or “our”) uses cookies and similar tracking technologies on our marketing website (theevergreenexchange.com) and on the Evergreen Certified verification portal (the “Portal”), which consumers access by scanning an Evergreen Certified label on a product.

By using either of these properties, you consent to the use of cookies as described in this Policy. This Policy should be read alongside our Privacy Policy, available at theevergreenexchange.com/privacy, which provides additional detail on how we collect, use, and protect information about you.

1. What Cookies Are

Cookies are small text files placed on your device — computer, tablet, or mobile phone — when you visit a website. They allow the website to recognize your device and remember certain information about your visit.

Cookies serve several common functions, including:

Keeping certain features working correctly across pages
Remembering your preferences and settings
Collecting data about how visitors use a site so that the site can be improved
Measuring how marketing and content performs

In addition to cookies, we also use similar technologies such as pixel tags (also called web beacons) and JavaScript tracking scripts. For simplicity, this Policy refers to all of these technologies collectively as "cookies."

2. Cookies We Use

We use two categories of cookies across our properties: Essential cookies, which are required for basic functionality, and Analytics cookies, which help us understand how our sites are used. We do not use advertising cookies or sell cookie-derived data to third parties.

2A. Essential Cookies

Essential cookies are necessary for the marketing site and the Evergreen Certified verification portal to function. They enable core operations such as session management and security. These cookies do not collect information used for marketing purposes and cannot be disabled without affecting site functionality.

Cookie Name / Type - Provider - Purpose - Duration

"Session Cookie" -The Evergreen Exchange -Maintains your active session while you navigate the site or portal. Expires when you close your browser. - Session (expires on browser close)

CSRF Token - The Evergreen Exchange - Protects against cross-site request forgery attacks by validating that requests originate from our own site. - Session

Security State -The Evergreen Exchange -Stores temporary state required to serve secure verification results when you scan an Evergreen Certified label. - Session

2B. Analytics Cookies

We use analytics cookies to understand how visitors interact with our marketing site and verification portal. This helps us improve the experience for consumers who scan Evergreen Certified labels, optimize our marketing site for prospective clients, and measure the overall effectiveness of our platform.

The analytics tools we use — Google Analytics 4 and PostHog — are active on both the marketing site and the Evergreen Certified verification portal. Each tool is described in detail in Section 3 (Third-Party Cookies) below.

Cookie Name / Type - Provider - Purpose - Duration

_ga, _ga_* - Google Analytics 4 - Distinguishes unique users and tracks session activity, including pages visited, scroll depth, and engagement events. - 2 years

_gid - Google Analytics 4 - Distinguishes users for a shorter measurement period. - 24 hours

ph_* - PostHog -Tracks user behavior and product analytics events, including feature engagement and session activity. - 1 year

posthog_session - PostHog - Maintains session continuity for behavioral event tracking within a single visit. - Session

Analytics data is used to generate aggregate reports on how our platform is performing. End User data is not shared with our business clients ("Clients") at the individual level. Clients receive only aggregated and de-identified analytics — such as total scan counts and engagement rates — not individual user records. This aggregate reporting may also include anonymized session interaction recordings captured via PostHog — behavioral replays of how users interact with the verification portal. No session recording is linked to or identifiable by any individual user, and no individually identifiable data is shared with Clients.

3. Third-Party Cookies

Some cookies on our properties are set by third-party service providers we work with. These providers have their own privacy and cookie policies, which govern how they process data collected through these cookies. We encourage you to review their policies directly.

Google Analytics 4 (Google LLC)

Google Analytics 4 is a web analytics service provided by Google LLC. It uses cookies to collect information about how users interact with our marketing site and verification portal, including session duration, pages viewed, scroll behavior, device and browser type, and general geographic location (city-level). This data is transmitted to and stored on Google servers.

Google Analytics data is used by The Evergreen Exchange in aggregate form to improve site performance and measure platform engagement. We do not enable Google Signals or allow Google to use data from our properties for advertising personalization. You can learn more about how Google uses data at policies.google.com/technologies/partner-sites.

You may opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.

PostHog (PostHog, Inc.)

PostHog is a product analytics platform provided by PostHog, Inc. It uses cookies to collect behavioral event data, including user interactions with specific features, session recordings (where enabled), and product engagement metrics on both the marketing site and verification portal.

PostHog data is used internally by The Evergreen Exchange to improve the quality of the verification experience for consumers and to support product development. PostHog does not use data collected on our properties for advertising or third-party purposes.

You can learn more about PostHog's data practices at posthog.com/privacy.

4. What We Do Not Do

To be clear about the boundaries of our cookie use:

We do not use advertising or retargeting cookies on any of our properties.
We do not sell cookie-derived data to third parties.
We do not share individual-level cookie data with our business clients.
We do not use cookies to build personal profiles for cross-site tracking.
We do not enable features in Google Analytics 4 that allow Google to use our visitors' data for advertising personalization.

5. Managing Cookies

You have several options for controlling how cookies are set and used when you visit our properties. Please note that disabling certain cookies — particularly Essential cookies — may affect how our site and portal function.

Browser Settings

Most web browsers allow you to view, manage, block, and delete cookies through their settings menus. Instructions vary by browser; the links below direct you to current guidance from major browser providers:

Google Chrome: support.google.com/chrome/answer/95647

Mozilla Firefox: support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

Apple Safari: support.apple.com/guide/safari/manage-cookies-sfri11471

Microsoft Edge: support.microsoft.com/en-us/microsoft-edge/view-cookies-in-microsoft-edge

Google Analytics Opt-Out

You may prevent Google Analytics from collecting data about your visits by installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout. This add-on prevents the Google Analytics JavaScript from sharing information with Google about your activity.

Do Not Track

Some browsers offer a "Do Not Track" (DNT) setting. Because no universal standard for responding to DNT signals currently exists, our properties do not respond differently based on DNT signals. We will revisit this position if a widely adopted standard emerges.

6. Cookies and the Evergreen Certified Verification Portal

When a consumer scans an Evergreen Certified label, they are directed to the Evergreen Certified verification portal — a mobile-optimized web page hosted by The Evergreen Exchange. This portal is a separate property from our marketing site but is subject to the same cookie practices described in this Policy.

The verification portal uses Essential cookies to serve correct verification results and Analytics cookies (GA4 and PostHog) to measure how consumers engage with verification content, including scan events, video plays, document views, and portal navigation. This engagement data is used to improve the consumer verification experience and is reported to our business clients in aggregate form, including anonymized session interaction recordings. No individual user is identifiable in any data shared with business clients.

The verification portal does not use advertising cookies. No individually identifiable consumer data collected through portal cookies is shared with business clients.

7. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legal requirements, or our business practices. When we make material changes, we will update the Effective Date at the top of this document.

We encourage you to review this Policy periodically. Continued use of our marketing site or the Evergreen Certified verification portal after any updates constitutes your acceptance of the revised Policy.

Contact Us
If you have questions about this Cookie Policy or our use of cookies and tracking technologies, please contact us through our Legal Contact Page or by mail at the address below.

Evergreen Exchange Enterprises, LLC
Attn: Legal / Privacy
1229 Valley Forge Dr.
Charleston, SC 29412

Legal Contact Page: theevergreenexchange.com/legal
Privacy Policy: theevergreenexchange.com/privacy
Privacy Email: privacy@theevergreenexchange.com
Legal Email: legal@theevergreenexchange.com