1. About this Cookie Policy
1.1 Who we are
This Cookie Policy is published by Fizen Limited, a company incorporated in Hong Kong with company number [77059696] and registered office at Unit 1411, 14/F, Cosco Tower, 183 Queen’s Road Central, Sheung Wan, Hong Kong (together with its Affiliates, “Fizen”, “we”, “us” or “our”). For contact details, see clause 10.1.2 What this Policy covers
This Cookie Policy explains how Fizen uses cookies, pixels, software development kits (SDKs), local storage and similar technologies (collectively, “cookies”) on the Fizen website at fizen.io, the Fizen mobile application, the Fizen browser extension (if and when made available) and any other Fizen-operated interface (together, the “Platform”). This Policy supplements the Fizen Privacy Policy, which describes more broadly how Fizen processes Personal Data.1.3 Your choices in summary
- Strictly necessary cookies are required for the Platform to function. They do not require your consent.
- Functional, analytics, marketing and advertising cookies are set only with your consent.
- You can give, refuse or withdraw consent at any time via the cookie banner on first visit or via the cookie preferences centre accessible from the Platform.
- You can also control cookies through your browser settings.
- In the United States, you may opt out of the “sale” or “sharing” of personal information via the “Do Not Sell or Share My Personal Information” link in the footer (where displayed on the Platform). We honour the Global Privacy Control (GPC) signal as a valid opt-out.
1.4 How to contact us about cookies
For any cookie-related question, request or complaint, contact our legal team at legal@fizen.io. For general support, you may also use the in-app live chat. Contact details are also set out in clause 10.2. What Are Cookies and Similar Technologies?
A “cookie” is a small text file that a website places on your device when you visit it. Cookies are widely used to make websites work or work more efficiently, to remember your preferences, and to provide information to the operators of the site. Similar technologies covered by this Policy include:- Pixels (also called web beacons) — small graphical files that can be embedded in a web page or email to track interactions.
- Software Development Kits (SDKs) — pieces of code in mobile apps that perform functions similar to cookies on websites.
- Local storage — data stored by the browser or app on your device (HTML5 local storage, IndexedDB, app storage).
- Device identifiers — identifiers assigned to your device (advertising IDs such as IDFA on iOS or AAID on Android).
- Browser fingerprinting — techniques that identify your device based on a combination of characteristics.
3. Categories of Cookies We Use
3.1 Strictly necessary cookies
These cookies are required for the Platform to function and cannot be switched off. They are usually set in response to actions made by you that amount to a request for service, such as logging in, completing a form, or persisting your consent choices. They include:- Authentication — cookies that keep you signed in to your Fizen account, identify your session, and protect against session hijacking.
- Security — cookies that detect fraud, support multi-factor authentication, store CSRF tokens and similar.
- Load balancing and routing — cookies that direct your traffic to the correct server.
- Consent storage — cookies that record your choices in the cookie banner and preferences centre.
- Functionality required to deliver Services — cookies that are necessary to operate the core Fizen Wallet, Card, QR Pay, Pay, Marketplace, Swap and Rewards Program features.
3.2 Functional cookies
These cookies enable enhanced functionality and personalisation, such as remembering your language, currency, dark-mode preference, recently viewed Marketplace Items, and similar. If you do not allow these cookies, some functionality will be unavailable or less smooth.3.3 Analytics cookies
These cookies help us understand how visitors and users interact with the Platform so we can measure performance, identify popular content, and improve the Platform. They include first-party analytics cookies and cookies from third-party analytics providers identified in the inventory in clause 6.3.4 Marketing and advertising cookies
These cookies and pixels are set by Fizen and by our advertising partners to deliver advertising that is more relevant to your interests, to measure the effectiveness of advertising campaigns, and to support attribution. They include cookies that allow us to build a profile of your interests and show relevant adverts on other sites. They may share information with third-party advertising platforms (including, where you have consented, Meta, Google, TikTok, X, and similar). These cookies may constitute a “sale” or “share” under US state privacy laws — see clause 4.3.4. Consent and Your Choices
4.1 How we obtain consent
When you first visit the Platform, we display a cookie consent banner. The banner allows you to (a) accept all cookies, (b) reject all non-essential cookies, with the same prominence as “accept”, or (c) customise your choices for each category. Your choices are stored and you can change them at any time through the cookie preferences centre accessible from the Platform. Withdrawing consent is as easy as giving consent.4.2 EEA, UK and other opt-in regimes
If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction that requires prior consent for non-essential cookies, we will set such cookies only after you have indicated your consent through the banner or preferences centre. You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.4.3 California and other US state privacy laws
Under the California Consumer Privacy Act as amended by the CPRA, and similar US state laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OCPA, Montana CDPA and others), our use of marketing and advertising cookies may constitute a “sale” or “share” of personal information. You may opt out at any time by:- clicking the “Do Not Sell or Share My Personal Information” link in the footer of the Platform (where displayed);
- configuring your cookie preferences in the cookie banner or preferences centre to reject marketing and advertising cookies; or
- sending a Global Privacy Control (GPC) signal from your browser; we respect GPC as a valid opt-out.
4.4 Browser controls
Most browsers let you control cookies through their settings (block all, block third-party, delete on exit, do-not-track, and similar). You can also use private/incognito mode. Doing so may limit Platform functionality, including signing in to your account.4.5 Mobile device controls
On iOS, you can reset your advertising identifier or limit ad tracking under Settings → Privacy & Security → Tracking; on Android, under Settings → Privacy → Ads. You can also disable cross-app tracking through the App Tracking Transparency framework on iOS.4.6 Industry opt-outs
You can opt out of interest-based advertising from many third-party advertising partners through industry tools, including:- YourAdChoices (Digital Advertising Alliance, US) — https://youradchoices.com/
- European Interactive Digital Advertising Alliance (EDAA) — https://www.youronlinechoices.eu/
- Network Advertising Initiative — https://thenai.org/opt-out/
4.7 Browser “Do Not Track”
Some browsers transmit a “Do Not Track” (DNT) signal. There is no industry standard for how DNT should be interpreted, and we do not currently respond to DNT signals (other than as required by Applicable Law). We do, however, respect the Global Privacy Control (GPC) signal as set out above.5. First-Party and Third-Party Cookies
First-party cookies are set by Fizen and used to deliver and improve the Platform. Third-party cookies are set by other parties whose services are integrated into the Platform — including analytics providers, advertising partners, fraud-detection providers, customer-support tools, and content delivery networks. Third-party cookies are governed by the third party’s own privacy and cookie notices. We list the principal third parties whose cookies we set on the Platform in the inventory in clause 6. The third party is the data controller in respect of the data those cookies collect; you should refer to the third party’s privacy policy for more information.6. Cookie Inventory
The table below lists the principal cookies we use, by category. This inventory is updated when our cookie set changes.This inventory is a template. Engineering must run a cookie audit (using a CMP vendor or a tool such as OneTrust, Cookiebot, Iubenda, Termly, Osano) and replace the placeholder rows with the actual cookies in use on the Platform before publication.
| Cookie / SDK | Provider | Category | Purpose | Retention |
|---|---|---|---|---|
| [session_id] | Fizen (first-party) | Strictly necessary | Maintain your authenticated session | Session |
| [csrf_token] | Fizen (first-party) | Strictly necessary | Protect against cross-site request forgery | Session |
| [cookie_consent] | Fizen (first-party) | Strictly necessary | Store your cookie consent choices | 12 months |
| [geo_route] | Fizen (first-party) | Strictly necessary | Route you to the correct regional infrastructure | Session |
| [language_pref] | Fizen (first-party) | Functional | Remember your selected language | 12 months |
| [currency_pref] | Fizen (first-party) | Functional | Remember your selected currency | 12 months |
| [theme_pref] | Fizen (first-party) | Functional | Remember dark / light mode preference | 12 months |
| [_ga / ga*] | Google Analytics 4 (third-party) | Analytics | Distinguish users for usage analytics | 13 months |
| [amplitude_*] | Amplitude (third-party) | Analytics | Behavioural analytics and funnel measurement | 12 months |
| [mixpanel_*] | Mixpanel (third-party) | Analytics | Behavioural analytics and event tracking | 12 months |
| [_fbp / fr] | Meta (third-party) | Marketing / Advertising | Attribution and conversion measurement for Meta advertising | Up to 13 months |
| [_gads / IDE] | Google Ads (third-party) | Marketing / Advertising | Personalised advertising on Google network and conversion measurement | Up to 13 months |
| [_ttp] | TikTok Pixel (third-party) | Marketing / Advertising | Attribution and conversion measurement for TikTok advertising | Up to 13 months |
| [lin_*] | LinkedIn Insight Tag (third-party) | Marketing / Advertising | Attribution and conversion measurement for LinkedIn advertising | Up to 13 months |
| [X (Twitter) pixel] | X (third-party) | Marketing / Advertising | Attribution and conversion measurement | Up to 13 months |
| [appsflyer_id] | AppsFlyer (third-party, in app) | Marketing / Advertising | Mobile-app attribution and install measurement | Per AppsFlyer terms |
| [fraud_signal_*] | Third-party fraud-detection provider | Strictly necessary | Detect and prevent account takeover, payment fraud and abuse | Session to 12 months |
| [support_chat_*] | Customer-support provider | Functional | Maintain customer support conversations | 30 days to 12 months |
7. International Transfers Through Cookies
Some of the third-party cookie providers listed above are established outside your jurisdiction. Where their cookies cause Personal Data to be transferred internationally, the transfer is governed by the same safeguards Fizen has put in place for international transfers generally, as described in the Fizen Privacy Policy. For third-party cookies set by third-party controllers, the third party’s own safeguards apply.8. Children
The Platform is not intended for individuals under 18. We do not knowingly use cookies to profile minors. If we become aware that we have collected information through cookies about an individual below the applicable age threshold, we will delete that information as soon as reasonably practicable. Further detail is set out in the Fizen Privacy Policy.9. Changes to this Cookie Policy
We may update this Cookie Policy from time to time as our cookie set or Applicable Privacy Law changes. Non-material changes (clarifications, updates to the inventory in line with engineering changes) take effect on posting. Material changes (changes to the categories of cookies we use, the legal bases on which we rely, or your choices) take effect no earlier than thirty (30) days after we have notified you via the cookie banner, in-app notification or email.10. Contact
- Legal (including all data-protection and cookie-related matters): legal@fizen.io
- General support: in-app live chat