This Cookie Policy explains how Mālama Labs, Inc. (“Mālama,” “we,” “us”) and our service providers use cookies and similar technologies on malamalabs.com, the operator and partner dashboards, and the Genesis 200 launchpad (together, the “Services”). It is a companion to the Privacy Policy, which governs how we handle Personal Data more broadly. Capitalized terms not defined here have the meaning given in the Privacy Policy.
Cookies are small text files placed on your device when you visit a website. They let a site recognize your device, remember preferences, keep you signed in, and understand how the site is used. Cookies set by the site you are visiting are first-party cookies; cookies set by another domain whose services are embedded in the page are third-party cookies. Cookies can be session cookies (deleted when you close your browser) or persistent cookies (which remain until they expire or you delete them).
We use cookies and similar technologies to operate and secure the Services, to remember your settings, to authenticate sessions and protect against fraud and abuse, and, where you permit it, to measure how the Services are used so we can improve them. We do not use cookies to build advertising profiles, and Mālama’s products do not serve third-party advertising.
The cookie banner groups cookies into the categories below. Strictly necessary cookies are always active because the Services cannot function without them; the others are set only with your consent where consent is required.
| Category | Purpose | Consent |
|---|---|---|
| Strictly necessary | Session authentication, security, fraud prevention, load balancing, password-gate access, and remembering your cookie choices. | Always on |
| Functional | Remembering preferences such as wallet connection state, language, and interface settings. | Opt-in where required |
| Analytics / performance | Aggregate, privacy-respecting measurement of page views and feature use to improve the Services. | Opt-in where required |
The exact cookie names, providers, and durations are enumerated in the consent banner’s preference center.
Beyond cookies, the Services may use local storage and session storage to hold interface state on your device, and software development kits (SDKs) from providers such as our authentication and payment partners that set their own storage. These technologies are treated under the same categories and consent rules as cookies. Note that on-chain activity (transactions, wallet addresses, and SaveCard records anchored to Cardano or Base) is recorded on public blockchains and is outside the scope of cookies; see the Privacy Policy for what immutable on-chain records mean for your rights.
Some functions rely on third-party providers that may set their own cookies or storage when you use them, including our payment processor for card checkout, our custodial-wallet provider for Magic-managed wallets, and any analytics provider we enable. These providers process data under their own policies; the providers in use are identified in the Privacy Policy. We do not control third-party cookies and recommend reviewing those providers’ notices.
Where the EU/UK ePrivacy rules and GDPR apply, strictly necessary cookies are set on the basis of our legitimate interest in operating the Services, and all other cookies are set only after you give consent through the banner. You can withdraw consent at any time, and withdrawal does not affect processing carried out before withdrawal. Where US state privacy laws apply (for example the CCPA/CPRA in California), we honor opt-out preferences for any sharing of personal information and recognize opt-out preference signals as described below. Mālama does not sell personal information.
You can manage non-essential cookies through the consent banner’s preference center, which lets you accept or reject each non-essential category and change your choice later. You can also control cookies through your browser settings, which allow you to block or delete cookies; blocking strictly necessary cookies may break parts of the Services. Mobile operating systems provide additional controls for advertising identifiers and tracking.
We aim to honor the Global Privacy Control (GPC) signal as a valid opt-out of sharing where applicable law requires it. Browser “Do Not Track” signals are not standardized; where we cannot reliably interpret a DNT signal we rely on your banner choices and GPC instead.
Session cookies expire when you close your browser; persistent cookies remain for the duration disclosed in the preference center or until you delete them. We retain analytics data only for as long as needed for the purpose described, then aggregate or delete it. We may update this policy as the Services and our providers change; the effective date and version will be revised here, and material changes will be surfaced through the banner or a notice in the Services.
Questions about this Cookie Policy or your choices: privacy@malamalabs.com. Mālama Labs, Inc., 8 The Green, Suite A, Dover, Delaware 19901.
Cookie Policy · In force · Companion to the Privacy Policy.
Cookie categories and controls are described here; the consent banner’s preference center enumerates the specific cookies in use.