Additional Legal Information

Effective Date: November 13, 2025
Last Updated: November 13, 2025

This document provides additional legal information about Stesso, Inc.'s ("Stesso," "we," "us," or "our") practices and policies. It supplements our Privacy Policy and Terms of Service.

Table of Contents

1. Cookie and Storage Technology Policy
2. GDPR Compliance and European Privacy Rights
3. CCPA/CPRA Compliance and California Privacy Rights
4. Accessibility Statement

Cookie and Storage Technology Policy

Overview

While we don't use traditional HTTP cookies for most functionality, we use various browser storage technologies and tracking mechanisms to make our Service work and to understand how it's used. This section explains what technologies we use and how you can control them.

Technologies We Use

LocalStorage

LocalStorage is a browser technology that allows us to store data on your device that persists across sessions. We use LocalStorage to store:

• Browser Fingerprint ID: A unique identifier we generate to recognize your device across sessions
• User Preferences: Your language, unit preferences, and interface settings
• Project History: Information about projects you've created, viewed, or completed
• Step Completion Tracking: Which steps you've completed in ongoing projects

SessionStorage

SessionStorage is similar to LocalStorage but is cleared when you close your browser tab or window. We use SessionStorage to store:

• Session IDs: Unique identifiers for your current browsing session
• Request Tracking: Information to correlate related requests
• Temporary State: Short-lived data needed during your session

Browser Fingerprinting

We collect various information about your browser and device to create a "fingerprint" that helps us recognize your device even without traditional cookies or user accounts. This fingerprint is based on:

• Canvas fingerprinting (using HTML5 Canvas API)
• WebGL renderer information
• Screen resolution and color depth
• Hardware concurrency (CPU cores)
• Platform and user agent
• Timezone and language

Why We Use Fingerprinting: We use browser fingerprinting to recognize your device across sessions when you don't have an account, allowing us to save your preferences, maintain your project history, and provide a consistent experience.

Your Choices and Controls

Browser Controls

You can control LocalStorage and SessionStorage through your browser settings:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions

Clearing this data will remove your preferences, project history, and browser fingerprint ID. However, if you continue using the Service, we may generate a new fingerprint.

GDPR Compliance and European Privacy Rights

Scope

This section applies to individuals in the European Economic Area (EEA), United Kingdom (UK), and Switzerland (collectively, "Europe"). If you are in Europe, you have specific rights under the General Data Protection Regulation (GDPR), UK GDPR, and Swiss Federal Act on Data Protection.

Anonymous Users and Personal Data

Important: Even though our Service does not require you to create an account or provide your name, we still collect personal data as defined by GDPR. Under GDPR, "personal data" means any information relating to an identified or identifiable natural person. This includes:

• Browser Fingerprints: The unique fingerprint ID we generate and store to recognize your device is personal data
• IP Addresses: Your IP address is personal data under GDPR
• Usage Patterns: Your behavior patterns and interactions with our Service can constitute personal data

You are therefore protected by GDPR and have all the rights described in this section, regardless of whether you have created an account or provided your name.

Your Rights Under GDPR

As an individual in Europe, you have the following rights:

• Right of Access: Obtain confirmation as to whether we process your personal data and receive access to that data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request that we restrict processing of your personal data
• Right to Data Portability: Receive personal data in a portable format
• Right to Object: Object to processing of your personal data

How to Exercise: Contact us at privacy@stesso.com with your request.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, place of work, or place of alleged infringement.

Find your local authority: You can find your local data protection authority at https://edpb.europa.eu/about-edpb/board/members_en

CCPA/CPRA Compliance and California Privacy Rights

Scope

This section applies to California residents as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Personal Information We Collect

As described in our Privacy Policy, we collect the following categories of personal information:

Your California Privacy Rights

1. Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we collected about you.

How to Exercise: Submit a request to privacy@stesso.com

2. Right to Delete

You have the right to request deletion of personal information we collected from you, subject to certain exceptions.

How to Exercise: Submit a request to privacy@stesso.com

3. Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

How to Exercise: Submit a request to privacy@stesso.com with details of the inaccurate information.

4. Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

Accessibility Statement

Our Commitment to Accessibility

Stesso is committed to ensuring digital accessibility for people with disabilities. We are continually improving the user experience for everyone and applying relevant accessibility standards to ensure we provide equal access to information and functionality.

Conformance Status

We aim to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. These guidelines explain how to make web content more accessible for people with disabilities and more usable for everyone.

Accessibility Features

Our Service includes the following accessibility features:

Technical Features

• Semantic HTML: We use proper HTML structure with semantic elements
• Keyboard Navigation: All functionality is accessible via keyboard
• Focus Indicators: Clear visual indicators show which element has keyboard focus
• Alternative Text: Images include descriptive alt text where appropriate
• Color Contrast: Sufficient color contrast for text and interactive elements
• Screen Reader Compatible: Content is structured for screen reader accessibility

Feedback and Contact Information

We welcome your feedback on the accessibility of our Service. If you encounter accessibility barriers or have suggestions for improvement:

Email: accessibility@stesso.com
Response Time: We aim to respond to accessibility feedback within 5 business days

Please include:

• Description of the accessibility barrier you encountered
• The page or feature where you encountered it
• The assistive technology you were using (if applicable)
• Suggestions for improvement (if any)

Contact Information

General Inquiries

Email: support@stesso.com

Privacy Matters

Email: privacy@stesso.com

Accessibility Issues

Email: accessibility@stesso.com

Legal Matters

Email: legal@stesso.com

© 2025 Stesso, Inc. All rights reserved.