Cookie Policy

This document outlines the cookies and tracking technologies used or planned for use across the BuildBear Labs platform. It is intended as a working reference for legal, product, and engineering teams to evaluate data collection practices against regulatory standards. The overview includes both first-party and third-party cookies, categorized by function (e.g., essential, analytics, marketing), with details on purpose, retention, and whether user consent is required.

By maintaining transparency and precision in how we implement tracking technologies, BuildBear Labs aims to ensure compliance with key privacy frameworks including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Singapore’s Personal Data Protection Act (PDPA). This document supports ongoing efforts to align product features with privacy-by-design principles and to give users clear, meaningful control over their data.

Data Access & Withdrawal Procedure

BuildBear Labs is committed to giving users full control over how their data is collected and used. Users can access, correct, or request deletion of any personal data associated with cookie-based tracking by contacting our support team at [email protected]. We aim to respond to all requests within 30 days, in accordance with applicable data protection laws.

Cookies

• Essential - Security, session continuity (No consent required)
• Functional - User preferences (No consent required)
• Analytics - Usage insights, traffic reporting (Consent required)
• Marketing - Retargeting, conversion tracking (Consent required)

Cookie Retention Periods

BuildBear Labs applies strict retention practices for cookies to ensure personal data is only held for as long as necessary to serve its original purpose. Essential cookies are typically session-based and expire when the browser is closed, while analytics and marketing cookies have defined lifespans aligned with industry standards or partner configurations. We regularly review cookie settings to minimize unnecessary data storage and support user expectations of privacy, in line with GDPR, CCPA, and PDPA requirements.

Data Subject Rights Workflow

BuildBear Labs ensures all users can exercise their data rights quickly and without friction. Whether accessing their data, withdrawing consent, or requesting deletion, users can expect a responsive, transparent process handled in accordance with legal response timelines. We treat every privacy request as a core responsibility and have implemented clear support procedures to facilitate user control over their personal information.

Compliance Appendix

GDPR Compliance Summary

BuildBear Labs is committed to upholding the data protection principles outlined in the EU General Data Protection Regulation (GDPR). Our approach ensures that users are informed, empowered to consent granularly, and protected against unnecessary data collection. We actively minimize personal data usage, secure all data transmissions, and maintain transparency across all cookie and tracking technologies. This foundation supports responsible product development while maintaining user trust across Europe.

CCPA & CPRA Compliance Summary

In compliance with the California Consumer Privacy Act (CCPA) and its amendment under CPRA, BuildBear Labs provides users with clear rights to access, delete, or opt out of the sale or sharing of their personal information. We respect user autonomy by offering robust cookie controls and maintaining transparency in all data-sharing practices. Our policies are designed to meet California's evolving privacy expectations while fostering a user-centric experience that aligns with regulatory best practices.

Singapore PDPA Compliance Summary

Under the Personal Data Protection Act (PDPA) of Singapore, BuildBear Labs enforces responsible data governance, user notification, and consent-driven tracking practices. Our systems are designed to limit the collection, use, and disclosure of personal data to what is strictly necessary. All third-party services are reviewed for compliance, and data subject rights such as access, correction, and consent withdrawal are honored in a timely and transparent manner.