Malli Cookie Policy

Draft for legal review — not yet published.

Effective date: [DATE]
Last updated: [DATE]

This Cookie Policy explains how Next Wave LLC uses cookies and similar technologies on the consumer-facing Malli website and web application.

1. What cookies are

A cookie is a small text file placed on a browser or device by a website. Similar technologies include software development kits, pixels, local storage, and other identifiers that allow a service to remember information or communicate with a device.

2. Current Malli cookie inventory

The inventory below reflects the current application code and must be rechecked against the deployed production site and each provider's documentation before publication.

Name or technology	Provider	Purpose	Category	Duration
_malli_key	Malli / Next Wave	Maintains the signed and encrypted web session, including authentication, selected-mall state, security state, and short-lived sign-in or onboarding state	Strictly necessary	Configured for up to one year; individual values may be removed sooner
Meta/Facebook SDK	Meta	Supports the WhatsApp embedded business-onboarding flow when that feature is used; Meta may use its own cookies or similar technologies	Third-party / feature technology	Determined by Meta

Malli does not currently use Google Analytics, Meta Pixel, advertising tags, session replay, or other optional analytics technologies in the application code reviewed for this draft.

3. Strictly necessary cookies

The _malli_key cookie is required for functions requested by users, including signing in, maintaining account security, using authenticated pages, remembering a selected mall, and completing certain sign-in or onboarding flows. If it is disabled, those functions may not work.

Where applicable law recognizes an exception for strictly necessary cookies, we rely on that exception rather than asking for consent every time the session cookie is used. We still disclose it here and provide the controls required by applicable law.

4. Meta/Facebook technologies

Malli uses the Meta/Facebook SDK for WhatsApp embedded signup on the business onboarding feature. The SDK may make requests to Meta and may set or read technologies controlled by Meta.

The SDK should be loaded only in the relevant onboarding flow, not on unrelated public pages. Before production launch, we will verify its actual requests, cookies, purposes, retention, and legal basis. Meta's own terms and privacy information also apply.

5. Optional cookies in the future

If Malli adds analytics, advertising, personalization, social-media, session-replay, or other non-essential technologies, we will update this Policy and provide the consent or preference controls required by applicable law before using them where required.

Examples include Google Analytics, Google Tag Manager, Meta Pixel, advertising tags, Hotjar, FullStory, or similar services.

6. Managing cookies

You can usually block or delete cookies through your browser settings. Blocking the essential session cookie may prevent sign-in, mall selection, event participation, or other account functions from working.

If Malli later uses optional technologies, we will provide a cookie-preference mechanism where required. Withdrawing optional consent will not affect processing that was lawful before withdrawal.

7. Third-party websites

Links to Google, Meta, payment providers, retailers, merchants, or other third parties may take you to services that use their own cookies and privacy practices. This Policy does not control those third-party technologies.

8. Updates

We may update this Policy when our technology, providers, or legal obligations change. We will post the updated version and revise the date above.

9. Contact

Questions about cookies or privacy may be sent to:

Next Wave LLC
Privacy email: [PRIVACY EMAIL]
Registered address: [REGISTERED ADDRESS]