Cookie Policy

Last updated: 25 September 2026

This Cookie Policy explains how Monkey Tech Pty Ltd (ABN [insert ABN]) (“we”, “us”, “our”) uses cookies and similar technologies on the MonkeyBot web application (“Website”). It should be read together with our Privacy Policy and Terms of Service.

We are committed to handling your information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy and Other Legislation Amendment Act 2024 (Cth).

---

1. What are cookies?

Cookies are small text files placed on your device by your web browser when you visit a website. They allow the website to recognise your device on return visits, remember preferences, and understand how the site is being used.

Similar technologies (such as local storage, session storage, and web beacons) serve comparable purposes. References to “cookies” in this policy include these related technologies unless stated otherwise.

---

2. Categories of cookies

We classify cookies into the following categories:

2.1 Strictly necessary (functional) cookies

These cookies are essential for MonkeyBot to function. They enable core features such as authentication, session management, security protections, and load balancing. Without them, the Website cannot operate as intended.

These are the only cookies MonkeyBot currently uses.

They do not collect personal information for marketing or analytics purposes. Because they are essential to the service you have requested, they do not require separate consent under Australian privacy law.

Cookie / technology Purpose Duration Session identifier Maintains your authenticated session Session (cleared on logout or browser close) CSRF / security token Protects against cross-site request forgery Session User preferences Stores interface settings (e.g. language, timezone) Persistent (up to 12 months)

2.2 Analytics cookies (not currently in use)

If introduced in the future, analytics cookies would help us understand how users interact with MonkeyBot so we can improve performance, usability, and reliability. They collect aggregated, de-identified usage data (e.g. pages visited, session duration, error rates).

We will update this policy before deploying any analytics cookies and will provide you with clear notice and, where appropriate, a mechanism to opt out.

2.3 Marketing and advertising cookies (not currently in use)

If introduced in the future, marketing cookies would be used to deliver relevant content or measure the effectiveness of campaigns. They may involve third-party providers and could result in the disclosure of personal information to those providers.

We will not deploy marketing or advertising cookies without: - updating this policy to identify the specific cookies and third-party providers involved; - providing you with clear, prominent notice at or before the time of collection (APP 5); and - obtaining your express consent before any such cookies are set on your device.

---

3. How we use cookie data

Any information collected through cookies is handled in accordance with our Privacy Policy and the APPs. Specifically:

• Collection — We only collect information through cookies that is reasonably necessary for the functions or activities described in this policy (APP 3).
• Purpose limitation — Cookie data is used only for the purpose for which it was collected, unless you consent to a secondary use or it is otherwise permitted under the APPs (APP 6).
• Cross-border disclosure — We do not currently disclose cookie data to overseas recipients. If this changes, we will update this policy to identify the countries involved and ensure the overseas recipient is bound by obligations substantially similar to the APPs (APP 8).
• Security — We take reasonable steps to protect cookie data from misuse, interference, loss, and unauthorised access or disclosure (APP 11).

---

4. Third-party cookies

MonkeyBot does not currently set any third-party cookies.

If we integrate third-party services in the future (such as analytics or advertising platforms), we will: - conduct due diligence on the third party’s data handling practices, consistent with OAIC guidance on tracking technologies; - clearly disclose the third party, the data collected, and the purpose in this policy and in our Privacy Policy; - ensure any third-party cookies that collect personal information are not activated without your knowledge and, where they involve profiling or marketing, your express consent; and - where personal information may be sent overseas by a third-party provider, take reasonable steps to ensure the overseas recipient complies with the APPs (APP 8).

---

5. Your choices

5.1 Browser settings

Most web browsers allow you to manage cookie preferences. You can typically: - view what cookies are stored on your device; - delete some or all cookies; and - block cookies from specific or all websites.

Refer to your browser’s help documentation for instructions. Please note that disabling strictly necessary cookies may prevent MonkeyBot from functioning correctly.

5.2 Future consent controls

If we introduce non-essential cookies (analytics or marketing), we will implement a cookie consent mechanism that allows you to: - accept or reject non-essential cookie categories before they are set; - change your preferences at any time; and - withdraw consent as easily as it was given.

Non-essential cookies will not be activated by default or through pre-ticked settings.

---

6. Data retention

Strictly necessary cookies are retained only for as long as needed for their stated purpose (see table in section 2.1). Session cookies are deleted when your browser session ends. Persistent cookies expire after the period noted in the table, or when you delete them manually.

If analytics or marketing cookies are introduced, specific retention periods will be stated in the updated version of this policy.

---

7. Children’s privacy

MonkeyBot is a business-to-business application and is not directed at children under the age of 18. We do not knowingly collect personal information from children through cookies or any other means. If we become aware that we have inadvertently collected such information, we will take prompt steps to delete it.

---

8. Changes to this policy

We will update this Cookie Policy when our cookie practices change or when required by changes in law. Material changes will be communicated through a notice on the Website. The “Last updated” date at the top of this policy indicates the most recent revision.

We encourage you to review this policy periodically.

---

9. Contact us

If you have questions about this Cookie Policy or our use of cookies, please contact us:

Monkey Tech Pty Ltd Email: privacy@monkeytech.com.au Website: https://www.monkeytech.com.au

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): - Website: www.oaic.gov.au - Phone: 1300 363 992