Pixel & Visitor Tracking Addendum

The Pixel collects anonymous visitor events from your allowlisted sites. The Identify API attaches first-party identifiers (such as email or phone) to a visitor after lawful user action. The Resolve service stitches anonymous and identified events to the broader TrueFans CONNECT™ engagement graph to return likely-match profile data on a per-match billed basis.

• You may install the Pixel only on web properties you own or operate, and only on origins you add to your site's allowed-origins list.
• Origin checks are exact-match. Sub-domains and protocol variants must be listed explicitly.
• Do not embed the Pixel on third-party sites or via tag-management techniques that bypass origin checks.
• Public abuse-protection limits apply at the collect endpoint (per IP, per site, per minute).

• You are responsible for obtaining and recording legally valid consent (or other lawful basis) for placement of the Pixel and for the collection, identification, and resolution operations you perform.
• In jurisdictions that require it (EU/EEA, UK, certain U.S. states), you must show a compliant consent banner before loading the Pixel and respect "reject all" choices.
• You must display a privacy notice that discloses your use of analytics and identity-resolution tooling and that links to information about your data sharing with TrueFans CONNECT™.

• Call the Identify API only after the user has taken an affirmative action that supplies the identifier (e.g., sign-up, login, completing a form) and where you have a lawful basis to associate the identifier with their behavior.
• Do not submit children's data unless you have verifiable parental consent under COPPA and equivalent laws.
• Do not submit special-category data (health, biometric, genetic, racial/ethnic origin, religious belief, sexual orientation, precise geolocation tied to a single user, financial-account numbers) through Identify, unless we have authorized that specific use in writing.
• You will pass first-party identifiers; do not pass third-party identifiers you do not have rights to use.

• The Resolve service returns probabilistic profile information about a visitor based on signals collected by you, signals available to us, and our engagement graph (typically a 90-day lookback window).
• Resolve outputs are best-effort. Matches may be incomplete, ambiguous, or wrong. You will not represent or rely on a Resolve match as a verified identity for purposes that require verified identity (e.g., financial onboarding, age verification, employment screening).
• Each successful Resolve match is billed at $0.20 from your prepaid balance.
• Do not use Resolve to make decisions in areas where U.S. or other laws restrict the use of consumer data (housing, employment, credit, insurance, education, public accommodations).

• Retention windows for collected events default to those disclosed in your Developer Portal site settings; updates take effect prospectively.
• You will support user rights including access, correction, deletion, portability, and opt-out as required by applicable law, and will pass deletion and opt-out signals to us within a reasonable time.
• We will reasonably support your compliance with downstream requests, including providing tools to delete or suppress identified records.

• Tracking minors below the applicable age of digital consent;
• Profiling for discriminatory purposes (housing, employment, credit, insurance, education, public accommodations) or other unlawful targeting;
• Stalking, harassment, surveillance of vulnerable populations, or domestic-violence-related tracking;
• Re-identifying users who have opted out, exported, or deleted their data;
• Embedding the Pixel on sites whose primary content is sexually explicit, illegal, or otherwise prohibited by the AUP;
• Combining Pixel data with data acquired through unlawful means;
• Sharing Pixel-derived profiles with parties whose use violates these Terms or applicable law.

We use sub-processors (such as hosting and analytics providers) to operate the Pixel and Resolve service. By using these features, you authorize our use of sub-processors as described in our Privacy Policy. We will impose appropriate data-protection obligations on sub-processors.

You will maintain reasonable security for Pixel-derived data. If you experience a breach involving such data, you will notify TrueFans CONNECT™ without undue delay (and in any case within 72 hours of discovery), cooperate with our investigation, and comply with applicable breach-notification laws.