Cookie & Tracking Policy

1. What this policy covers

This Policy explains how Baysart MMC ("Provider", "we", "us", "our") uses tracking, analytics, and similar technologies in the Baysart mobile app and on our website (wallet.baysart.com).

The mobile app itself does not use browser cookies. Instead it uses technologies suited to mobile platforms — device identifiers, an analytics identifier, push notification tokens, and session/authentication tokens.

Our website (wallet.baysart.com) uses Google Analytics 4, a service provided by Google, to measure visits and improve the site. It sets analytics cookies and processes an analytics/cookie identifier and your IP address. These analytics cookies are not essential: they load only after you accept them through the cookie banner shown on your first visit. If you decline, no analytics cookies are set and no website analytics data is collected. You can change your choice at any time using the "Cookie settings" link in the website footer.

For full details on how we process personal data generally, please see our Privacy Policy.

2. What we use

The app uses the following categories of identifiers and tokens.

• Analytics SDK — a software library provided by an Infrastructure Provider is integrated into the app. It collects device identifiers (advertising identifiers, an analytics identifier), install-attribution data, your IP address, device/OS information, and in-app events (registration, login, purchases/revenue, KYC status changes).
• Push notification tokens — platform tokens used to deliver notifications to your device.
• Session and authentication tokens — tokens used to keep you signed in and to protect your session.

3. Why we use them

We use each technology only for a specific purpose.

• Attribution and analytics — to understand where installs come from, measure app usage and performance, and improve the product (only with your consent).
• Notifications — to deliver transactional, security, and service-related push notifications.
• Keeping you signed in — to maintain your session so you are not asked to re-enter your password every time.
• Security — to detect fraud and abuse, recognise your device, and protect your account.

4. Third parties

The party providing the analytics service is an Infrastructure Provider acting as a processor under a data-processing agreement (DPA) entered into with us. It processes data only on our instructions.

The specific vendor name is not listed in this Policy; it is recorded in our separately maintained and versioned Sub-Processor Register: https://baysart.com/legal.

Some processors may process data outside Azerbaijan. Any such international transfers are carried out only on the basis of appropriate safeguards.

5. Your choices and controls

You are in control of tracking and analytics.

You can change these settings at any time from your device system settings or the in-app privacy settings. After you opt out of analytics, no new events are collected.

• iOS App Tracking Transparency (ATT) — you are asked for consent before any advertising identifier is accessed. If you do not consent, the advertising identifier is not accessed.
• Analytics opt-out — you can turn analytics off entirely from the in-app privacy settings.
• Website cookie banner — on wallet.baysart.com you choose whether to accept analytics cookies. Analytics loads only if you accept; declining sets no analytics cookies. You can revisit the choice at any time via the "Cookie settings" link in the footer.
• IP masking — even when analytics is active, your IP address can be masked.
• Push notifications — you can control the use of notification tokens from your device system settings.

6. Data not passed into analytics

Financial data (balances, amounts, card details) and wallet (blockchain) addresses are not included in analytics events and are not passed to the analytics provider.

Your seed phrase and private key are never collected by any tracking or analytics technology — they remain only on your device.