Cookie & Tracking Technologies Policy

1. Introduction

This Cookie & Tracking Technologies Policy explains what cookies and similar technologies are, why JBN Global uses them, the cookie categories used across the Platform, how cookie practices differ between public pages and authenticated portals, and how you can manage preferences and browser controls.

2. What Cookies and Similar Technologies Are

Cookies are small text files stored on a browser, computer, mobile device, or tablet when a user visits a website or uses an application. Cookies may enable a website to recognize a browser or device, remember settings, preserve a login session, help secure an account, and understand Platform operation.

JBN Global may also use session identifiers, local storage, authentication tokens, cross-site request forgery ("CSRF") tokens, web beacons, pixels, tags, scripts, software development kits, log files, device identifiers, security and fraud-prevention technologies, server-side analytics, and event/audit logging. For simplicity, this Cookie Policy refers to these technologies collectively as "cookies," unless the context requires otherwise.

3. Why JBN Global Uses Cookies

• Operate the JBN Global Platform;
• Authenticate users;
• Maintain account sessions;
• Apply role-based access controls;
• Route users securely to public, client, provider, Care Navigation, or administrative functions;
• Protect against unauthorized access, CSRF, fraud, bots, and abuse;
• Preserve user preferences;
• Measure public-site traffic and public-site navigation flow;
• Detect technical issues, performance problems, security events, and suspicious activity;
• Improve Platform functionality, accessibility, user experience, and system performance;
• Maintain lawful operational records and audit trails;
• Comply with privacy, security, legal, and recordkeeping obligations.

JBN Global does not use third-party advertising or cross-context behavioral-advertising cookies in authenticated Client, Provider, Care Navigation, or Administrative portal routes.

4. Cookie Categories

4.1 Strictly Necessary Cookies

Strictly Necessary Cookies are required to operate the Platform, secure accounts, support authentication, maintain role-based permissions, and enable essential functionality, including account login/logout, authentication and reauthentication, session state, role-based access-control routing, authorization checks, secure portal routing, CSRF protection, password-reset functionality, multi-factor authentication where enabled, fraud prevention and bot detection, load balancing, consent-preference storage, payment-flow continuity, technical error detection, and security/audit logging.

Because these cookies are necessary for core functionality, users generally cannot disable them through the Platform preference center. If you block them in your browser, you may be unable to create an account, sign in, remain signed in, access role-based functionality, make payment, submit a form, use Care Navigation, or access administrative content.

4.2 Performance and Analytical Cookies

Performance and Analytical Cookies help JBN Global understand how public visitors interact with public-facing pages and general non-authenticated Platform features, including number of visits, pages viewed, general navigation path, referral source, general region based on IP address, browser and device type, usage duration, and performance diagnostics. Where practicable, JBN Global seeks to use aggregated, de-identified, truncated, or pseudonymized analytics configurations.

Performance and Analytical Cookies are limited to public, non-authenticated routes unless JBN Global specifically identifies a necessary operational analytics function, configures it to minimize data, and confirms that it does not permit third-party advertising, retargeting, cross-context behavioral advertising, or unauthorized disclosure.

4.3 Functional Cookies

Functional Cookies remember user choices and support enhanced but non-essential functionality, including language selection, accessibility settings, display and layout preferences, cookie-consent choices, and form-progress preferences. If Functional Cookies are disabled, certain user preferences may not be retained between sessions.

4.4 Security, Audit, and Operational Logging Technologies

JBN Global uses security, logging, and operational technologies to protect the confidentiality, integrity, availability, and lawful operation of the Platform. These technologies may record login/logout and authentication events, failed login attempts, password resets, account lockouts, IP address and device information, session identifiers, permission changes, administrative access, data exports, record creation/modification/deletion, Care Navigation access events, security alerts, suspicious activity, and system-performance events. These measures help JBN Global maintain role-based access restrictions, investigate security events, preserve audit trails, prevent fraud, enforce policies, and meet legal obligations.

5. Public and Authenticated Portal Rules

JBN Global uses different tracking rules depending on the Platform area accessed.

5.1 Public Website

Public JBN Global pages may use Strictly Necessary Cookies, Performance and Analytical Cookies, Functional Cookies, consent-management technologies, security and fraud-prevention controls, and limited first-party measurement tools where configured and lawful. Public pages may include outbound links to third-party websites, social-media platforms, payment processors, scheduling providers, and independent directories; those third parties may use their own cookies under their own policies once you interact with them or leave the Platform.

5.2 Authenticated Client Portal

The authenticated Client portal uses only Strictly Necessary operational cookies and equivalent security technologies required for authentication, session continuity, role-based access control, account and portal security, scheduling, payment-flow continuity, service administration, operational logging, error detection, and privacy and compliance controls. It does not permit third-party advertising cookies, behavioral-advertising pixels, retargeting tags, or social-media tracking pixels.

5.3 Authenticated Provider Portal

The authenticated Provider portal uses only Strictly Necessary operational cookies and equivalent security technologies required for authentication, session continuity, role-based access control, credentialing, JBN Certification and training access, compliance records, authorized assignment-related functionality, documentation workflows, contractor administration, operational logging, error detection, and privacy and compliance controls. It does not permit third-party advertising or cross-context behavioral-advertising technologies.

5.4 Care Navigation

Care Navigation is a private, authenticated operational-coordination process. It uses only Strictly Necessary operational cookies and equivalent technologies required for user authentication, role and permission validation, session security, access-control enforcement, security and operational logging, audit-trail maintenance, error detection, and compliance and safety review. It does not permit third-party advertising cookies or cross-context behavioral-advertising technologies.

Care Navigation is not an emergency, medical, clinical, or crisis communication service. If you are in immediate danger or need urgent assistance, call 911, call or text 988 in the United States, contact local emergency services, or go to the nearest emergency department.

5.5 Administrative Dashboards

Administrative dashboards use only Strictly Necessary operational cookies and security technologies necessary for authentication, privileged-access control, security, audit logging, fraud prevention, technical performance, support, and internal compliance. Platform Administrators may not use tracking data for personal curiosity, advertising, discrimination, profiling, or any unauthorized purpose.

6. Third-Party Technologies

JBN Global may use service providers to support hosting, infrastructure, authentication, payment processing, scheduling, communications, analytics, technical performance, security, identity verification, credential verification, background screening, and other authorized Platform operations. Third-party cookies or comparable technologies may be used only to the extent necessary for the authorized function and subject to applicable contracts, configuration controls, and law. JBN Global does not control cookies or tracking technologies placed by third parties after you leave the Platform or interact directly with an external service.

7. Cookie Consent and Preference Management

When you first visit applicable public JBN Global pages, you may receive a cookie notice or preference prompt. Where available and legally required, you may use the preference tool to accept all cookies, reject non-essential cookies, select cookie categories, and withdraw or revise prior consent. Strictly Necessary Cookies cannot be disabled through JBN Global's preference tool because they are required for the security and essential operation of the Platform. Your preferences may be associated with your browser or device; if you use another device, browser, account profile, or private-browsing session, you may need to set your preferences again.

8. Browser Controls

Most browsers provide cookie-management tools that let you view, delete, or block cookies (including third-party cookies), clear cookies when the browser closes, or receive alerts before cookies are placed:

• Google Chrome: Settings → Privacy and Security → Third-Party Cookies;
• Apple Safari: Settings → Privacy → Manage Website Data;
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data;
• Microsoft Edge: Settings → Cookies and Site Permissions → Manage and Delete Cookies and Site Data.

Blocking or deleting cookies can affect Platform functionality. You may be unable to sign in, remain signed in, submit forms, process payment, access authenticated portals, use Care Navigation, save preferences, or receive role-based access.

9. Do Not Track Signals

Some browsers offer a "Do Not Track" setting. Because there is no universally accepted technical standard governing responses to all Do Not Track signals, JBN Global does not respond uniformly to every such signal. JBN Global does not sell Personal Information, share Personal Information for cross-context behavioral advertising, or permit third-party advertising cookies in authenticated Client, Provider, Care Navigation, or Administrative routes.

10. Global Privacy Control

Some browsers and browser extensions permit a user to transmit a Global Privacy Control ("GPC") signal. Where required by applicable law and technically feasible, JBN Global will treat an applicable GPC signal as a request to opt out of the sale or sharing of Personal Information or targeted advertising. Because JBN Global does not currently sell Personal Information or share it for cross-context behavioral advertising, a GPC signal should not materially change JBN Global's current processing activities. If that practice changes, JBN Global will update this Cookie Policy and provide legally required controls.

11. Cookie Duration and Retention

Cookies may be session cookies, which expire when you close your browser or after a defined session period, or persistent cookies, which remain on your device for a set period or until you delete them. Security and operational logs may be retained as reasonably necessary for security, fraud prevention, incident investigation, audit, compliance, dispute resolution, and legal obligations. Consent-preference records may be retained as reasonably necessary to honor your choices and demonstrate compliance. Cookie duration varies based on technology type, Platform configuration, security needs, legal obligations, and the provider that places the cookie.

12. Changes to This Cookie Policy

JBN Global may update this Cookie Policy to reflect changes in technology, Platform configuration, vendors, Platform functionality, tracking practices, legal requirements, or operations. JBN Global will revise the "Last Updated" date when changes are made. Where legally required, JBN Global will provide additional notice or obtain consent before introducing materially changed non-essential tracking technologies.

13. Contact Us

Questions about this Cookie Policy or JBN Global's tracking practices may be sent to: Just Breathe Now LLC (d/b/a JBN Global), Attn: Privacy Team, Floral Park, New York, United States, compliance@jbnglobal.co.