COOKIE POLICY

Last Updated: February 22, 2026
Version: 1.0

1. INTRODUCTION AND SCOPE

1.1 Overview. This Cookie Policy ("Policy")describes how Squarefi Inc., a Delaware corporation, together with itssubsidiaries and affiliates (collectively, "Squarefi,""Mosta," "Company," "we," "us," or"our"), uses cookies and similar tracking technologies when youaccess or use our website located at https://mosta.io (the "Site"), mobileapplication (the "App"), and all services provided or facilitatedthereby (collectively, the "Platform" or "Services").

1.2 Acceptance. By accessing or using the Platform, youacknowledge that you have read, understood, and agree to the use of cookies asdescribed in this Policy. If you do not agree to the use of cookies, you mayadjust your browser settings or cease use of the Platform.

1.3 Relationship to Privacy Policy. This Cookie Policy supplements andforms part of our Privacy Policy. For information about how we collect, use,and protect your personal data more broadly, please refer to the Privacy Policyavailable at mosta.io/legal.

2. WHAT ARE COOKIES

2.1 Definition. Cookies are small text files placed on yourdevice (computer, tablet, or mobile phone) when you visit a website. They arewidely used to make websites work more efficiently, improve the userexperience, and provide reporting information to website operators.

2.2 First-Party and Third-Party Cookies. Cookies may be set by the websiteyou are visiting ("first-party cookies") or by third parties whosecontent or services are integrated into the website ("third-partycookies"). First-party cookies are controlled by us, while third-partycookies are controlled by the respective third party.

2.3 Session and Persistent Cookies. Session cookies exist only whileyour browser is open and are automatically deleted when you close your browser.Persistent cookies remain on your device after your browser is closed and canbe used to recognize your device when you return to the Platform. Persistentcookies expire after a set period or when manually deleted.

3. TYPES OFCOOKIES WE USE

3.1 Strictly Necessary Cookies. These cookies are essential for theoperation of the Platform. They enable core functionality such as security,session management, network management, and accessibility. Without thesecookies, services you have requested cannot be provided. These cookies do not gatherinformation about you that could be used for marketing purposes. Theycannot be disabled through our cookie consent tool.

3.2 Analytics and Performance Cookies. These cookies allow us to countvisits and traffic sources so we can measure and improve the performance of thePlatform. They help us understand which pages are the most and least popular,and how visitors navigate the Platform. All information collected by thesecookies is aggregated and therefore anonymous. If you do not allow thesecookies, we will not be able to monitor Platform performance.

3.3 Functional Cookies. These cookies enable enhancedfunctionality and personalization, such as remembering your languagepreferences, region, or display settings. They may be set by us or bythird-party providers whose services we have integrated into our pages. If youdo not allow these cookies, some or all of these features may not functionproperly.

3.4 Marketing and Targeting Cookies. These cookies may be set throughthe Platform by our advertising partners. They may be used to build a profileof your interests and show you relevant advertisements on other websites. Theydo not directly store personal information but are based on uniquelyidentifying your browser and internet device. If you do not allow thesecookies, you will experience less targeted advertising.

4. THIRD-PARTYCOOKIES AND SERVICES

4.1 Third-Party Providers. In addition to our own cookies, weuse cookies set by third parties to provide certain features andfunctionalities. These third parties include: (a) Google Analytics for websiteusage analytics and performance monitoring; (b) Google Ads for measuring theeffectiveness of advertising campaigns; (c) Meta (Facebook) Pixel foradvertising attribution and audience targeting; (d) Cloudflare for security,performance optimization, and bot management; and (e) Intercom or similarservices for live chat and customer support functionality.

4.2 Third-Party Policies. These third parties may usecookies, web beacons, and similar technologies to collect or receiveinformation from the Platform. We do not control how these third parties usesuch information. Please refer to their respective privacy policies for moredetails on their data practices.

5. SIMILAR TECHNOLOGIES

5.1 Web Beacons. Web beacons (also known as pixel tags or clearGIFs) are small graphic images embedded in web pages or emails that trackwhether you have opened a page or email. They may collect your IP address,browser type, and the time the web beacon was viewed.

5.2 Local Storage. Local storage allows websites to store datalocally on your device, similar to cookies but with greater capacity. We mayuse local storage for functional preferences and session data to improve yourexperience on the Platform.

5.3 Scripts. Scripts are pieces of code that enable thePlatform to provide interactive features. They run when you visit the Platformand may be disabled via your browser settings, though doing so may affectPlatform functionality.

6. HOW TO MANAGE COOKIES

6.1 Browser Settings. Most browsers allow you to refuseor accept cookies and to delete existing cookies. The methods for doing so varyfrom browser to browser and from version to version. You can obtain up-to-dateinformation about blocking and deleting cookies from your browser’s helpdocumentation or settings menu. Please note that removing or blocking cookiesmay impact your user experience, and parts of the Platform may no longer befully accessible.

6.2 Cookie Consent Tool. When you first visit the Platform,you will be presented with a cookie banner that allows you to accept or rejectnon-essential cookies. You can change your preferences at any time by accessingthe cookie settings link in the footer of the Site.

6.3 Opt-Out Links. You can opt out of specific third-partycookies using the following mechanisms: (a) Google Analytics Opt-Out BrowserAdd-on, available at https://tools.google.com/dlpage/gaoptout; (b) Google AdsSettings, available at https://adssettings.google.com; (c) Facebook AdPreferences, available at https://www.facebook.com/ads/preferences; and (d)Your Online Choices (EU), available at https://www.youronlinechoices.eu.

6.4 Do Not Track. Some browsers include a "Do NotTrack" ("DNT") feature that signals to websites that you do notwant your online activity tracked. Because there is no widely accepted standardfor how to interpret DNT signals, the Platform does not currently respond toDNT signals. We will update this Policy if a standard for responding to DNTsignals is established.

7. DATA PROTECTION AND LEGAL BASIS

7.1 Legal Basis. We process data collected through cookies inaccordance with applicable data protection laws, including the General DataProtection Regulation ("GDPR") where applicable. The legal bases forprocessing cookie data are: (a) strictly necessary cookies are processed underour legitimate interest in ensuring the proper functioning and security of thePlatform; and (b) analytics, functional, and marketing cookies are processedbased on your consent, which you may grant or withdraw at any time through ourcookie consent tool.

7.2 CCPA/CPRA Compliance. If you are a California resident,certain cookies may constitute the "sale" or "sharing" ofpersonal information under the California Consumer Privacy Act("CCPA") and California Privacy Rights Act ("CPRA"). Youmay opt out of such cookies through our cookie consent tool or by contacting usat legal@mosta.io. We do not sell your personal information.

7.3 Privacy Policy. For more comprehensive information about howwe handle your personal data, including your rights under applicable dataprotection laws, please refer to our Privacy Policy available atmosta.io/legal.

8. INTERNATIONAL DATA TRANSFERS

8.1 Transfer Locations. Some of the third-party cookies weuse may result in the transfer of your data to countries outside yourjurisdiction, including the United States, where data protection laws maydiffer from those in your country of residence.

8.2 Safeguards. When we or our third-party partners transferdata internationally, we ensure that appropriate safeguards are in place, suchas Standard Contractual Clauses (SCCs) approved by the European Commission, toprotect your personal data in compliance with applicable data protection laws.

9. CHANGES TO THIS POLICY

9.1 Modifications. We may update this Cookie Policy from time totime to reflect changes in our practices, technologies, legal requirements, orother factors. When we make changes, we will update the "LastUpdated" date at the top of this Policy. Material changes shall becommunicated via email or Platform notification where required by law.

9.2 Continued Use. Your continued use of the Platform afterchanges become effective constitutes acceptance of the updated Cookie Policy.

9.3 Version Control. We maintain version control andupdate logs for this Policy for at least five (5) years. Previous versions areavailable upon request to legal@mosta.io

10. CONTACT INFORMATION

Privacy and Cookie Inquiries:
Squarefi Inc. (DBA Mosta)
Email: legal@mosta.io

General Support:
Email: support@mosta.io

For inquiries regarding third-party cookies andtheir data practices, please refer to the respective third-party privacypolicies referenced in Section 4 of this Policy.