Cookie Policy

EBOKIO Effective Date: 12 July 2026 Last Updated: 12 July 2026 Version: 1.0

Company: EBOKIO LTD, a private limited company registered in England and Wales

Applies to: www.ebokio.com, publishing.ebokio.com, and related services operated by EBOKIO LTD

1. Introduction

This Cookie Policy explains how EBOKIO LTD ("EBOKIO", "we", "us", or "our") uses cookies and similar technologies on and through www.ebokio.com (the reader storefront) and publishing.ebokio.com (the publisher portal), including any related websites, checkout pages, reader interfaces, seller dashboards, author tools, user accounts, subdomains, and digital services we operate.

This Cookie Policy should be read together with our privacy policies — the EBOKIO Privacy Policy, which covers the reader storefront at www.ebokio.com, and the EBOKIO Publishing Privacy Policy, which covers the publisher portal at publishing.ebokio.com — our Terms of Service, and any related legal notices published on our Website. Where this Cookie Policy addresses the use of cookies and similar technologies specifically, it governs those matters in addition to the wider privacy disclosures set out in those policies.

This Cookie Policy explains which cookies and similar technologies we use and why. Strictly necessary technologies are used to operate the Website. Non-essential technologies are used only where you have given consent through the cookie banner or the cookie settings control, and you may change or withdraw that consent at any time.

2. Who We Are

EBOKIO LTD operates a global digital marketplace that enables the publishing, sale, purchase, and distribution of electronic books ("ebooks") by readers, authors, publishers, and other users.

For the purposes of the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (as amended) ("PECR"), and other applicable privacy and data protection laws, EBOKIO LTD acts as the data controller for personal data collected through first-party cookies and similar technologies, except where a third party acts as an independent controller.

You may contact us regarding privacy and cookie matters at:

• Privacy Email: privacy@ebokio.com

• Legal: legal@ebokio.com

• Support Email: support@ebokio.com

• Website: https://www.ebokio.com (reader storefront) and https://publishing.ebokio.com (publisher portal)

3. What Are Cookies and Similar Technologies?

Cookies are small text files placed on your computer, smartphone, tablet, or other device when you visit a website. They allow a website or service to recognize a device, remember user actions or preferences, maintain secure sessions, support transactions, improve functionality, analyze usage, and measure advertising effectiveness.

In this Cookie Policy, the term "cookies" also includes similar technologies such as web beacons, pixels, local storage, session storage, device identifiers, and related technologies used for analytics, personalization, fraud prevention, and advertising.

Cookies may be set directly by us ("first-party cookies") or by third-party providers acting on our behalf or for their own purposes ("third-party cookies").

4. Why We Use Cookies

We use cookies and similar technologies for legitimate operational, commercial, and security purposes, including to:

• Enable core Website functionality and service delivery;

• Maintain secure login sessions and user authentication;

• Preserve cart, checkout, and ebook purchase flows;

• Protect accounts, transactions, and platform integrity;

• Remember user preferences, settings, and language choices;

• Improve Website performance, speed, and usability;

• Measure traffic, engagement, and feature usage;

• Understand how users interact with the Website;

• Detect fraud, abuse, piracy, suspicious activity, and security incidents;

• Support analytics, diagnostics, testing, and service improvement;

• Measure marketing performance and campaign attribution;

• Deliver advertising or retargeting where permitted by law and consented to by the user;

• Store and respect cookie consent choices and privacy preferences.

Some of the purposes listed above — in particular measuring marketing performance and campaign attribution, and delivering advertising or retargeting — describe potential future uses only. EBOKIO does not use advertising or retargeting cookies on the reader storefront at www.ebokio.com. Advertising and retargeting technologies are used on the publisher portal at publishing.ebokio.com only, and only with your consent, as described in section 6.4. The analytics purposes listed above are met by EBOKIO's own first-party measurement, which is described in section 6.3 and runs only with your consent.

5. Legal Basis for Cookies

5.1 Strictly Necessary Cookies

Strictly necessary cookies are used where they are essential to provide a service explicitly requested by you or to ensure the secure and proper functioning of the Website. These cookies may be used without consent where permitted by law.

5.2 Consent

We rely on your prior, informed, freely given, specific, and unambiguous consent for the use of non-essential cookies and similar technologies, including analytics, advertising, retargeting, certain functionality cookies, and certain third-party technologies, where consent is required by law.

5.3 Legitimate Interests

Where lawful and appropriate, we may also rely on legitimate interests for related downstream processing activities associated with security, fraud prevention, service improvement, legal compliance, and evidence preservation, provided that such interests are not overridden by your rights and freedoms.

6. Categories of Cookies We Use

The categories in this section correspond to the choices shown in the cookie banner as follows: Strictly Necessary = "Essential"; Functional = "Preferences"; Performance and Analytics = "Analytics".

6.1 Strictly Necessary Cookies

These cookies are essential for the Website to operate properly and may include cookies used to:

• Maintain login sessions and account authentication;

• Enable shopping cart and checkout functionality;

• Process secure payments and payment verification;

• Protect against fraudulent transactions and malicious activity;

• Secure forms, account actions, and requests;

• Remember cookie consent settings and privacy choices;

• Support load balancing, network management, and service continuity.

If you block or disable strictly necessary cookies, parts of the Website may not function correctly, and certain services, including ebook purchases, account access, and checkout, may become unavailable.

6.2 Functional Cookies

These cookies and similar technologies help us remember settings and preferences you choose, such as:

• the language you read the site in;

• your country and the currency in which prices are shown;

• whether the language prompt has already been shown to you;

• sign-in state, where you choose to use a third-party sign-in provider.

6.3 Performance and Analytics

EBOKIO does not use third-party analytics services such as Google Analytics, does not display third-party advertising, and does not use advertising or retargeting cookies on the reader storefront at www.ebokio.com (for the publisher portal, see section 6.4). EBOKIO does operate its own first-party measurement of page views and of interactions with catalogue recommendations, in order to understand how the storefront is used and to improve it. That measurement is switched off by default and runs only where you enable the analytics category in the cookie banner; it uses a short-lived session identifier held in your browser's session storage, which is cleared when you close the tab. Each record created by this measurement contains the page path, a referrer-source category, your language setting, your country, a timestamp, and salted one-way hashes of the referrer, the browser identifier, and the session identifier. EBOKIO does not store your IP address or your full browser identifier: your IP address is used only momentarily to apply rate limits and to determine your country, and is not retained. You may withdraw that consent at any time through the cookie banner or the cookie settings control, after which the measurement stops and the session identifier is cleared.

These cookies help us understand how visitors use the Website and may collect information such as:

• Page views and session duration;

• Navigation paths and referral sources;

• Popular pages, categories, and features;

• Time spent on pages and engagement metrics;

• Technical diagnostics, browser information, and performance data;

• Error tracking and service optimization indicators.

Where required by law, analytics cookies are only activated after valid consent has been obtained.

6.4 Advertising and Retargeting Cookies

EBOKIO does not display third-party advertising anywhere on the Website, and uses no advertising or retargeting cookies on the reader storefront at www.ebokio.com. On the publisher portal at publishing.ebokio.com, EBOKIO uses the Meta Pixel, provided by Meta Platforms Ireland Limited, for marketing measurement and advertising audiences. The Meta Pixel script is not loaded at all unless you accept the Marketing category in the cookie banner on that portal, and it runs only on public pages — it is never initialised on publisher dashboards, account pages, or pages carrying a verification or password-reset token. It sends two events: a page view, and a record that an author registration was completed. When the Pixel is active, Meta may receive that event information, the relevant public page address and referrer, cookie identifiers, and standard technical browser and device information generated by the connection, including your IP address. EBOKIO does not pass book titles, product identifiers, or other custom parameters to Meta, and Meta's automatic form-field matching and codeless event collection are disabled, so EBOKIO does not pass your email address, telephone number, or name. If EBOKIO introduces advertising or retargeting technologies anywhere else, it will do so only with your prior consent and will update this Cookie Policy and the cookie register before they are activated.

These cookies may be used to:

• Show relevant advertising;

• Measure advertising effectiveness;

• Support conversion attribution;

• Build audience segments;

• Enable retargeting across websites, platforms, or devices;

• Reduce repeated display of the same advertisement.

These cookies are generally non-essential and, where required by law, are used only with your prior consent.

6.5 Third-Party Cookies

Third-party cookies are described here by their source rather than their purpose: each one also falls into one of the categories above — the Stripe payment and fraud cookies are strictly necessary, and the Google sign-in cookie is functional. The register in section 9 shows both the provider and the category for each. Some cookies are placed by third-party providers whose services are integrated into the Website. Currently these are Stripe (payment processing and fraud prevention), Google (only where you choose to sign in with Google), and — on the publisher portal only, and only with your Marketing consent — Meta Platforms Ireland Limited (the Meta Pixel). EBOKIO also uses Vercel Web Analytics on publishing.ebokio.com; that tool is cookieless — it does not set cookies and does not store or read information on your device — so it does not appear in the cookie register below and does not require cookie consent. Apart from the Meta Pixel described above, EBOKIO does not integrate advertising networks, retargeting tools, or embedded third-party content providers. If that changes, we will update this Policy and the cookie register and, where required, obtain your consent before any such cookies are set.

7. Types of Cookies by Duration

7.1 Session Cookies

Session cookies are temporary cookies that expire when you close your browser or end your browsing session. They are commonly used to maintain secure sessions, preserve cart contents, and support temporary navigation states.

7.2 Persistent Cookies

Persistent cookies remain on your device for a defined period or until manually deleted. They may be used to remember preferences, recognize returning users, support analytics, measure campaigns, and store consent choices.

8. Information Collected Through Cookies

Depending on the technology used, cookies and similar tools may collect or generate information such as:

• IP address;

• Browser type and version;

• Device type, model, and operating system;

• User agent string;

• Approximate geolocation (such as country or region) derived from your IP address using the MaxMind GeoLite2 database;

• Unique cookie identifiers and device identifiers;

• Referral URLs and pages visited;

• Time spent on pages and interaction data;

• Clickstream and navigation patterns;

• Login status and session data;

• Purchase flow, reading activity, and usage events;

• Search activity within the Website;

• Technical logs, diagnostics, and error data;

• Consent status and opt-in or opt-out preferences.

To the extent that any information collected through cookies can identify or reasonably be linked to an individual, it will be treated as personal data under applicable law.

IP-Based Geolocation (MaxMind GeoLite2)

EBOKIO uses the MaxMind GeoLite2 database to estimate the approximate geographic location (such as country or region) of a visitor from their IP address. The GeoLite2 database is hosted locally on EBOKIO’s own systems, so this lookup is carried out by us and your IP address is not transmitted to MaxMind for this purpose. We use this approximate location for purposes such as showing the correct language and currency, calculating applicable taxes (for example VAT), preventing fraud, and protecting the security and integrity of the Platform. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com. This location estimate is not used for behavioural advertising or tracking.

9. Specific Cookies and Tracking Technologies

We may use cookies and similar technologies including, without limitation, those listed below. The exact cookies in use may change from time to time as our Website, service providers, and technical infrastructure evolve.

For a more detailed and current list of cookies and tracking tools in use, please review our live cookie settings interface or contact privacy@ebokio.com.

EBOKIO uses no advertising or retargeting cookies on the reader storefront and engages no third-party analytics service for it; the Meta Pixel cookies listed in the register are set on the publisher portal only, and only where Marketing consent has been given. The register above lists every cookie and similar technology in use, including the first-party analytics session identifier, which is set only where you enable the analytics category. The separate cookieless website analytics used on publishing.ebokio.com set no cookies and store nothing on your device, and therefore do not appear in the register. If non-essential cookies are introduced in future, they will be added to this register and set only after valid consent.

10. Third-Party Services and Cookies

We use third-party services that place or read cookies and similar technologies on the Website, limited to payments and fraud prevention (Stripe), sign-in functionality (Google, only where you choose to sign in with Google), and marketing measurement on the publisher portal (the Meta Pixel, only where you accept the Marketing category). We do not use customer-support technologies that set cookies or similar technologies on your device, and we use no advertising or retargeting technologies on the reader storefront.

Examples of third-party providers referenced in our privacy documentation include Stripe (payment processing and fraud prevention), Hostinger and Hetzner (hosting and infrastructure, with servers located in the European Union), Vercel (delivery of the front-end interface, and cookieless website analytics on publishing.ebokio.com; Vercel does not set advertising or tracking cookies through the Platform), Google (only where you choose to sign in with Google), and Meta Platforms Ireland Limited (the Meta Pixel on the publisher portal, only with your Marketing consent). EBOKIO does not use advertising or retargeting cookies and engages no third-party analytics service for the storefront.

Third-party providers may collect data directly from your browser or device and may combine such data with other information they hold about you. We do not control how independent third parties use data collected through their own cookies, and you should review their respective privacy and cookie policies.

Third-Party Providers and the Technologies They Use

Stripe (payment processing and fraud prevention): Stripe may set strictly necessary and security cookies and similar technologies in your browser when you make a payment, in order to process the payment you have requested and to detect and prevent fraud. These are set during checkout. See Stripe’s Cookie Policy: https://stripe.com/legal/cookies-policy.

Google (sign-in only): Where you choose to “Sign in with Google”, Google may set cookies to provide authentication and account linking. These are set only if and when you use Google sign-in, and not by default. See Google’s cookie information: https://policies.google.com/technologies/cookies.

Hostinger (hosting and infrastructure): Hostinger provides the servers and infrastructure that host the Website. Hostinger does not set its own advertising or tracking cookies on your device through the Platform; any strictly necessary infrastructure cookies are first-party EBOKIO cookies. See Hostinger’s Cookie Policy: https://www.hostinger.com/legal/cookie-policy.

MaxMind (IP geolocation): EBOKIO uses MaxMind’s GeoLite2 database locally and does not transmit your IP address to MaxMind; MaxMind does not set cookies on your device through the Platform. See https://www.maxmind.com.

11. Consent Banner and Preference Management

When you first visit the Website, you will be presented with a cookie consent banner or similar consent management mechanism before non-essential cookies are activated. Through that mechanism, you will be able to:

• Accept all cookies;

• Reject non-essential cookies;

• Customize your cookie preferences by category;

• Revisit and modify your choices later.

Rejecting non-essential cookies will be as easy as accepting them. The first layer of our cookie banner presents a “Reject all” (or equivalent) control with the same prominence, visibility, and number of clicks as the “Accept all” control, so you can refuse non-essential cookies as easily as you can accept them, without being nudged toward acceptance. Withdrawing consent later will also be made as easy, using the same banner, preference tool, account setting, or similarly accessible control.

Non-essential analytics, advertising, retargeting, and non-essential third-party cookies will not be set or read until valid consent has been obtained, unless applicable law permits another basis for that specific technology.

We may retain records of your consent choices, including the date, time, method, version of notice, and scope of your preferences, for compliance, evidentiary, and audit purposes.

12. How to Control Cookies

You may control or restrict cookies in several ways:

• Through our cookie settings or consent management tool;

• Through your browser settings, including deletion or blocking of cookies;

• Through device or operating system privacy settings where available;

• Through provider-specific opt-out tools offered by certain analytics or advertising partners.

Please note that blocking or disabling some cookies may affect Website functionality, including secure login, shopping cart continuity, payment processing, and access to certain features.

13. Cookies and Personal Data

Some cookies collect information that may constitute personal data under applicable law. Where this occurs, such data is processed in accordance with the applicable EBOKIO privacy policy — the EBOKIO Privacy Policy for the reader storefront and the EBOKIO Publishing Privacy Policy for the publisher portal — and applicable legal requirements.

Data collected through cookies may be combined with other information we hold, including account information, transaction records, technical data, support history, fraud indicators, and usage data, where such processing is lawful, necessary, and proportionate.

14. International Data Transfers

Because EBOKIO LTD operates globally and uses international service providers, data collected through cookies may be processed outside the United Kingdom or your country of residence.

Where required, we implement appropriate safeguards for international transfers. For transfers out of the United Kingdom, we use the International Data Transfer Agreement (IDTA) issued by the Information Commissioner's Office, or the European Commission's Standard Contractual Clauses together with the ICO's International Data Transfer Addendum; the EU Standard Contractual Clauses on their own do not cover transfers out of the United Kingdom. For transfers out of the European Economic Area, we use the EU Standard Contractual Clauses. We also rely on UK adequacy regulations where they apply, carry out a transfer risk assessment before the transfer begins, and apply supplementary technical and organizational measures where needed. Further detail is set out in the applicable EBOKIO privacy policy.

15. Retention

Cookie retention periods vary depending on the type, purpose, and provider of the relevant cookie or similar technology.

• Session cookies are usually deleted when you close your browser;

• Persistent cookies remain for a specified duration unless manually deleted earlier;

• Records created by EBOKIO's own first-party measurement — both page-view records and catalogue-interaction records — are retained for 90 days and then deleted. Only anonymous aggregate counts, which contain no session identifier and cannot be linked to any person or visit, are kept after that period.

• Fraud and security-related logs may be retained for longer where necessary for investigations or compliance;

• Consent records may be retained as necessary to demonstrate compliance and resolve disputes.

16. Security

We implement appropriate technical and organizational measures designed to protect information collected through cookies and similar technologies against unauthorized access, misuse, loss, alteration, or unlawful disclosure.

Such measures may include encrypted connections, secure system architecture, access controls, audit logging, vendor due diligence, fraud monitoring, and other reasonable safeguards. However, no system can guarantee absolute security.

17. Children's Privacy

Our Website and services are not intended for children below the age of 18, or the age of majority in your jurisdiction, whichever is higher. EBOKIO does not use cookies or similar technologies to profile children or to serve behaviourally targeted advertising to children. The advertising technologies described in section 6.4 operate only on the publisher portal, which is available only to publishers aged 18 or over.

If we become aware that personal data relating to a child has been collected unlawfully through cookies or similar technologies, we will take appropriate steps to investigate, restrict, or delete such data where required.

18. Your Rights

Subject to applicable law, you may have the right to be informed about our use of cookies, withdraw consent for non-essential cookies, object to certain processing, request access to personal data, request rectification or erasure, request restriction of processing, request portability where applicable, and lodge a complaint with a competent supervisory authority. To exercise any of these rights, contact privacy@ebokio.com. We will respond without undue delay and within one month of receiving your request, or may extend by up to two further months for complex or multiple requests where permitted by law. Exercising your rights is free of charge, except where a request is manifestly unfounded or excessive — in particular because it is repetitive. Fuller detail is set out in the applicable EBOKIO privacy policy.

For users in the United Kingdom, the primary supervisory authority is the Information Commissioner's Office (ICO).

• Website: https://www.ico.org.uk

• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

• Phone: 0303 123 1113

19. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in law, regulatory guidance, our technology, our service providers, our business operations, or our use of cookies and similar technologies.

Any updated version will be posted on this page with a revised "Last Updated" date. Where required by law, we will provide additional notice or obtain renewed consent before material changes affecting non-essential cookies take effect.

20. Contact Us

If you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies and similar technologies, please contact:

• Privacy: privacy@ebokio.com

• Support: support@ebokio.com

• Legal: legal@ebokio.com

• Website: https://www.ebokio.com (reader storefront) and https://publishing.ebokio.com (publisher portal)

21. Governing Law

This Cookie Policy shall be governed by and construed in accordance with the laws of England and Wales, together with the UK GDPR, the Data Protection Act 2018, PECR, and other applicable privacy and electronic communications laws, without prejudice to any mandatory rights available to data subjects under applicable law.

Company information:

Company Name: EBOKIO LTD

Company Number: 17308940

Situation of Registered Office: England and Wales

Registered Office Address: 128 City Road, London, EC1V 2NX, United Kingdom