PRIVACY • v2.4-US-2026Effective Date: November 1, 2026

Cookie Notice, Session Security & Acceptable Use Policy (DMCA 17 U.S.C. § 512)

Statutory Jurisdiction: United States Federal Law (CFAA 18 U.S.C. § 1030, DMCA 17 U.S.C. § 512)

Executive Summary: Transparency disclosure regarding strictly necessary cryptographic session cookies, Global Privacy Control (GPC) compliance, API scraping rules, and DMCA copyright agent notice.

1. Strictly Necessary Cookies & Cryptographic Session Tokens CompositeMatrix uses a privacy-first architecture with minimal client-side storage: - `cm_b2b_session` (`httpOnly`, HMAC-SHA256 Signed): Strictly necessary authentication cookie maintaining your B2B Engineer or Vendor session and Google OAuth 2.0 state. - No Third-Party Ad-Tech Trackers: We do not load invasive third-party behavioral advertising cookies or cross-site tracking pixels.

2. Acceptable Use & Authorized AI Indexing 1. Authorized LLM & Search Crawlers: Legitimate search engines and AI answer engines (including `GPTBot`, `OAI-SearchBot`, `ClaudeBot`, `PerplexityBot`, and `Google-Extended`) are explicitly authorized via `/robots.txt`, `/llms.txt`, and `/api/mcp` to index our normalized ASTM catalog with citation back to compositematrix.com. 2. Prohibited Conduct (CFAA 18 U.S.C. § 1030): Unauthorized attempts to probe non-public server ports, spoof distributor identities, bypass authentication controls, or submit malicious payloads are strictly prohibited under the US Computer Fraud and Abuse Act.

3. Digital Millennium Copyright Act (DMCA) Notice (17 U.S.C. § 512) Manufacturer brand names (including CoREZYN®, Derakane™, Vipel®, HexForce®, Divinycell®, Corecell™, Araldite®) are registered trademarks of their respective owners and are referenced strictly for nominative technical cross-referencing and authorized distributor fulfillment.

If you believe any datasheet summary infringes your copyright under **17 U.S.C. § 512**, please contact our Designated DMCA Agent at **legal@compositematrix.com**.