Cookie Policy

and Cookie Consent Notice

Website: Hashtag Bio Inc. / hashtag.bio

Version: v1.0

Effective date: 28 July 2026

Last updated: 28 July 2026

1. About this notice

This Cookie Policy and Cookie Consent Notice explains how Hashtag BIO / hashtag.bio uses cookies and similar technologies on its creator-opportunity website and application form. It also explains the choices available through the cookie banner and Cookie Settings control.

This notice is specific to the current Hashtag BIO creator-application page. A different Hashtag Bio Inc. website, app, public creator profile or campaign service may use additional technologies and must provide its own accurate notice where its practices differ.

2. Who operates Hashtag BIO

Website operator: Hashtag Bio Inc. / hashtag.bio

United States office: 2021 Guadalupe Street, Suite 260, Austin, Texas 78705, USA

Privacy and legal email: legal@hashtag.bio

Support email: support@hashtag.bio

Telephone: +1 888-246-0148

Hashtag Bio Inc. determines the purposes for which the technologies covered by this notice are used on hashtag.bio. Miss Denmark branding on the application page does not make Miss Denmark responsible for the website's general cookie configuration.

3. What cookies and similar technologies are

A cookie is a small text file stored by a website in a browser. Cookies can remember a visitor's choices, maintain a secure session or help measure how a website is used. Similar technologies include local storage, software identifiers, pixels and scripts that store information on, or access information from, a browser or device.

A first-party cookie is set for the website being visited. A third-party technology is supplied by another organization, such as a form or analytics provider. This notice uses the word 'cookies' to cover cookies and comparable browser or device technologies unless the context requires a distinction.

4. Current technology configuration

Strictly necessary technologies support the consent choice, security and operation of the creator-application form.
Google Analytics is the only optional analytics service covered by the current application-page configuration.
Google Analytics is not activated until the visitor gives analytics consent where opt-in consent is required.
Google Analytics advertising features are disabled for this page.
The current application page does not use advertising cookies, social-media advertising pixels, cross-context behavioural advertising, device fingerprinting or data-broker tracking.
Attio and Brevo may process application or communication records after submission, but they are not represented here as setting visitor-facing cookies on the current page.

5. Cookie categories

5.1 Strictly necessary

These technologies are required to provide a function requested by the visitor, operate the application form, remember privacy choices, balance traffic or protect the website and form from misuse. They cannot be switched off through the consent panel because the relevant function would not operate reliably. They must not be reused for analytics, advertising or unrelated profiling.

5.2 Analytics - optional

With permission, Google Analytics helps Hashtag BIO understand aggregate visit and session patterns, device and browser categories, referring sources, page interactions and technical performance. Analytics is used to improve the page and form. It is not used on this page to build advertising audiences or show targeted advertising.

5.3 Functional and personalization - not currently used

The current application page does not use a separate optional functional or personalization category. If an optional feature later requires such storage, it must remain off until the visitor selects that category and this notice must be updated before activation.

5.4 Advertising and targeted advertising - not currently used

The current application page does not use advertising cookies or pixels and does not use cookie-derived information for cross-context behavioural advertising. An advertising category must not be displayed as active or enabled unless the website is first updated with accurate disclosures and legally required controls.

6. Current cookie register

The current implementation must be limited to the entries below. A browser may shorten a stated maximum duration, and a provider may use a dynamically generated suffix or identifier.

Current cookies and comparable provider-controlled identifiers

7. Information associated with cookies

Depending on the selected category, the technologies may process the consent choice, notice version, date and time, IP address, approximate region derived from the IP address, browser and device type, operating system, language, referral source, pages viewed, interaction events, session identifiers and diagnostic information.

Hashtag BIO does not ask Google Analytics to receive an applicant's name, email address, telephone number, social-media handle, free-text application answers or other form-field content. Form-field data is governed by the Privacy Policy and Creator Application Privacy Notice.

8. Why and on what basis cookies are used

Purposes and EU/EEA processing conditions

Consent is not the basis for strictly necessary technologies merely because they appear in the same banner. Refusing optional analytics does not prevent a visitor from viewing the page or submitting an application.

9. The cookie banner and consent choices

On the first visit, or when a fresh choice is required, the banner provides three directly available controls: 'Accept analytics', 'Reject non-essential' and 'Manage preferences'.

No optional category is selected in advance.
Accept and reject choices receive comparable visual prominence and require a comparable number of actions.
Closing or ignoring the banner does not constitute consent.
Continuing to browse does not constitute consent.
Analytics remains off unless the visitor actively accepts it.
The preference panel identifies the purpose, provider and category before consent.

10. Changing or withdrawing a choice

A visitor can reopen the consent panel at any time through the persistent Cookie Settings link in the website footer. Withdrawing consent is as easy as giving it and takes effect for future collection.

After withdrawal, Hashtag BIO stops optional analytics tags and deletes first-party analytics cookies that the consent manager is able to remove. A visitor can also delete cookies through browser settings. Withdrawal does not make earlier processing unlawful.

The website asks again after six months, or sooner if the purposes, providers or categories materially change, the visitor clears the consent record, or a new choice is legally required.

11. Embedded creator-application form

The creator application is delivered through Typeform. Typeform may set identifiers that are necessary to load and protect the form, maintain a form session, remember the form's own cookie decision or prevent abuse. Exact provider-controlled identifiers are available through the cookie-details control displayed within the form.

Typeform's cookie-consent function must be enabled. Tracking cookies used by Typeform integrations must remain blocked until the visitor accepts the corresponding optional category. Hashtag BIO does not enable Facebook Pixel, HubSpot advertising tracking or another advertising integration in the current form.

If the Typeform form opens on a Typeform domain or presents its own cookie control, the visitor may need to make a separate choice for that provider-controlled environment.

12. Google Analytics

Google Analytics 4 is configured for aggregate website measurement only. The Google tag uses the _ga cookie to distinguish visitors and the _ga_<container-id> cookie to preserve session state. Google states that each has a default expiration of two years, although browsers may impose shorter limits.

The cookie lifetime is different from the retention period for analytics event data. Hashtag BIO's Privacy Policy and Creator Application Privacy Notice sets the current analytics event-data retention period at 14 months.

For this page, Google Analytics advertising signals, personalized advertising and Google Ads linking must remain disabled. The website must not send application-field values or other directly identifying form content to Google Analytics.

Google may process analytics information in countries outside the visitor's country. The Privacy Policy and Creator Application Privacy Notice explains international-transfer safeguards and privacy rights.

13. Visitors in Denmark and the EU/EEA

Danish and EU rules generally require prior consent before information is stored on or accessed from a visitor's device, unless the technology is technically necessary to provide a service requested by the visitor. For personal data created by optional analytics, Hashtag BIO relies on consent under the GDPR.

Consent must be freely given, specific, informed and unambiguous; it must be recorded and capable of withdrawal. The banner therefore provides a clear refusal option, granular controls, no preselected optional settings and no reliance on continued browsing.

Privacy rights and the right to complain to the Danish Data Protection Agency or another competent supervisory authority are described in the Privacy Policy and Creator Application Privacy Notice.

14. Visitors in the United States

The current Hashtag BIO application page does not sell personal information or share cookie-derived personal information for cross-context behavioural advertising, and it does not use optional cookies for targeted advertising. The website must be re-assessed before any such practice is introduced.

Hashtag BIO recognizes browser-based Global Privacy Control and other legally valid opt-out preference signals where applicable. On the current page, a recognized signal is treated as a direction to keep non-essential technologies off. A signal does not disable technologies that are strictly necessary to provide a requested function.

Additional U.S. privacy rights, including rights that depend on a state's law and statutory thresholds, are described in the Privacy Policy and Creator Application Privacy Notice.

15. Visitors in Singapore

Where cookie information is personal data under Singapore's Personal Data Protection Act, Hashtag BIO gives notice of the purposes for collection, use and disclosure and limits processing to appropriate purposes. Visitors may withdraw optional consent through Cookie Settings.

Questions, access or correction requests and complaints may be sent to legal@hashtag.bio. Privacy rights and overseas-transfer practices are described more fully in the Privacy Policy and Creator Application Privacy Notice.

16. Browser controls

Most browsers allow visitors to view, block or delete cookies. Blocking all cookies may remove the saved consent choice or prevent the embedded application form from working reliably. Browser settings do not replace the website's obligation to obtain a valid opt-in where required.

A visitor who uses more than one browser or device may need to set preferences separately on each one.

17. Changes to this notice

Hashtag BIO may update this notice when technologies, providers, purposes or legal requirements change. The effective date and last-updated date identify the current version.

A material change to an optional purpose, provider or category requires a fresh choice before the changed technology is activated where applicable law requires consent.

18. Contact

Organization: Hashtag Bio Inc.