Vista Musical Instruments – Cookie Policy

Effective Date: 7 October 2026

1. Scope

Vista Musical Instruments Pte. Ltd. (“VMI”) uses cookies and similar storage on its corporate website, VMI Account,
and participating web services. This policy supplements our
Privacy Policy. Brand stores may use additional
technologies described in their own policies.

2. What we use

• Sign-in and security — necessary: VMI Account uses first-party authentication cookies provided
  through Supabase, typically named sb-…-auth-token (sometimes split into chunks). They keep you signed
  in and support secure account access. Authentication cookies can last up to 400 days and may be refreshed; sign-out
  clears the current site’s authentication context. Temporary sign-in storage is cleared when the relevant flow
  completes.
• Privacy preferences — necessary: Our consent manager, c15t, stores choices in a first-party
  c15t cookie and local storage. The cookie normally lasts up to 12 months; the local-storage copy
  remains until cleared or replaced. These records remember your choices and are separate from analytics identifiers.
• VMI product measurement — optional on the web: Where enabled by your site’s measurement settings,
  vmi-measurement-v1 in session storage holds a random site-specific device identifier, session
  information, and your VMI Account identifier when signed in. It normally lasts for the browser tab’s session. A new
  measurement session starts after 30 minutes of inactivity. The context is cleared on sign-out, account changes, or
  when measurement is disabled. We use memory if session storage is unavailable. Events are sent through VMI’s servers
  to Amplitude’s European project; this integration does not set Amplitude SDK cookies or record session replays.
• Corporate website analytics — optional: Where enabled, Google Analytics uses cookies such as
  _ga and _ga_* to distinguish browsers and measure visits. Their default lifetime is up to
  two years and can be renewed on subsequent visits.

3. Interactions across VMI brands

When you are signed in and measurement is permitted, we may associate interactions across VMI group brands and
services that use VMI Account with the same account identifier. Anonymous browser identifiers remain site-specific.
Clearing browser storage does not delete events already received by analytics providers; retention and data requests
are covered by our Privacy Policy.

4. Your choices

Necessary storage supports sign-in, security, and remembering privacy choices. Optional measurement and marketing
choices are separate from signing in or accepting account terms. Where consent is required, optional website
technologies wait for your choice in the consent banner. Refusing optional measurement does not prevent use of your
VMI Account.

You can block or clear cookies and site storage through your browser; blocking necessary storage may prevent sign-in,
and clearing it may reset privacy choices. For withdrawal of consent, objections, or questions about your preferences,
contact support@vistamusic.com. Browser controls do not automatically
change settings in other VMI websites or mobile apps.

Mobile apps may use analytics technologies, including Firebase Analytics and, where enabled, Amplitude measurement.
They are described in our Privacy Policy; browser-cookie controls do not control mobile-app collection.