Cookie Policy

Last Updated: July 15, 2026

Definitions

For the purposes of this Cookie Policy (hereinafter referred to as "this Policy"), the following terms shall have the meanings set forth below:

• "Company," "we," "us," or "our": franky, Inc., a corporation organized and existing under the laws of Japan.
• "Website": The website operated by the Company at mori.to, including all subdomains, pages, and services accessible therethrough.
• "User" or "you": Any individual who accesses or uses the Website.
• "Cookies": Small text files placed on a User's device (including, without limitation, computers, smartphones, and tablets) upon accessing the Website, as well as similar tracking technologies including pixel tags (also known as web beacons), local storage, and device identifiers, all of which are collectively referred to herein as "Cookies."
• "Third-Party Cookies": Cookies set by entities other than the Company through services integrated into the Website.
• "Essential Cookies": Cookies that are strictly necessary for the operation of the Website.
• "Privacy Policy": The Company's Privacy Policy, as described and available at https://mori.to/privacy-policy.

Section 1. Purpose and Scope

This Policy explains how the Company uses Cookies and similar tracking technologies on the Website. This Policy shall be read in conjunction with our Privacy Policy, available at https://mori.to/privacy-policy, and is intended to provide transparency regarding the Company's data collection practices pursuant to Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR"), the California Consumer Privacy Act of 2018, as amended (California Privacy Rights Act of 2020) (collectively, "CCPA"), and other applicable data protection and privacy laws.

By continuing to use the Website, you acknowledge and consent to the use of Cookies as described in this Policy. If you do not consent to the use of Cookies, you may exercise your right to refuse non-essential Cookies by adjusting your browser settings or using the opt-out mechanisms described in Section 6 herein.

Section 2. How We Use Cookies

The Company shall use Cookies on the Website for the following purposes:

1. To ensure the proper and secure functioning of the Website;
2. To retain and apply User preferences and settings;
3. To analyze and understand how Users interact with the Website;
4. To attribute referrals to affiliate partners and measure resulting purchase conversions;
5. To measure the effectiveness of the Company's marketing campaigns; and
6. To improve the Website experience based on aggregated usage patterns.

Section 3. Types of Cookies We Use

Section 3.1. Essential Cookies

Essential Cookies are strictly necessary for the basic functionality of the Website. Without these Cookies, certain features (including, but not limited to, shopping cart functionality, account authentication, and security functions) shall not operate. Essential Cookies do not collect personal information for marketing purposes.

You may not opt out of Essential Cookies, as they are required for the Website to function. The legal basis for the use of Essential Cookies is the legitimate interest of the Company in providing a functional Website, pursuant to Article 6(1)(f) of the GDPR.

Section 3.2. Functional Cookies

Functional Cookies retain the User's choices and preferences (such as language and region settings) to provide a more personalized experience. These Cookies may also be used to recognize the User upon subsequent visits to the Website.

Section 3.3. Analytics Cookies

Analytics Cookies collect information regarding how Users interact with the Website, including page views, interaction events, performance signals, error messages, and, where enabled, masked session replay or heatmap information. The information collected by Analytics Cookies shall be used to improve the performance and functionality of the Website and to understand usage patterns. Reports and analyses generated from these Cookies may be aggregated or de-identified where appropriate.

Section 3.4. Marketing Cookies

Marketing Cookies are used to deliver advertisements that are relevant to the User and the User's interests. These Cookies are also used to limit the frequency of advertisement display and to measure the effectiveness of advertising campaigns.

For Impact.com affiliate measurement, the Website creates a pseudonymous profile identifier in local storage and may report purchase conversion fields including order ID, currency, promotion code, discount, and product-level category, SKU, quantity, and subtotal. The Website also reports a SHA-1 hash of the normalized purchaser email address; the raw email address is not transmitted to Impact.com. Impact tracking is not loaded on the shared-content routes at "/shared" or "/shared/*".

Section 4. Third-Party Cookies

Certain Cookies on the Website are set by third-party service providers engaged by the Company ("Third-Party Cookies"). These third parties may collect data regarding the User's online activities across different websites and services. The Company does not exercise control over how such third parties use the data they collect, and the User is encouraged to review the privacy policies of such third parties to understand their respective data handling practices.

The third-party services currently utilized by the Company are as follows:

The Company encourages Users to review the privacy policies of the aforementioned third-party services to understand how they handle personal data, as described in our Privacy Policy, available at https://mori.to/privacy-policy.

Section 5. Session Cookies and Persistent Cookies

1. Session Cookies: Session Cookies are temporary Cookies that shall be automatically deleted when the User closes the browser. These Cookies are used to maintain the User's session during navigation of the Website (e.g., retaining items in the shopping cart).
2. Persistent Cookies: Persistent Cookies shall remain on the User's device for a predetermined period or until the User manually deletes them. These Cookies are used to retain User preferences and settings for subsequent visits to the Website. The pseudonymous Impact.com affiliate profile identifier may remain in local storage for up to 720 days.

Section 6. Managing Your Cookie Preferences

Section 6.1. Browser Settings

You may exercise your right to refuse non-essential Cookies by configuring your browser settings. Most major browsers permit Users to:

1. View Cookies stored on the User's device;
2. Delete individual or all Cookies;
3. Block Cookies from specific or all websites; and
4. Configure separate preferences for first-party and Third-Party Cookies.

Instructions for managing Cookies in major browsers are available at the following locations:

• Google Chrome: chrome://settings/cookies
• Mozilla Firefox: about:preferences#privacy
• Apple Safari: Preferences > Privacy
• Microsoft Edge: edge://settings/privacy

Please note that blocking or deleting Cookies may adversely affect the functionality of the Website and the User's experience. The Company shall not be liable for any diminished functionality resulting from the User's decision to block or delete Cookies.

Section 6.2. Google Analytics Opt-Out

To opt out of Google Analytics tracking specifically, the User may install the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

Section 6.3. Industry Opt-Out Tools

The User may also manage advertising Cookie preferences through the following industry-standard opt-out tools:

• Digital Advertising Alliance (DAA): https://optout.aboutads.info
• Network Advertising Initiative (NAI): https://optout.networkadvertising.org

Section 7. Do Not Track and Global Privacy Control

Section 7.1. Do Not Track (DNT)

Certain browsers offer a "Do Not Track" ("DNT") feature that transmits a signal to websites indicating that the User does not wish to be tracked. As of the date of this Policy, no industry-standard technology for recognizing and responding to DNT signals has been established. The Company shall update this Policy if and when such a standard is adopted.

Section 7.2. Global Privacy Control (GPC)

The Company recognizes and honors Global Privacy Control ("GPC") signals transmitted by the User's browser. Upon detection of a GPC signal, the Company shall treat such signal as a valid request to opt out of the "sale" or "sharing" of personal information as those terms are defined under the CCPA, and shall disable tracking technologies that result in such sale or sharing. The Website also stops loading Impact.com affiliate tracking and does not report Impact.com purchase conversions while a GPC signal is detected.

For Users who are residents of the State of California, a GPC signal shall be treated as a request to opt out of the sale or sharing of such User's personal information pursuant to the California Consumer Privacy Act of 2018, as amended ("CCPA").

Section 8. Email Tracking

When the Company sends marketing or transactional emails to Users, the Company may use pixel tags (small invisible images embedded in such emails) to collect the following information:

1. Whether the email was opened;
2. Which links within the email were clicked; and
3. General location and device information of the recipient.

The User may disable email tracking by adjusting the User's email client settings to block external images, or by unsubscribing from the Company's marketing emails. Unsubscribe instructions shall be included in each marketing email sent by the Company.

Section 9. Changes to This Cookie Policy

The Company reserves the right to update or modify this Policy from time to time to reflect changes in the Company's practices, technology, or applicable laws and regulations. Any such updates shall be posted on the Website with a revised "Last Updated" date. The Company encourages Users to review this Policy periodically to remain informed regarding the Company's use of Cookies.

Section 10. Severability and Governing Law

If any provision of this Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect to the maximum extent permitted by law. This Policy shall be governed by and construed in accordance with the laws of Japan, without regard to its conflict of laws principles.

Section 11. Contact Us

If you have any questions or concerns regarding the Company's use of Cookies or this Policy, please contact us at:

• Email: support@mori.to
• Website: mori.to

franky, Inc.
5th Floor, 1-13-9, Tomigaya, Shibuya, Tokyo, Japan
Representative Director: Yu Akasaka