Date of Revision: June 15, 2026

Aithalon Labs Ltd (“FlirtaGPT,” “we,” “us,” or “our”) operates the website accessible at flirtagpt.ai and any affiliated websites or applications to which users may be redirected from flirtagpt.ai (the “Services”). FlirtaGPT is a company duly incorporated in the Republic of Cyprus, having its registered address at Lapathou, 6, Strovolos, 2027, Nicosia, Cyprus, and registered with the Cyprus Department of Registrar of Companies and Intellectual Property under company number HE 493820.

This Cookies Notice explains what cookies and similar technologies are, how and why we use them on the Services, and the choices available to you. It should be read together with our Privacy Notice, available at flirtagpt.ai/privacy, which describes how we process your personal data more generally. Capitalised terms not defined here have the meaning given to them in our Privacy Notice.

The Services are intended exclusively for adults aged 18 years or older. We do not collect consent to non-essential cookies from any visitor who has not confirmed, through our age-gate, that they are at least 18 years of age (or the age of majority in their jurisdiction, whichever is greater).

Language. This Cookies Notice is originally drafted in English. Translations are provided for convenience only. In the event of any conflict between the English version and a translation, the English version prevails.

Quick contact. Questions about this Cookies Notice or about how we use cookies: [email protected].

1. What Are Cookies and Similar Technologies?

Cookies are small text files that are placed on your device (computer, tablet or mobile phone) when you visit a website. They are widely used to make websites work, or to work more efficiently, as well as to provide information to the operators of the site. Cookies allow a website to recognise your device and store information about your preferences or past actions.

In this Cookies Notice, “cookies” also refers to similar technologies that store or access information on your device, such as local storage, software development kits, pixels, tags, and device identifiers. We refer to all of these collectively as “cookies” for simplicity.

Cookies may be:

• First-party cookies, set by FlirtaGPT directly; or third-party cookies, set by a third party that provides a service to us (for example, an analytics or advertising-measurement provider).
• Session cookies, which are temporary and are deleted when you close your browser; or persistent cookies, which remain on your device until they expire or you delete them.

2. How We Use Cookies

We use cookies to operate and secure the Services, to remember your preferences, to understand how the Services are used so that we can improve them, and — where you have given your consent — to measure the effectiveness of our marketing and advertising. We do not use cookies to engage in targeted advertising directed at you, to build advertising profiles about you, or to sell your personal data. The categories of cookies we use, the purposes for which we use them, the third-party providers involved, and the retention periods that apply are described in Section 3 below.

3. Categories of Cookies We Use

We group the cookies used on the Services into the four categories described below. For each category we describe its purpose, identify the third-party providers involved (where applicable), and state a general retention period. We describe cookies at the level of these categories rather than listing each individual cookie; where we engage a new third-party provider or use cookies for a new purpose, we update this Notice accordingly.

3.1 Strictly Necessary Cookies

These cookies are essential for the Services to function and cannot be switched off in our systems. They are usually set only in response to actions you take, such as logging in, creating or accessing your Account, setting your privacy preferences, or completing a transaction. They include cookies that keep you logged in, that protect the security and integrity of the Services (including fraud prevention, bot mitigation, and protection against attacks), and that remember your cookie choices. Because these cookies are strictly necessary to provide the Services, they do not require your consent, and the Services cannot function properly without them.

Providers: FlirtaGPT (first-party), and Cloudflare, Inc. (which provides content-delivery, security, bot-mitigation and protection against attacks for the Services). Typical retention: from the duration of your browser session up to 12 months.

3.2 Functional Cookies

These cookies enable the Services to provide enhanced functionality and personalisation, such as remembering your language and display preferences. If you do not allow these cookies, some or all of these features may not function properly.

Providers: FlirtaGPT (first-party). Typical retention: up to 12 months.

3.3 Analytics Cookies

These cookies help us understand how visitors interact with the Services — for example, which pages are visited and how the signup and subscription flow performs — so that we can measure and improve the performance and reliability of the Services. The information generated through our analytics is used in aggregated or de-identified form. We do not use analytics cookies to track the content of your conversations.

Providers: we currently use a privacy-focused, cookieless analytics measurement provided through Cloudflare, Inc., which does not rely on cookies to count visits. Where we later introduce analytics tools that do set cookies, we will identify the relevant provider in this Notice before those cookies are used. Typical retention: up to 24 months.

3.4 Advertising Cookies

Where you have given your consent, these cookies are used to measure the effectiveness of our own marketing and advertising — for example, to understand whether a visit or a subscription resulted from one of our advertising campaigns (conversion measurement). They allow us and our advertising-measurement partners to attribute conversions to the campaigns that generated them. We do not use these cookies to display third-party advertising on the Services, to build advertising profiles about you, to engage in cross-context behavioural advertising, or to sell your personal data. These cookies are set only after you have given your consent and are not active if you decline them.

Providers: we work with third-party advertising networks to measure the performance of our advertising campaigns. Where these networks set cookies on the Services, we will identify them by name in this Notice before those cookies are used. Typical retention: up to 13 months.

4. Your Consent and How to Manage Cookies

When you first visit the Services, our cookie banner asks you to choose which categories of non-essential cookies you wish to allow. Strictly Necessary cookies are always active because the Services cannot function without them; all other categories are switched off by default and are only set if you actively accept them.

You can accept all non-essential cookies, reject all non-essential cookies, or make a selection by category. Rejecting non-essential cookies will not prevent you from using the Services, although some features may be less convenient.

You may change or withdraw your choices at any time by selecting “Manage cookies” in the footer of the Services, which reopens the cookie banner. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.

5. Other Ways to Control Cookies

In addition to our cookie banner, most browsers allow you to control cookies through their settings. You can usually set your browser to block or delete cookies, or to alert you when a cookie is being set. Please note that blocking all cookies — including Strictly Necessary cookies — through your browser may prevent parts of the Services from working. To find out more about how to manage cookies in your browser, please consult your browser’s help documentation.

Where we use third-party providers, those providers may also offer their own opt-out mechanisms. The third-party providers we use are identified by category in Section 3 above, and you can review each provider’s own privacy and cookie policies for further details and opt-out options.

6. How We Describe Cookies

We describe the cookies we use at the level of the four categories set out in Section 3, together with their purposes, the third-party providers involved, and a general retention period for each category, rather than by listing every individual cookie by name. This approach is intended to give you clear and meaningful information about how and why cookies are used on the Services. We keep the descriptions in Section 3 up to date, and we update this Notice whenever we engage a new third-party provider or begin using cookies for a new purpose.

7. Cookies and Your Personal Data

Some cookies collect information that may constitute personal data — for example, online identifiers. Where this is the case, our processing of that personal data is governed by our Privacy Notice, available at flirtagpt.ai/privacy, which explains the lawful bases on which we rely, the recipients of personal data, international transfers, retention periods, and your rights as a data subject. Strictly Necessary cookies are processed on the basis of our legitimate interest in operating and securing the Services; non-essential cookies (Functional, Analytics and Advertising) are set only on the basis of your consent.

8. Authentication Providers

The Services allow you to create an Account and sign in using your email address and a password, or using a third-party sign-in provider (Google or Discord). Where you choose to sign in through a third-party provider, that provider may set cookies on your device that are governed by that provider’s own cookie and privacy policies. We do not control the cookies set by third-party sign-in providers. Our use of data received from these providers is described in our Privacy Notice.

9. Changes to This Cookies Notice

We may update this Cookies Notice from time to time to reflect changes in the cookies we use, in technology, or in legal requirements. When we make material changes, we will update the “Date of Revision” at the top of this Notice and, where appropriate, notify you through the Services. We encourage you to review this Notice periodically.

10. Contact

If you have any questions about this Cookies Notice or about our use of cookies, you may contact us at:

Aithalon Labs Ltd

Lapathou, 6, Strovolos, 2027, Nicosia, Cyprus

Data Protection Officer: [email protected]

General support: [email protected]

You also have the right to lodge a complaint with the Cyprus supervisory authority: Office of the Commissioner for Personal Data Protection — [email protected] — www.dataprotection.gov.cy.