HTTP/1.1 200 OK Connection: keep-alive Server: nginx Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, private Permissions-Policy: interest-cohort=() X-Powered-By: Statamic Set-Cookie: XSRF-TOKEN=eyJpdiI6InQ5dk0vVG92ZmhCUmp3STFuakFCYnc9PSIsInZhbHVlIjoiODdMYjNvQjBUZnFGczNLL2laaVZsZXBqUElJdTJSRWYydkxneGlqZURQb1UxSDFTdUJLUEJGYzEzVHFiZHl6ZUJOK0pHeEZORlMzNmpqSG9JbEZjSEhsaEY4T1BobWVSc2gwZVZZK09LRVZRL2hRQk9FVUFrNnhYb3hRd3dXTDUiLCJtYWMiOiJiNTYyNDNlMWY4ZWM1YjM2YTI3NGI0NzdmZTIyYmI3MDE2NzU5NTBiMWNlZjIxM2M5NzlhZWZjZjUzZDRlNzFhIiwidGFnIjoiIn0%3D; expires=Thu, 09-Oct-2025 20:19:55 GMT; Max-Age=7200; path=/; secure; samesite=lax Set-Cookie: nextroll_session=eyJpdiI6InluekZVZFVtV2FBYmdkckVTVWZGZmc9PSIsInZhbHVlIjoiR3hDRGhwZ1FyU0FjbWZRNU03Zyszdm1XVkFKS2lvYlpBYjhwVnZSMGZlalNBM3lUVnZnbUNLdnY5UUFqODZpNUVFY0d4SFhsYm1IekJMTGdDWGJnR2paT0ZZMEVGUGl1aW5HRnFFRFR1UjlXYkVtZXQxM004RnJmekRyc3RZTnUiLCJtYWMiOiIyNzBiNmVkOGY5M2NhYzkxM2Q4NmEwNGQxMzZmZTdhMDlhNDU1M2IwNzI3ZjczMzIzYTQ0MWY5YmVhYTdhMDhkIiwidGFnIjoiIn0%3D; expires=Thu, 09-Oct-2025 20:19:55 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax X-XSS-Protection: 1; mode=block Content-Encoding: gzip Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 09 Oct 2025 18:19:55 GMT X-Served-By: cache-sjc1000099-SJC, cache-bom-vanm7210067-BOM X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1760033995.028059,VS0,VE356 Vary: Accept-Encoding Content-Security-Policy: frame-ancestors 'none'; Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: DENY transfer-encoding: chunked

CCPA Metrics

Last Updated on: July 1, 2025

Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”) Section 999.313(g), NextRoll is providing the following metrics for the 2024 calendar year (January 1-December 31) for requests received from consumers on our Privacy Request webpage:

Number of Requests to Know Received

4

Number of Requests to Know Complied With

4

Number of Requests to Know Denied^*

0

Number of Requests to Delete Received

21

Number of Requests to Delete Complied With Number of Requests to Delete Denied^*

21

Number of Requests to Opt-out Received

1302

Number of Requests to Opt-out Complied With

1302

Number of Requests to Opt-out Denied

0

Mean Number of Days to Respond to Requests to Know

19

Mean Number of Days to Respond to Requests to Know and Delete

24

Mean Number of Days to Respond to Requests to Opt-Out

1

^*Requests were unable to be completed because NextRoll was unable to verify these requests.