Privacy Statement Last Updated: August 3, 2026 Combat Creators LLC, doing business as Post-it Media, and postitmedia.io ("Post-it Media," "us," "we," or "our") thank you for visiting the online and mobile resources we publish. We use the words "you" and "your" to mean you, the reader, and other visitors to our online and mobile resources who are, in all cases, over the age of 13. Our privacy statement ("this statement," "this privacy statement," and "our statement") informs you about from whom and the types of personal information we collect, how we use it, who we share it with and why, and what we do to try to protect it. Online and mobile resources mean the websites and other internet features we own that allow you to interact with our websites, as well as apps we've created and distributed to let our customers and followers view our online and mobile resources or otherwise interact with the content we provide. Who We Collect Personal Information From We may collect personal information from the following groups of data subjects: visitors to, and users of, our online and mobile resources; our customers; current members of our workforce and those who apply for posted jobs; and third-party vendors and business partners. Personal information generally means information that can be used to identify you or that can be easily linked to you (for example, your name, address, telephone number, and email address). The privacy laws in some jurisdictions include unique elements in what they consider to be the personal information of the consumers or data subjects they protect. If those laws apply to us, as in the case of the California Consumer Privacy Act ("CCPA") or European General Data Protection Regulation ("GDPR"), our use of the phrase "personal information" includes the unique elements required by such laws. The categories of information we collect from each of these groups, and the ways in which we use it, differ. It's possible that the same person could fall into more than one group. Most of this statement addresses our processing and sharing of personal information collected from visitors to and users of our online and mobile resources and our customers. Nonetheless, we collect and retain the types of professional or employment-related personal information you would expect an employer to have about its existing and former workforce and new job applicants. We provide legally required notices of collection and describe our use and sharing of the personal information of our workforce and applicants in greater detail in confidential internal human resource manuals and documents accessible to members of our workforce. In addition, like other businesses, we buy goods and services and interact with vendors and business partners from whom we necessarily collect certain personal information in connection with our contractual and business relationships. As with our customers, this information is typically limited to minimum business contact information. We use and share personal information collected from our vendors and business partners to manage, administer, and perform under our contracts with them. What We Collect There are two types of information that we obtain from you online and then store and use: (i) non-personal information that's collected automatically from each visitor, such as your device operating system; and (ii) personal information that you voluntarily provide to us or that is collected automatically. By using our online and mobile resources, you are signifying to us that you agree with this section of our privacy statement and that we may use and disclose your information as described. Voluntarily Submitted Information If you participate in certain activities via our online and mobile resources, such as filling out a form, subscribing to updates, or contacting us, you may be asked to provide us with information about yourself. The types of personal information we collect in those situations include: • Email address • First name • Last name • Phone number • Mailing or physical address We do not sell, rent, or trade voluntarily submitted personal information with third parties. If you don't want us to collect this type of personal information, please don't provide it. Participation is strictly your choice. Not participating may limit your ability to take full advantage of the online and mobile resources, but it will not affect your ability to access certain information available to the general public on the online and mobile resources. Some of the ways you voluntarily give us your personal information and how we use it: • Emails and Online Forms – When you send us an email or fill out an online form, such as to contact us, your email address and any other personal information you include are retained by us and used to respond to you and process your request. We may also send you information about our products or services we think may be of interest to you. • Registering for an Account – When you register for an account, you submit personal information such as your name and email address, which we retain to create and manage your account and communicate with you. • Becoming a Customer or Subscriber – We use information provided by our customers to perform our contractual obligations, provide the products and services purchased, manage accounts, and communicate with customers. • Social Media and Community Features – Some of our online and mobile resources may offer community features letting users post messages or comments. If you use these features, the information you post will be in the public domain and not covered by this statement. Automatically Collected Information When you visit our online and mobile resources, basic information is passively collected through your web browser via tracking technologies, such as a "cookie," a small text file downloaded onto your computer or mobile device. It allows us to recognize your computer or mobile device and store some information about your preferences or past actions. We allow third-party vendors to use cookies or similar technologies to collect information about your browsing activities over time following your use of the site. For example, we use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies to help us analyze how you use the online and mobile resources. For more information on how Google uses this data, visit google.com/policies/privacy/partners. You can learn more about how to opt out of Google Analytics at tools.google.com/dlpage/gaoptout. We also use remarketing services on our website. Remarketing allows us to show you relevant ads based on your prior visits to our website, using cookies and similar identifiers placed by remarketing providers (for example, Google Ads or Meta/Facebook Ads). We do not display third-party advertisements on our website, and we do not accept payment from any third party in exchange for advertising space or promotion of their products or services. You can opt out of interest-based remarketing advertising through your browser settings or through industry opt-out tools such as the Digital Advertising Alliance (aboutads.info) or Google Ads Settings. The internet activity information collected through cookies and other similar means includes such things as: the domain name and IP address from which you accessed our online and mobile resources; the type of browser and operating system you use; the date and time and length of your visit; the specific pages visited; and the specific links to or from other sites. If you access our online and mobile resources from a phone or other mobile device, the mobile services provider may transmit to us uniquely identifiable mobile device information. Some mobile phone vendors also operate systems that pinpoint the physical location of devices, and we may receive this information if location services are enabled on your device. If you do not want us to collect and use geolocation data, disable location services through your device settings. We use both automatically collected information and mobile device information to compile generic reports about popular pages on our online and mobile resources and to see how our customers and followers are accessing them, in order to administer and improve the online and mobile resources. We use and retain your personal information in accordance with applicable law and only as long as necessary to carry out the purposes described above. User Beware: External Sites, Apps, Links, and Social Media We maintain a presence on external social media platforms such as Facebook, Instagram, YouTube, and LinkedIn. We may allow features of our online and mobile resources to connect with, or be viewable from, that external social media presence. Similarly, our online and mobile resources may contain links to other websites or apps controlled by third parties. We are not responsible for either the content on, or the privacy practices of, social media platforms or any thirdparty sites or apps to which we link. Those apps, sites, and platforms are not controlled by us and have their own privacy policies and terms of use. When/With Whom We Share Personal Information We use non-personal information to administer our online and mobile resources, make them better, and make business decisions. We use voluntarily provided personal information to respond to your inquiries and provide you with the services you have requested, among other uses described below. We do not sell or rent your personal information to third-party data vendors or marketing companies. We disclose your information when required by law. Email Marketing Through Go High Level We use Go High Level ("GHL"), a third-party marketing and customer relationship management platform, to send email communications to our subscribers and customers. When you provide us with your email address, name, phone number, or address, this information may be stored and processed within Go High Level's platform on our behalf. In this relationship, Post-it Media is the data controller and Go High Level acts as our data processor, processing personal information only according to our instructions. You can review Go High Level's privacy policy at gohighlevel.com/privacy-policy. Legally Compelled Disclosures We may disclose your information, including personal information, to government authorities and other third parties when compelled to do so by such authorities, or as required or permitted by law, including responding to court orders and subpoenas. To Prevent Harm We may disclose your information, including personal information, when we have reason to believe that someone is causing injury to or interference with our rights or property, other users of the online and mobile resources, or anyone else that could be harmed by such activities. Business Transfer If we, or substantially all of our assets, are acquired by one or more third parties as a result of an acquisition, merger, sale, reorganization, consolidation, or liquidation, personal information may be one of the transferred assets. Vendors and Business Partners We may share your information, including personal information, with vendors and other third parties with whom we have a contractual relationship, such as Go High Level for email marketing and remarketing platforms for advertising as described above. We disclose only the information each party needs, and we attempt to contractually restrict what our vendors and business partners can do with the personal information we provide to them, such that it is used only to carry out the purpose for which it was provided, is not disclosed to anyone else without our consent, and remains our property. Please note, however, that we cannot guarantee that all of our vendors and business partners will agree to these contractual requirements, nor can we ensure that, even when they do agree, they will always fully comply. Your Rights and Options You do not have to provide personal information to enjoy most of the features of our online and mobile resources. You can opt out of certain activities like email updates and newsletters. Residents of California and data subjects whose personal information was obtained while they were in the GDPR Jurisdictions have certain additional rights. GDPR Jurisdictions means the countries composed of the European Economic Area (including Iceland, Liechtenstein, and Norway) and the member states of the European Union. If we are using personal information you provided to us to send you materials, such as newsletters or product updates via text or email, and you decide you don't want to receive such materials, you may opt out by following the opt-out instructions in the email or other communication (for example, by replying "STOP" to a text), or by contacting us using the contact information below. It may take a period of time to remove your name from our lists after your request, so you may still receive materials for a short time after you opt out. In addition to opting out, you have the ability to access, amend, and delete your personal information by contacting us using the contact information below. Some browsers have a "do not track" feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not specifically respond to browser "do not track" signals. Children's Privacy Federal law imposes special restrictions and obligations on commercial website operators who direct their operations toward, and collect and use information from, children under the age of 13. We take those age-related requirements seriously and do not intend for our online and mobile resources to be used by children under the age of 13 without first obtaining the verifiable consent of such child's parent or legal guardian. We do not knowingly collect personal information from minors under the age of 13. If we become aware that anyone under the age of 13 has submitted personal information to our online and mobile resources without appropriate consent, we will delete that information and will not use it for any purpose whatsoever. If you believe that someone under the age of 13 has submitted personal information to our online and mobile resources, please contact us at [email protected]. We encourage parents and legal guardians to talk with their children about the potential risks of providing personal information over the internet. How We Protect Collected Personal Information We take reasonable security precautions to protect your personal information provided to our online and mobile resources. We have adopted a security program that includes technical, organizational, administrative, and other security measures designed to protect, in a manner consistent with accepted industry standards and applicable law, against anticipated or actual threats to the security of personal information (the "Security Program"). We cannot, however, guarantee that your information, whether during transmission or while stored on our systems or otherwise in our care, will be free from unauthorized access or that loss, misuse, destruction, or alteration will not occur. We periodically review and update our Security Program, including as required by applicable law. As part of our Security Program, we have specific incident response procedures activated whenever we become aware that your personal information was likely to have been compromised. We further require, as part of our vendor oversight procedures, that such parties notify us immediately if they have reason to believe an incident affecting personal information we provided to them has occurred. The California Consumer Privacy Act When we collect personal information from California residents, we become subject to, and those residents have rights under, the California Consumer Privacy Act ("CCPA"). For purposes of this section, the words "you" and "your" mean only such California residents. What We Collect From California Residents: We collect the following categories of personal information: identifiers such as name, address, phone number, and email address; and internet/electronic activity such as browsing history. We may disclose this information for one or more business purposes permitted by the CCPA. We do not sell, and within the last 12 months have not sold, personal information to third parties. Rights of California Residents: You have the following rights under the CCPA: disclosure, access, and deletion. It's important to us that you know that if you exercise these rights, we will not "discriminate" against you by treating you differently from other California residents who use our online and mobile resources but did not exercise their rights. You can exercise these rights up to two times every 12 months by contacting us at [email protected]. We may ask you to fill out a request form and verify your identity before acting on your request. If you make a verifiable request, we will confirm our receipt and respond within the time frames prescribed by the CCPA. The EU General Data Protection Regulation If we collect or otherwise obtain personal information from data subjects located in the GDPR Jurisdictions, the words "you" and "your" in this section mean only such GDPR Jurisdiction-based visitors and users. What We Collect From You in the GDPR Jurisdictions and How We Use It: We collect from you the categories of personal information already described in this statement. The lawful basis on which we rely for such collection, use, and disclosure is what the GDPR refers to as legitimate interest. As stated elsewhere in this statement, we do not sell any of your personal information to third parties, nor do we use it for automated decision-making. Cross-Border Data Transfers and Third-Party Processors: If we transfer personal information from the GDPR Jurisdictions to a location that has not been deemed by the European Commission to have adequate privacy protections, we do so in the manner the GDPR permits. Rights of Data Subjects in the GDPR Jurisdictions: With respect to personal information collected from you while you were in a GDPR Jurisdiction, you have these rights: transparency, access, correction and deletion, portability, and restriction/objection. If you would like to exercise any of these rights, please contact [email protected]. Your ability to exercise these rights is subject to certain conditions and exemptions under the GDPR. We will respond to all requests without undue delay and in accordance with the time frames prescribed by the GDPR. If you are not satisfied with how we use your personal information or respond to your requests, you have the right to complain to your data protection regulator. How We Communicate With You If you provide us with your email address or mobile phone number, you consent to receive marketing communications, including newsletters, product or service updates, and promotional messages, from Post-it Media by email and/or SMS/text message. We do not sell your personal information to third-party marketers, and we do not share it with unaffiliated third parties for their own marketing purposes. You may opt out of these communications at any time by replying "STOP" to any text message, clicking the unsubscribe link in any email, or contacting us at [email protected]. Message and data rates may apply, and message frequency may vary. It may take a short period of time to process your opt-out request, during which you may still receive one or more additional messages. Changes to This Privacy Statement This privacy statement was last updated on August 3, 2026, and is effective as of this date. The English language version of this privacy statement is the controlling version regardless of any translation you may access. We reserve the right to change or update this statement from time to time. Please check our online and mobile resources periodically for such changes, since all information collected is subject to the statement in place at that time. Contacting Us If you have questions about our privacy statement or privacy practices, please contact us at: Post It Media (Combat Creators LLC) 805 Stratford Dr Apt 9 State College, PA 16801 Email: [email protected]