Legal

If information published on this website is later determined to be incorrect, the company corrects the affected page, posts a correction notice on the announcements page identifying what changed and when, and marks superseded material as superseded rather than silently deleting it. Amended SEC filings control over originally filed versions; see the restatement notice on the financial results page for the June 23, 2026 Form 10-Q amendments.

No correction notices have been published. Published notices appear here and in the corrections RSS feed.

Controller. The data controller for this website is BNB Standard Corporation (formerly CEA Industries Inc.), doing business as BNB Standard (Nasdaq: BNC), 385 S. Pierce Ave, Ste C, Louisville, CO 80027, United States. Privacy requests reach the company through the investor contact page.

Purpose. This website publishes company and investor information. It needs no account, and BNB Standard does not use it to build a profile of any visitor. BNB Standard sets no advertising, marketing or cross-site tracking cookies, and does not sell or share visitor data. Processing rests on BNB Standard’s legitimate interest in operating and securing an investor-information website, and - for investor alerts - on your consent, given and withdrawable as described below.

Anonymous visitors. Visiting collects: server and edge request logs (IP address, user agent, page requested, timestamp), kept for security, abuse prevention and operations on the hosting provider’s standard schedule; browser security reports (Content-Security-Policy violation reports naming the page and the blocked resource, with the requester’s network address used transiently to rate-limit the endpoint); and anonymous performance measurements (a timing metric and the page path, with no visitor identifier). Cookies are functional only: staff sign-in cookies on the administrative console. The site sets no visitor-facing browser storage beyond these.

Processors. Vercel (United States) hosts the site and holds the request logs. Supabase (United States) hosts the company database - it stores published disclosure content, the investor-alert subscriber records described below, and staff account and audit records. Email for investor alerts is delivered by Resend, acting as BNB Standard’s processor. Market, blockchain and filing data are fetched server-side - those requests carry no visitor information. The complete active list - driving market sources: Twelve Data; background checks that must agree before a price is published but never supply it: an independent market data source; diagnostic cross-checks that never move a published number: GeckoTerminal, DexScreener; labeled reference data: BNB Chain public RPC; regulatory feeds: Nasdaq Trader, SEC EDGAR. The site’s Content-Security-Policy declares this origin and the TradingView widget below as the only permitted sources for browser connections. The database and email processors run in the United States; the site is served through a globally distributed content-delivery and edge network, so a request’s network metadata may be processed at an edge location near the visitor before reaching those United States services.

Embedded content. The analytics page embeds one TradingView chart widget, which loads from TradingView and may set its own cookies under TradingView’s privacy policy. It is the only third-party embed on the site. Links to SEC EDGAR, GlobeNewswire, bnbchain.org and research providers lead to sites governed by their own policies, which BNB Standard does not control.

Investor alerts. If you subscribe, BNB Standard stores your email address, the alert categories you chose, your verification status with its confirmation timestamps, the tokens that operate your unsubscribe and preference links, and the delivery record for each alert sent to you - including bounce and complaint events. That data is used to send those alerts and for nothing else: it is never sold, never used for advertising, and never combined with site analytics. Subscriptions are double opt-in - an address is added only after you confirm it from the mailbox itself, and a request to subscribe an already-confirmed address changes nothing and sends only a link to your own preference page. Every alert carries a one-click unsubscribe link and a link to change categories.

Alert retention. Retention is enforced by a scheduled database job: delivery records are deleted after 400 days; an unsubscribed or suppressed address’s subscriber record is deleted 90 days after the unsubscribe or suppression event; an address that never completes confirmation is deleted 30 days after signup. Addresses that bounce or report a message as spam are added to a suppression list, which is retained for as long as the suppression stands - it is the record that prevents BNB Standard from contacting you again.

Administrators and publishers. Staff accounts carry identity, role, authentication and session records, and every content approval and publication is written to an append-only audit log naming its actor.

Your rights and contact. You may ask what BNB Standard holds about you, ask for its deletion, or unsubscribe at any time - subscriber records are the personal data BNB Standard holds directly. Requests are handled through the investor contact page. This site is not directed at children, and BNB Standard does not knowingly collect children’s data.

Security. The site is served over HTTPS with HSTS, a Content-Security-Policy and standard hardening headers. Published content is served read-only to the public; database access is row-level-security enforced, and administrative access is authenticated and audited.