Cookie Policy

A cookie is a small file placed and read when browsing a site, an application or a service. The term "cookie" here covers all trackers (cookies, local storage technologies, identifiers) that may be used.

Cookies and trackers that require your consent are placed only after your prior, free, informed and unambiguous consent, expressed via the consent banner. Refusing is as easy as accepting. No consent-requiring cookie or tracker is placed before your choice. You can change or withdraw your consent at any time via the "Manage cookies" link in the footer. Two cases are exempt from consent and therefore do not depend on that banner: strictly necessary cookies, and the cookieless audience measurement described below.

Cookies strictly necessary for the operation and security of the Service are exempt from consent under Article 82 of the Data Protection Act.

Strictly necessary cookies (no consent)

Essential to the operation and security of the Service. They cannot be disabled.

• Session / authentication cookie: maintains the logged-in user's session.
• Anti-CSRF token: protection against request forgery.
• Language preference: remembers the chosen language (fr / en).
• Cookie consent choice: stores your decision regarding trackers.
• Assistant conversation thread: session storage keeping your ongoing conversation with the assistant, in that browser tab only, so it does not vanish if you reload the page. Cleared when the tab closes, never sent anywhere to be retained.

Cookieless audience measurement (exempt from consent)

The Service measures its traffic with a solution hosted on our own infrastructure, within the European Union. It places no cookie and keeps no persistent identifier on your device. What is recorded: the page viewed and, where applicable, the campaign parameters in its address; the page or site you came from; the technical characteristics of the browser (language, screen size, browser, operating system, device type); the country, derived from your IP address on receipt; the page loading and rendering timings, from which the time spent on the page is derived. This data is used solely for site traffic statistics: it is not cross-referenced with other processing, not passed to any third party, and not used for any advertising purpose.

This measurement neither writes nor reads anything on your device, and the consent banner does not govern it. You can prevent it by blocking measurement scripts in your browser settings or with a blocking extension.

Third-party audience measurement cookies (subject to consent)

Cookies that a third-party audience measurement solution would place. No tool in this category is active to date. Should SealTrust deploy one, these cookies would be placed only with your consent, for a purpose limited to improving the Service and for no advertising purpose.

No advertising cookies or cross-site tracking

SealTrust uses no advertising cookies, no cross-site tracking, and shares no browsing data for advertising targeting purposes.

• Cookies have a maximum lifetime of 13 months from placement.
• The information collected via these cookies is kept for a maximum of 25 months.
• The data from the cookieless audience measurement described above is deleted after 25 months, by an automatic daily purge.
• Your consent choice is kept for 6 months, after which the banner is presented to you again.

These periods comply with the CNIL's recommendations.

At any time you can:

• reopen the management panel via the "Manage cookies" link in the footer;
• configure your browser to accept or refuse cookies, or to be warned of their placement. Refusing strictly necessary cookies may affect the proper operation of the Service.

Some technical providers (for example the hCaptcha anti-bot protection on contact forms) may place cookies strictly necessary for the security and availability of the Service. The list of sub-processors appears in the Privacy Policy.

For any question: contact@sealtrust.io. You may also lodge a complaint with the CNIL (www.cnil.fr).