Legal

Cookies Policy

Last updated: July 12, 2025.

Legal document — pending counsel review

Compliant with the ePrivacy Directive, the GDPR (art. 5(3)) and the amended French Data Protection Act. To be validated by a DPO before production. The CMP banner will be activated when third-party marketing tags are integrated.

1. Principle

VALRY LABS uses cookies and similar technologies (localStorage, sessionStorage, fingerprinting) in strict compliance with the GDPR and the ePrivacy Directive. Under Article 5(3) of that directive, no non-essential cookie is set without prior consent, except for legal exceptions.

The site favours a privacy-by-default approach: Plausible (cookie-free, no cross-site tracking analytics) removes most traceability obligations. No personal data is monetised or transferred to third parties for advertising purposes.

2. Summary table

Name	Type	Purpose	Duration	Lawful basis
`session`	Strictly necessary	Maintains the user session (client area authentication, quote cart).	Session (deleted when the browser is closed)	Legitimate interest (art. 6.1.f)
`csrf`	Strictly necessary	Anti-CSRF token protecting forms (contact, newsletter) against cross-site request forgery.	Session	Legitimate interest (art. 6.1.f)
`consent`	Preferences	Stores the user's choices regarding non-essential cookies (analytics, videos).	6 months	Consent (art. 6.1.a)
`plausible`third-party	Audience measurement	Privacy-first analytics (Plausible) — pages visited, traffic source, device. No tracking cookie, no cross-site, anonymised IP.	No cookie (privacy-first)	Legitimate interest (art. 6.1.f)

3. Categories and purposes

Strictly necessary cookies (session, CSRF): essential to the operation of the site. No consent required, as their absence would make the service unusable.
Preferences (consent): remembers your choices so you are not prompted again.
Audience measurement (Plausible): aggregated, anonymised statistics, no profiling.

No advertising cookie, third-party marketing cookie, or social network cookie is set on the site at this time. Should any be added (LinkedIn Insight, Meta Pixel integration), a dedicated CMP banner will be deployed and this policy updated.

4. Managing your preferences

At any time, you can:

Refuse non-essential cookies via the banner shown on your first visit (re-openable from the «Manage my preferences» link in the footer).
Delete cookies already set via your browser settings:
- Chrome: Settings → Privacy → Cookies.
- Firefox: Settings → Privacy & Security → Cookies.
- Safari: Preferences → Privacy → Manage Website Data.
Enable Do Not Track (DNT) in your browser — Plausible honours this signal by default.

5. Retention periods

Cookies are retained only for the period strictly necessary for their purpose:

Session cookies: deleted when the browser is closed.
Consent cookie: 6 months.
Potential third-party cookies: per each third party’s policy, indicated in the CMP banner.

6. Transfers outside the EU

Plausible is self-hosted on a European infrastructure (OVHcloud, France). No cookie data is transferred outside the EU/EEA. Should future third parties require it, appropriate safeguards (standard contractual clauses) will be put in place and documented.

7. Your rights

Under the GDPR, you have rights of access, rectification, erasure, objection, restriction and portability over the data associated with cookies. To exercise them: privacy@valrylabs.com. See our privacy policy for details.

8. Changes

This policy may evolve (new services, regulatory changes). The date at the top of the document is updated. Material changes are flagged via a banner on your next visit.