Cookie policy

Essential: remembering your choice

When you make a choice, we store one entry named ml_consent in your browser’s local storage. It contains the categories you accepted, the date, the version of this policy and a random identifier: no name, no email, no tracking identifier, and it is never sent to a third party.

That random identifier is also recorded on our own servers, in the European Union, together with the date and the categories chosen. That record is how we can prove what you consented to if you ever dispute it, as the GDPR requires of us (article 7-1). It is kept for 3 years and is not linked to any other data.

This storage is strictly necessary to honour your decision, so it does not itself require consent. Clearing your browser storage erases it, and the banner will simply ask you again.

If you switch language, or decline our offer to switch, we store a second entry named ml_locale: two letters, en or fr, nothing else. It exists so we stop offering you a language you have already turned down. It is strictly necessary to honour that choice and therefore requires no consent; if you never touch the language selector, it is never written. When that offer is displayed we also note it in session storage, erased when you close the tab, so it is shown once and not on every page. Switching language also notes, in that same session storage and for the single page load that follows, how far down the page you were, so the other language opens at the same place: a number and the address of the destination page, nothing that identifies you.

Separately, on arrival we keep in your browser’s session storage (erased when you close the tab), the page you landed on, the referring site and any campaign parameters in the address. It holds no identifier and serves one purpose: telling us where a request came from, and only if you choose to send us a form.

If you decline marketing cookies, HubSpot records that refusal in two cookies (__hs_opt_out, __hs_do_not_track) so it is honoured on your next visit. They exist only to remember a “no”.

Audience measurement: no cookies, no consent required

Vercel, which hosts this site, counts page views and measures loading performance (Web Analytics, Speed Insights) without cookies, without any identifier stored in your browser, and without the terms you type into the site search: only anonymous, aggregated statistics, served from this domain. Under the CNIL guidelines, audience-measurement tools configured this way are exempt from the consent requirement (article 82 of the French Data Protection Act), which is why no banner blocks them. Our written analysis of this exemption is available on request from dpo@mindlapse.ai.

Google Analytics: only after your consent

If, and only if, you accept the statistics category, Google Analytics 4 is loaded and counts visits and pages viewed with cookies. Until then, nothing from Google reaches your browser: not the script, not even a cookieless ping. We configure it with shortened IP addresses, without Google Signals and without advertising personalisation, and its cookies are limited to 13 months and never renewed by a later visit, as the CNIL requires. The recipient is Google Ireland Ltd; data may be transferred to the United States under the EU-US Data Privacy Framework and Google’s standard contractual clauses.

Withdrawing your consent stops the measurement at once and deletes these cookies.

• · _ga: tells visitors apart (13 months at most)
• · _ga_<property>: keeps the session state (13 months at most)

Marketing: only after your consent

If, and only if, you accept the marketing category, our CRM provider HubSpot sets cookies to link your visits to our exchanges with you, and the embedded meeting scheduler and the chat window on the demo and contact pages become available. Until then, nothing from HubSpot is loaded at all: not the script, not the iframe, not the chat.

What you write in the chat goes to our sales team through HubSpot and is handled like a contact request (see the privacy policy). The chat sets three cookies of its own: one to recognise you between visits, two to remember whether you closed the window or dismissed its welcome message.

• · hubspotutk: visitor identity for forms (6 months)
• · __hstc: visit analytics (6 months)
• · __hssc: session analytics (30 minutes)
• · __hssrc: session marker (session)
• · messagesUtk: recognises you in the chat between visits (6 months)
• · hs-messages-is-open: whether you left the chat window open (30 minutes)
• · hs-messages-hide-welcome-message: you dismissed the chat welcome message (1 day)

Forms are not cookies

Sending a form is your own action, and we process it to answer you: that rests on pre-contractual measures, not on the cookie rules. Refusing marketing cookies therefore does not prevent you from contacting us, and it never degrades our answer. What refusing does change: we do not attach a tracking identifier to your submission.

Changing your choices

Your choice lasts 6 months, after which we ask again. You can change it at any time from the “Cookie settings” control in the footer of every page; withdrawing is one click, exactly like accepting. You can also clear the site’s storage from your browser settings.

Cookie settings Exercising your rights