Cookies policy
- In force since
- Audience measurement
- with consent
- Advertising
- none
01Cookies and similar technologies
A cookie is a small file your browser stores when you visit a site; the same logic applies to other browser-side storage such as localStorage. Under French law, Article 82 of the Loi Informatique et Libertés (which transposes Article 5(3) of the ePrivacy Directive), supervised by the CNIL, makes these technologies subject to prior consent — except where they are strictly necessary to deliver a service you have expressly requested. Without consent, klair sets only strictly-necessary trackers (section 02); audience measurement through Google Analytics (section 03) is turned on only with your agreement.
02Strictly-necessary trackers
| Name / family | Purpose | Lifetime |
|---|---|---|
| sb-<ref>-auth-token (and its .0, .1 … fragments), sb-<ref>-auth-token-code-verifier | Purposeklair.dev portal session: keeps you signed in; verification of a sign-in in progress with Google or Microsoft. | LifetimeSession, renewed while you stay signed in; deleted on sign-out. |
| klair_sign_in_provider | PurposeRemembers the sign-in method chosen (Google, Microsoft or code) during sign-in. | LifetimeDuration of the sign-in. |
| agora_session, agora_csrf | PurposeAgora session (agora.klair.dev) and protection against request forgery. | Lifetime12 hours. |
| agora_signin, agora_signin_idp | PurposeSecure flow for signing in to Agora with your klair account. | Lifetime10 minutes; 12 hours. |
| id.klair.dev sign-in service cookies | PurposeSingle sign-on across klair.dev, Agora and the applications. | LifetimeSession lifetime. |
| klair_locale | PurposeThe display language you chose, set on klair-ai.fr and on klair.dev (one cookie per site), shared with Agora and the applications. | Lifetime1 year. |
| klair_theme | PurposeThe display theme you chose, shared by klair.dev, Agora and the applications. | Lifetime1 year. |
| klair_visitor | PurposeHermès visitor identifier: lets you find your conversation again on klair-ai.fr and on klair.dev. | Lifetime90 days. |
| klair-consent (local storage) | PurposeRemembers your choice in the cookie banner, on each of klair-ai.fr and klair.dev. | Lifetime6 months, after which you are asked for your choice again. |
| klair:intake:*, klair.osNotifications and read counters (local storage) | PurposeIn-progress draft, notification preferences and unread messages; never sent to a third party. | LifetimeDraft up to 7 days; preferences until storage is cleared. |
These trackers are first-party and serve no advertising tracking. They cannot be switched off from the site, as they enable functions you asked for; you can nonetheless delete them from your browser (section 05). Payment takes place on Stripe's secure page, which sets its own fraud-prevention cookies on its domain, under its own policy.
03Audience measurement
With your consent: Google Analytics. If you click "Accept all" in the banner, Google Analytics (Google Ireland Ltd) sets the cookies _ga and ga<identifier>, for at most 13 months, to count visits and understand how the site is used. The data is kept for at most 14 months and may be transferred to the United States, under the conditions described in our privacy policy. Google's advertising features are turned off in all circumstances. Until you have accepted, no Google Analytics cookie is set or read.
Without cookies: performance measurement. We measure page-load speed (Vercel Speed Insights) anonymously, without cookies or any identifier stored on your device, and without cross-site matching. This measurement meets the CNIL's exemption criteria.
04No advertising, no tracking
klair runs no advertising network, sets no advertising cookies, embeds no marketing, conversion or social-network pixels, and shares no device or browser identifier for tracking purposes. Agora, the portal and the applications set no consent-requiring tracker.
05Changing your choice and managing cookies
You can change your choice at any time from the "Cookies" link in the site footer, which reopens the banner. You can also view, block or delete cookies from your browser settings: in Chrome and Edge, Settings → Privacy and security → Cookies; in Safari, Settings → Privacy; in Firefox, Settings → Privacy & Security → Cookies and Site Data. Signing out deletes the session cookies. Blocking strictly-necessary cookies will, however, stop sign-in from working.
06Personal data
Where a strictly-necessary tracker processes personal data, the legal basis is our legitimate interest in operating the service securely and functionally (Article 6(1)(f) GDPR); for Google Analytics, it is your consent (Article 6(1)(a)). The detailed purposes, recipients, retention periods and international transfers are described in our privacy policy.
07Changes to this policy
If we change this policy — for example by adding a cookie or a category — we will update the effective date shown at the top of the page. Any new consent-requiring tracker will be set only after you agree.
08Contact and complaints
Your questions about this policy and your data: privacy@klair.dev. If you believe your data has been handled improperly, you may lodge a complaint with the CNIL — Commission nationale de l'informatique et des libertés (cnil.fr), or with the data-protection authority of the member state where you live or work.
09Governing language
The French-language version of this policy is authoritative. The English and Spanish versions are provided as a courtesy translation; in the event of any divergence of interpretation, the French version prevails.