BROUILLON — à faire valider par un professionnel du droit avant publication (DRAFT — to be reviewed by a legal professional before publication.)
Version 1.0, effective [TO COMPLETE: publication date].
A cookie is a small file placed in your browser. This policy also covers other local storage technologies (localStorage, IndexedDB). It supplements the Privacy Policy.
1. What we use without consent: strictly necessary
These trackers are essential to the Service you request or to its security. The law exempts them from consent (article 82 of the French Data Protection Act, implementing the ePrivacy Directive). You can block them in your browser, but the Service will no longer work properly.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
sb-…-auth-token (and any .0, .1 chunks), sb-…-auth-token-code-verifier | NeverNo (Supabase) | Keep you signed in | Until you sign out, at most [TO COMPLETE: configured duration, 400 days by default with @supabase/ssr] |
nn_guest | NeverNo | Random signed trial identifier, set after the anti-bot check, to apply the limits of the trial without an account | 12 months |
NEXT_LOCALE | NeverNo | Remember the language you chose | [TO COMPLETE: configured duration; session cookie by default] |
nn_hl | NeverNo | Functional: remembers the last two headlines shown at the top of the home, Chat and Studio, so they are not repeated (for example c3.5). No personal data, no identifier | 30 days |
| NeverNo IndexedDB database | NeverNo | Store your history, characters and media, encrypted, only on your device (Zero-Log) | Until you erase it |
localStorage (interface preferences, including nn-stats) | NeverNo | Remember the interface state and your product statistics choice | Until erased |
| Cloudflare Turnstile | Cloudflare | Anti-bot check, run in a frame provided by Cloudflare; no cookie set on neverno.ai | For the duration of the check |
2. Audience measurement: no cookie, no third-party tracker
We set no audience measurement cookie and use no third-party tool (no Google Analytics, no advertising tag, no pixel). We count how the Service is used with our own tool, on our own servers:
- only event names from a closed list are accepted (page viewed, message sent, image created, feature used…), with a model's identifier or a yes/no option: never the content of what you write, nor a file name, a title or a search;
- a visitor is counted under a daily fingerprint, computed on our servers from the IP address, the browser and the site with a random key erased every night at midnight (UTC); nothing is stored in your browser for this, and a visit cannot be linked to the next day's;
- for a signed-in Account, events are linked to the Account (sign-ups, retention, conversion), through the session cookie already needed to sign in; no other cookie is read or set;
- raw events are erased after 90 days; only anonymous daily totals remain.
Your choice. The "Share anonymous statistics" switch (Settings › Data in this browser) is on by default. Off, or if your browser sends Global Privacy Control or Do Not Track, your visits are still counted with no fingerprint and no link to your Account, and what was linked to your Account is erased. Your choice is kept in this browser's localStorage (key nn-stats) and, when you are signed in, on your Account.
[TO VALIDATE: does this measurement meet the CNIL's consent exemption conditions (purpose limited to audience measurement, anonymized or aggregated data) for the anonymous part? The Account-linked part relies on legitimate interest with a simple objection; a lawyer must confirm that consent is not required for European users.]
[TO COMPLETE: if an advertising or conversion tracking tag is ever added (for example TikTok or Google Ads), it will require a consent banner and will be described here, with a separate choice.]
3. Your choice
- No banner is shown, because we use no tracker that requires consent.
- You can object to product statistics at any time with the switch described above, or by turning on Global Privacy Control / Do Not Track in your browser.
4. Browser settings
Every browser lets you block or delete cookies and site data: Chrome, Firefox, Safari and Edge offer this in their privacy settings. Warning: deleting the site data of neverno.ai also erases your local history, which we cannot recover. Export it first if you want to keep it.
5. Contact
For any question: [TO COMPLETE: privacy email address].