Cookie Policy

01What is a cookie?

A cookie is a small file placed on your device (computer, smartphone, tablet) by the websites you visit. It allows the website to remember your actions and preferences.

This policy also applies to equivalent technologies used on our services, in particular local storage (localStorage) and session identifiers, which the CNIL groups under the generic term "trackers" (deliberation 2020-091). For ease of reading, we use the term "cookies" in the rest of this document to refer to all of these trackers.

02Scope

This policy covers the domains sylen.ai (marketing website) and app.sylen.ai (customer application).

03Who places trackers?

• Internal trackers (first-party): placed directly by SYLEN SAS for the operation and audience measurement of our services.
• Third-party trackers (third-party): placed by our providers (Supabase, Stripe, and where applicable Google) when you consent to their activation or when they are strictly necessary for the service.

04Categories of trackers used

4.1 Strictly necessary trackers (consent not required)

These trackers are essential to the operation of the website and the provision of the service. They cannot be disabled.

On sylen.ai (marketing website)

On app.sylen.ai (application)

4.2 Anonymous audience measurement on sylen.ai (cookieless, exempt from consent)

The sylen.ai website counts its visits with an internal counter, independent of Google Analytics. It does not place any cookie and writes nothing in your browser (neither cookie nor local storage): it therefore does not appear in any table on this page.

• What is counted: the page viewed, the domain name of the website you came from, the type of device, the country, the utm_source, utm_medium, utm_campaign, utm_content and utm_term parameters of the link if you arrive from an ad (never a click identifier such as gclid), and the number of clicks on a telephone number and on the sign-up buttons, with no information about the person.
• What is never kept: your IP address and your browser. They are used, in memory and for the duration of the request, to calculate an identifier valid for a single day, protected by a secret key changed every day. It cannot be recalculated without this key or linked from one day to the next; it is used solely to avoid counting the same visit twice in the same day.
• Periods: every hour, visits older than 24 hours are reduced to totals per day and per page, and the day's identifier is erased. The totals are kept for 25 months at most.
• Purpose and limits: audience measurement of the Sylen website only, on its own behalf; no cross-referencing with other data, no transmission to third parties for their own purposes, no tracking from one website to another. Under these conditions, this measurement is exempt from consent (CNIL, deliberation no. 2020-091 of September 17, 2020).
• Objecting: if your browser sends "Do Not Track" (DNT) or "Global Privacy Control", your visit is not counted. You can also write to contact@sylen.ai. As the data kept no longer makes it possible to identify a person, we cannot find or erase a particular visit.

This measurement is separate from Google Analytics 4, described below, which is only active if you accept the "Audience measurement" category.

4.3 Audience measurement trackers (consent required)

We use Google Analytics 4 (Google Ireland Limited), with anonymized IP address, to know which pages are viewed and how many visitors create an account or subscribe. These trackers are placed only if you accept the "Audience measurement" category in the banner. On app.sylen.ai, measurement follows the choice you made on sylen.ai; if you have made no choice, nothing is measured.

4.4 Marketing trackers (consent required)

To measure the effectiveness of our ads, we may use the Meta pixel (Facebook and Instagram), the TikTok pixel and the LinkedIn Insight Tag. They are placed only if you accept the "Marketing" category in the banner, and only for the platforms on which we run ads.

4.5 Partner and affiliate tracker (consent required)

Creators and referrers recommend Sylen with a personal link and a code. If one of them recommended Sylen to you, the sylen_aff cookie keeps their partner identifier for 90 days: it is used to pay the person who recommended Sylen to you and to apply your 10% first-year discount. It contains no other data. It is placed only if you accept the "Partners and affiliation" purpose in the banner, which is unchecked by default and can be refused separately from the others.

In practice:

• If you accept: the cookie is placed when you open a partner's link, then read again when you create your account and subscribe.
• If you refuse: no cookie is placed and your use of the website does not change. The code from the link you have just opened is only carried over in the address of the pages of the current visit, to prefill the "Partner code" field when you subscribe; it is not written anywhere on your device, and you can change or delete it.
• The code you enter when subscribing is form data that you send us, not a tracker: it works whether you have accepted or refused the cookie.
• No tracking by IP address or by browser or device fingerprint is used to attribute a subscription to a partner.
• Withdrawing your consent: "Manage cookies", in the footer, at any time. The cookie is then no longer read; you can also delete it in your browser settings, and it erases itself after 90 days.

Details of the processing: Privacy Policy, "Affiliate program" section.

4.6 Customer referral tracker (without going through the banner)

A Sylen customer can refer another with a personal link. If you open such a link, the sylen_ref cookie keeps the referral code for 90 days: it is used to attribute the referral and the "first month free" discount linked to that link when you create your account and subscribe. It contains no other data. Unlike the trackers above, it is placed as soon as the referral link is opened, without the banner being shown to you, and it is not subject to the choices made in the banner.

• It is placed only if you open a referral link yourself. It is not placed during a simple visit to the website.
• Objecting to it or erasing it: delete it in your browser settings (see section 07) or write to us at contact@sylen.ai. It erases itself after 90 days. You can also subscribe without it: you will then not receive the referral discount.

05Consent and management of your preferences

On your first visit to sylen.ai, a banner presents you with three options displayed at the same visual level in accordance with CNIL deliberation no. 2020-091:

• "Reject all" - only strictly necessary trackers are placed
• "Customize" - choice by category
• "Accept all" - all categories enabled (audience measurement, marketing, partners and affiliation)

In the customization menu, the toggles for the optional categories are unchecked by default. No non-essential tracker is placed until you have given your consent.

06Retention period

Your choice is stored locally on your device (localStorage) for a period of 13 months. At the end of this period, the banner is shown to you again to collect a new consent, in accordance with CNIL recommendations.

Data collected via optional trackers, when they are activated, will not be kept beyond 25 months.

The anonymous audience counter (section 4.2) erases the day's identifier after 24 hours and keeps only totals, for 25 months at most.

07Management via your browser

You can also configure your browser to block, limit or delete cookies and local storage:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Edge: Settings → Cookies and site permissions

08Your rights

With respect to the data collected via trackers, you have all the rights provided for by the GDPR: access, rectification, erasure, restriction, objection, portability. See our Privacy Policy for details.

For any complaint, you can contact:

• SYLEN SAS: contact@sylen.ai
• Or file a complaint with the CNIL: www.cnil.fr/fr/plaintes

09Changes

Any change in our use of trackers will result in an update of this policy, with the date above adjusted accordingly. Newly deployed trackers requiring your consent will only be activated after your consent has been collected again via the banner.