Cookie Notice

Effective date: September 9, 2026.

Strictly necessary (no consent required)

The following are exempt from consent under TDDDG Section 25 (formerly TTDSG Section 25) because they are strictly necessary for the website to function:

• Consent preference (__biocompile_consent in localStorage): records your decision for each purpose separately, the version of the wording you were shown and the date you decided. It holds no identifier and nothing about you. The wording version and the date are there so that what you agreed to can be shown rather than asserted. This record lives in your browser and nowhere else: we do not hold a copy of it, and clearing your browser storage erases it. A decision expires after six months, after which the banner asks again; a purpose you were never shown is recorded as undecided rather than as agreement, so introducing a new one asks you rather than assuming you. It persists until you clear it or use the "Cookie settings" link in the footer.
• Cloudflare Turnstile: sets a short-lived token when you submit the contact form or the pilot form, used solely to verify you are human (Art. 6(1)(f) GDPR, legitimate interest in preventing spam).
• Signup step answer (__biocompile_handoff in sessionStorage): written only once you start a signup, and only after you have answered the step that asks for your email address. It records that you answered, so the step is not put in front of you a second time in the same visit, and it carries the single-use token that hands your address to the signup page, which is dropped from it as soon as that token is spent. It holds no other personal data, and never the address itself. Your browser discards it when you close the tab. It is not used to count how often you have been shown anything, and it is not read for any other purpose.

Anonymous mode (before you choose)

Before you make a choice on the consent banner, we run PostHog in a fully anonymous configuration:

• No cookies or localStorage entries are set by analytics.
• No device identifier is created or persisted. Nothing links one page you open to the next, so each page you open is measured on its own.
• We instruct PostHog to discard your IP address.
• We record aggregate measurement of how the page is used, each event carrying the address of the page: a page-view and a page-exit event, which between them give how long the page was open, how far down it you scrolled, and the referring domain if there is one; which part of the page was in front of you and for how long; clicks on page elements; page-speed measurements (LCP, INP, CLS, FCP); which of our calls to action came into view and which you selected; how far down a page you read, recorded at a quarter, a half, three quarters and nine tenths of the way down; whether this banner was shown and what you chose on it; and a redirect event when you leave for our application.
• If the link you followed carried an advertising click identifier, it is replaced with the word <masked> before the page address is sent. That holds in every mode and whatever you chose on the banner.
• Click measurement records which element you selected and the text printed on it, which on this site is our own published wording. It never records what you type into a field.
• Your screen and window dimensions, your time zone, your device type and your browser's full user agent string are refused before anything is sent. Those are the values a browser fingerprint is ordinarily built from, no measurement here needs any of them, and refusing them is what makes the sentence above about reading nothing from your device a description rather than an opinion. Clicks that hit nothing, rapid repeated clicks in one spot and the coordinates of clicks and scrolling are switched off in this mode for the same reason: a coordinate means nothing without the window it was measured in.
• If you start a signup, the step that asks for your email address is measured the same way: that it opened, that you selected the field, whether you submitted, closed or left it, how long it was open, and, on submit, the domain part of the address. The address itself is never sent to our analytics.
• Session recording, surveys, and PostHog's own feature flags are all disabled on this site, and element attributes are masked. We do sometimes show one of two versions of a headline and record which one you saw, so we can tell which reads better; that choice is made by our own code on this page and is not sent anywhere by itself.
• If you play or pause the demo video in the page header, we record that you did and roughly how far into it you were.
• If you submit the contact or pilot form, we record that a submission was made, which of the two forms it was, and whether it succeeded. What you wrote in it is never sent to analytics.

Because nothing is stored on or read from your device, this mode falls outside TDDDG Section 25 consent requirements. It is limited to measuring how our own pages perform and are used, which is the audience-measurement purpose recognised by the CNIL, and it is based on our legitimate interest in measuring aggregate site usage (Art. 6(1)(f) GDPR).

Full mode (after you accept)

If you agree to site analytics, PostHog switches to full mode:

• Everything the anonymous mode records is still recorded. What mainly changes is that it can be joined up.
• The values listed above as refused are no longer refused: your screen and window dimensions, your time zone, your device type and your browser's user agent are sent, and clicks that hit nothing, rapid repeated clicks and click and scroll coordinates are recorded again.
• A visit identifier is stored in localStorage and a cookie, so the pages you open are measured as one visit rather than as unrelated arrivals.
• Links from this site to our application carry that visit identifier and the session identifier as web address parameters (ph_did and ph_sid), so the journey through this site and the one through the application are measured as one. Neither value contains your name or your email address, and neither is added in anonymous mode.

This is based on your consent (Art. 6(1)(a) GDPR).

After you decline

No analytics requests are made and any in-memory data from anonymous mode is discarded.

Choosing per purpose

The banner carries three controls of equal weight: accept everything, refuse everything, or choose per purpose. The per-purpose controls start switched off and stay off until you move them, because a box that is already ticked is not a decision. Closing the banner without choosing is not agreement either: nothing is recorded, nothing changes, and you will be asked again.

Do Not Track and Global Privacy Control

We honour both the Do-Not-Track (DNT) browser signal and the Global Privacy Control (GPC) signal. When either is detected, no analytics run in any mode. A browser sending Global Privacy Control is not shown the consent banner at all, because the signal is already an answer. We act on the signal for the browser it arrives from; it does not carry across to your other devices.

Withdrawing or changing your choice

Click the "Cookie settings" link in the footer at any time to re-open the banner and change your choice, purpose by purpose. Your previous decision is cleared, anything stored under it is removed, and you can decide again. Withdrawing takes the same number of steps as agreeing, and stops anything further; it does not undo what was already done.

Third parties

PostHog is hosted exclusively in the EU (Frankfurt, Germany). Cloudflare provides CDN and Turnstile from EU data centers. No data is shared with third-party advertisers or brokers. See our Privacy Policy for the full processor list.