Cookie management
Pursuant to Article 82 of the French Data Protection Act (loi Informatique et Libertés) and to the CNIL recommendations of 17 September 2020.
Last updated: 25 May 2026 · Version française
1. What is a cookie?
A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit a website. It allows the site to recognise your browser on subsequent visits, to remember your preferences, or to temporarily store technical information.
2. Cookies used on scanrgpd.fr
The table below lists every cookie placed on this site. This list is exhaustive and kept up to date.
| Cookie name | Issuer | Purpose | Duration | Consent |
|---|---|---|---|---|
__session | scanrgpd.fr | Maintaining the user session during the checkout process | Session (deleted when the browser closes) | Not required (exempt technical cookie) |
__cf_bm | Cloudflare (Vercel processor) | Anti-bot and anti-DDoS protection of the site | 30 minutes | Not required (exempt technical cookie) |
__stripe_mid, __stripe_sid | Stripe (on the payment page only) | Payment security, fraud prevention | 1 year / 30 minutes | Not required (cookie strictly necessary for payment) |
3. Cookies we do NOT use
To be completely transparent, here is what is deliberately excluded:
| Cookie type | Status |
|---|---|
| Google Analytics | ❌ Not used |
| Google Tag Manager | ❌ Not used |
| Meta Pixel (Facebook / Instagram) | ❌ Not used |
| TikTok Pixel | ❌ Not used |
| LinkedIn Insight Tag | ❌ Not used |
| Hotjar / Microsoft Clarity / Smartlook (session recording) | ❌ Not used |
| Advertising cookies (DoubleClick, Criteo, etc.) | ❌ Not used |
To measure audience ethically and compliantly, the site uses Vercel Web Analytics and Umami Analytics(self-hosted on our own Vercel servers plus a Neon Postgres database in Frankfurt). Both tools are cookieless, aggregated, anonymised, with no cookie placed in the browser. This method is exempt from consent under the CNIL recommendation of 17 September 2020, point 17 on anonymised audience measurement.
Simple opt-out: if you do not wish to be included in our audience statistics, manually add the disable-analytics=1 cookie on scanrgpd.fr (via your browser's developer console). Both of our tools respect this directive and will then send no event.
4. Why no tracking cookies?
It is a philosophical and commercial choice consistent with the activity:
- ScanRGPD.fr sells a GDPR audit service. It would be incoherent to use the very tracking tools we criticise in our audits.
- No behavioural data is necessary for the business; anonymised audience statistics are amply sufficient.
- No advertising is served.
- No data is resold.
5. How to manage cookies in your browser
Although no tracking cookie is placed on this site, you may at any time configure your browser to block or delete all cookies, including technical ones. Note that this may impair certain features (client area, Stripe payment).
Official help links by browser:
6. Processors concerned
The only third-party cookies placed come from Cloudflare(natively integrated into the Vercel hosting for anti-bot and anti-DDoS protection) and from Stripe (on the payment page only, for transaction security). These cookies are strictly necessary for security and are exempt from consent under CNIL guidance.
Cloudflare and Stripe are certified under the EU-US Data Privacy Framework. More information in the Privacy Policy.
7. Contact
For any question concerning the cookies used on this site:
- Email: contact@scanrgpd.fr
8. Amendments
This policy may be amended to reflect changes in technical practices. Any change will be reflected in the update date at the top of this document.
9. Language
This page is published in French and in English. Where a difference of interpretation arises, the French version prevails.