Cookie policy
Draft under review by our counsel. It may still change.
This policy lists the cookies and similar trackers (browser storage, pixels, tags) used on qobot.io, and how you control them. The tables at the end come straight from the site’s code, so they always show what the site can load and whether it is active. It exists in French and English; the French version prevails in case of difference.
What runs without asking you
- Strictly necessary storage, on qobot.io only: your cookie choice, and what the waitlist needs to work (the link that brought you here and your answers before you give your email, kept for the browser tab only). Nothing here is shared with anyone.
- Audience measurement with PostHog, hosted in the EU (Frankfurt). It sets no cookie and stores nothing in your browser: it uses a random ID that lives in memory for one page, goes through our own domain, and the IP address is discarded. It only counts pages and the events listed in our code, to tell us which pages work. Set up this way, it needs no consent under the CNIL’s rules on audience measurement. You can still turn it off in “Cookies (manage)”.
What needs your consent
Advertising and conversion measurement. These tags tell an ad platform (Google Ads, LinkedIn, Meta, Microsoft Advertising) that someone who clicked one of our ads signed up for the waitlist, so we spend our budget on the ads that work. They set cookies and send data to the platform, which may transfer it to the US.
- Nothing loads before you accept. For Google, we use Consent Mode v2 in its “basic” form: the Google tag isn’t even downloaded until you say yes.
- We only measure conversions. Ad personalization stays off on our side.
- If you accept and we turn on server-side conversions, our server also tells these platforms that you confirmed your signup, with your email hashed and the ad click ID. If you refuse, it never does.
An ad tag only goes live after it is listed in the table below. Today the table shows which ones are active.
Your choice
When at least one advertising tag is active, a banner asks for your choice on your first visit. “Refuse all” and “Accept all” are the same size and style, and “Continue without accepting” counts as a refusal. “Customize” lets you choose per category.
- We keep your choice for 6 months, then ask again. We also ask again when this policy changes version or when we add an advertising tag.
- You can change your mind at any time from “Cookies (manage)” in the footer of every page. If you withdraw consent, we delete the ad cookies set on qobot.io and reload the page without the tags. Cookies set by the platforms on their own domains are deleted from your browser settings.
- Your browser can also block or delete cookies; the site keeps working.
Proof of your choice
Your choice is stored in your browser (qobot.consent) and logged on our servers with a random consent ID, the date, the version of this policy and your choices. The log holds no IP address and nothing that names you. We keep it 13 months. The consent ID appears in “Cookies (manage)”, so you can quote it if you ask us about your choice.
Full list
The three tables below are generated from the site’s code.
Strictly necessary
| Name | Purpose | Duration |
|---|---|---|
qobot.consent | Your cookie choice (local storage) | 6 months |
qobot.attribution | The page or ad link that brought you here, sent only with a waitlist signup (session storage) | Until you close the tab |
| Waitlist chat | Your answers before you give your email (session storage) | Until you close the tab |
Audience measurement
| Vendor | Purpose | Cookies | Retention | Where the data goes | Status |
|---|---|---|---|---|---|
| PostHog (EU)PostHog Inc. (EU Cloud, Frankfurt)Privacy policy | Audience measurement, cookieless, through our own domain | None | No cookie: an ID in memory for one page. Events kept 25 months at most | Hosted in the EU (Frankfurt), IP discarded. PostHog Inc. is a US company: SCCs | Not active |
Advertising & conversion measurement
| Vendor | Purpose | Cookies | Retention | Where the data goes | Status |
|---|---|---|---|---|---|
| Google AdsGoogle Ireland LtdPrivacy policy | Ad conversion measurement | _gcl_au, IDE (doubleclick.net) | 90 days to 13 months | May be transferred to the US: EU-US Data Privacy Framework | Not active |
| LinkedIn Insight TagLinkedIn Ireland Unlimited CompanyPrivacy policy | Ad conversion measurement | li_fat_id, bcookie, lidc, UserMatchHistory | 1 day to 1 year | May be transferred to the US: EU-US Data Privacy Framework | Not active |
| Meta PixelMeta Platforms Ireland LtdPrivacy policy | Ad conversion measurement | _fbp, fr (facebook.com) | 90 days | May be transferred to the US: EU-US Data Privacy Framework | Not active |
| Microsoft Advertising (UET)Microsoft Ireland Operations LtdPrivacy policy | Ad conversion measurement | _uetsid, _uetvid, MUID (bing.com) | 1 day to 13 months | May be transferred to the US: EU-US Data Privacy Framework | Not active |