Privacy policy
Collected data, purposes, AI processing, cookies and user rights.
Collected data
The site collects email addresses you provide, kit requests, commercial intent and journey events. Four measurements coexist: an internal counter, anonymous and aggregated, which runs without consent under the audience measurement exemption; Google Analytics, which measures audience, and Microsoft Clarity, which records how you move through the pages (clicks, scrolling, mouse movements) to produce session replays and heatmaps, both loaded only after you accept audience measurement; and the Meta Pixel, which measures our advertising campaigns and only loads after a separate acceptance. Microsoft Clarity never captures what you type into form fields, and masks the numbers and email addresses displayed.
Purposes and legal bases
Delivering purchased kits and fulfilling orders: performance of the contract. Sending the requested email sequences: consent. Measuring site audience and demand, including the source of visits (Meta ad, internal navigation, other), and improving the catalog through the internal counter: legitimate interest, with no cookie and no visitor identifier. Measuring audience through Google Analytics, and understanding how pages are used through Microsoft Clarity: consent, revocable at any time. Measuring our advertising campaigns and showing you relevant ads through the Meta Pixel: consent, separate from the previous one and revocable at any time. The same consent covers advanced matching: a fingerprint (SHA-256 hash, computed in your browser or on our servers) of the email address you type into our forms is sent to Meta to match your conversions with your account.
Retention periods
Email addresses and kit requests: three years from the last contact. Consent records: three years. Your consent choice in the browser: six months, after which we ask again. Internal counter: recent events stay in a volatile buffer of five hundred entries; daily totals, by page, language and source (Meta ad, internal navigation, other), and by purchase step, are kept for twenty-five months, with no IP address and no identifier. Google Analytics data: fourteen months. Microsoft Clarity data: thirty days for session recordings, up to nine months for a sample of them and for heatmaps. Data sent to the Meta Pixel: kept by Meta Platforms under its data policy, available at facebook.com/privacy/policy.
AI processing
The messages you write to Koa, the site assistant, are sent to our artificial intelligence subprocessors to produce a kit recommendation and a personalised preview: DeepSeek and OpenAI, through the Vercel AI Gateway. This processing involves transferring those messages outside the European Union. Your email address is not sent to these subprocessors. Please avoid writing confidential information, or personal data about third parties, in that conversation.
Transfers outside the European Union
If you accept audience measurement, the corresponding data is processed by Google LLC in the United States, and by Microsoft Ireland Operations Limited, which may transfer it to Microsoft Corporation in the United States. If you accept advertising, it is processed by Meta Platforms Ireland Limited, which may transfer it to Meta Platforms, Inc. in the United States. The transfers to Google LLC and Meta Platforms, Inc. rely on the EU–US Data Privacy Framework adequacy decision, under which both companies are certified. The transfer to Microsoft Corporation relies on standard contractual clauses. The transfer related to AI processing is described in the previous section.
Cookies and audience measurement
Nothing loads before you choose: until you click, no Google, Microsoft or Meta script is present on the page, and you can accept one without the other. Your choice lasts six months, and you can change it at any time through the “Manage cookies” link in the footer. Withdrawing it erases the traces Google, Microsoft and Meta stored on this site (_ga, _ga_*, _clck, _clsk, _fbp, _fbc); the cookies Meta and Microsoft set on their own domains (fr, MUID…) cannot be erased from this site.
Trackers in use
Audience measurement — the _ga and _ga_* cookies issued by Google Analytics, which distinguish visitors through an identifier and keep session state, thirteen months, stored only after you accept; the _clck (one year) and _clsk (one day) cookies issued by Microsoft Clarity, which link the pages viewed by the same visitor and within the same session, stored only after you accept; cookies set by Microsoft on its own domains (MUID, CLID, ANONCHK, MR, SM); your IP address, which Microsoft uses to locate the country of the visit. Microsoft Clarity does not load on the thank-you page that follows a purchase. Advertising — the _fbp and _fbc cookies issued by the Meta Pixel, which identify the browser to measure our campaigns and link a visit to the ad click that preceded it, three months, stored only after you accept; a fingerprint of the email address you type (SHA-256), sent to Meta with the events, never the address itself; on every consented page view, price view, checkout start, purchase or email capture, our servers also send Meta, under the same consent, the event, your IP address, your browser identifier (user-agent), the page address and the _fbp and _fbc cookies, to match the event with your account even when a blocker stops the Pixel; the fr cookie, set by Meta on its own domain to deliver and measure its ads, three months. Functional — your consent choice itself and the pricing test bucket, kept in your browser, never sent to a third party, six months; your payment session identifier, kept for the lifetime of the thank-you page tab.
Your rights
You have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw your consent at any time without affecting what was done before. Exercise them at contact@webpulser.fr. If your request is not answered satisfactorily, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, or at cnil.fr. For Meta ads, you can also adjust your ad preferences from your Facebook or Instagram account.