Privacy policy
Collected data, purposes, AI processing, cookies and user rights.
Collected data
The site collects email addresses you provide, kit requests, commercial intent and journey events. Three measurements coexist: an internal counter, anonymous and aggregated, which runs without consent under the audience measurement exemption; Google Analytics, which measures audience and only loads after you accept; and the Meta Pixel, which measures our advertising campaigns and only loads after a separate acceptance.
Purposes and legal bases
Delivering purchased kits and fulfilling orders: performance of the contract. Sending the requested email sequences: consent. Measuring demand and improving the catalog through the internal counter: legitimate interest, with no cookie and no visitor identifier. Measuring audience through Google Analytics: consent, revocable at any time. Measuring our advertising campaigns and showing you relevant ads through the Meta Pixel: consent, separate from the previous one and revocable at any time. The same consent covers advanced matching: a fingerprint (SHA-256 hash, computed in your browser) of the email address you type into our forms is sent to Meta to match your conversions with your account.
Retention periods
Email addresses and kit requests: three years from the last contact. Consent records: three years. Your consent choice in the browser: six months, after which we ask again. Internal counter events: a volatile buffer of five hundred entries, with no durable storage. Google Analytics data: fourteen months. Data sent to the Meta Pixel: kept by Meta Platforms under its data policy, available at facebook.com/privacy/policy.
AI processing
The messages you write to Koa, the site assistant, are sent to our artificial intelligence subprocessors to produce a kit recommendation and a personalised preview: DeepSeek and OpenAI, through the Vercel AI Gateway. This processing involves transferring those messages outside the European Union. Your email address is not sent to these subprocessors. Please avoid writing confidential information, or personal data about third parties, in that conversation.
Transfers outside the European Union
If you accept audience measurement, the corresponding data is processed by Google LLC in the United States. If you accept advertising, it is processed by Meta Platforms Ireland Limited, which may transfer it to Meta Platforms, Inc. in the United States. Both transfers rely on the EU–US Data Privacy Framework adequacy decision, under which Google LLC and Meta Platforms, Inc. are certified. The transfer related to AI processing is described in the previous section.
Cookies and audience measurement
Nothing loads before you choose: until you click, no Google or Meta script is present on the page, and you can accept one without the other. Your choice lasts six months, and you can change it at any time through the “Manage cookies” link in the footer. Withdrawing it erases the traces Google and Meta stored on this site (_ga, _ga_*, _fbp, _fbc); the fr cookie, set by Meta on its own domain, cannot be erased from this site.
Trackers in use
Audience measurement — the _ga and _ga_* cookies issued by Google Analytics, which distinguish visitors through an identifier and keep session state, thirteen months, stored only after you accept. Advertising — the _fbp and _fbc cookies issued by the Meta Pixel, which identify the browser to measure our campaigns and link a visit to the ad click that preceded it, three months, stored only after you accept; a fingerprint of the email address you type (SHA-256), sent to Meta with the events, never the address itself; the fr cookie, set by Meta on its own domain to deliver and measure its ads, three months. Functional — your consent choice itself and the pricing test bucket, kept in your browser, never sent to a third party, six months; your payment session identifier, kept for the lifetime of the thank-you page tab.
Your rights
You have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw your consent at any time without affecting what was done before. Exercise them at contact@webpulser.fr. If your request is not answered satisfactorily, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, or at cnil.fr. For Meta ads, you can also adjust your ad preferences from your Facebook or Instagram account.