1. What Cookies and Similar Technologies Mean
Cookies are small text files stored on your browser or device. In this policy, the term also covers similar technologies such as local storage, session storage, pixels, tags, web beacons, scripts, SDK-based identifiers, and equivalent mechanisms used to recognize sessions or remember technical choices.
Qodefy may use these technologies across pages, forms, account-related areas, embedded modules, and future platform features in order to maintain continuity, improve reliability, and support expected user experience.
This policy covers technologies used for essential operations, security, fraud prevention, language and interface preferences, audience measurement, performance diagnostics, embedded third-party content, support workflows, and future digital features that may require equivalent storage or tracking mechanisms.
Our objective is to keep this information practical and transparent: what is used, why it may be used, which legal basis applies, how you can control your choices, and how Qodefy ensures non-essential technologies stay disabled until consent is collected when required.
2. Legal Framework and Consent Principles
Qodefy applies EU privacy principles, including CNIL guidance for France-facing services: non-essential cookies require prior consent, strictly necessary cookies may be exempt when they are technically required, refusal must be as easy as acceptance, and consent withdrawal must stay accessible at any time.
Where consent is the legal basis, cookies are activated only after a valid user choice through the cookie banner or preference center. We regularly review our implementation to keep legal and technical alignment.
3. Strictly Necessary and Security Cookies
Strictly necessary cookies support core service operation and security: session continuity, infrastructure routing, load balancing, form protection, bot mitigation, abuse prevention, consent-state memory, and core service delivery explicitly requested by the visitor.
Security technologies may include anti-fraud tokens, request validation identifiers, suspicious traffic detection, and defensive controls against malicious automation or service disruption. These mechanisms may be used without prior consent where legally permitted.
4. Functional, Preference, and Personalization Technologies
Qodefy may use functional technologies to remember language, interface preferences, accessibility options, display choices, and continuity settings that improve navigation comfort across sessions.
When personalization is not strictly necessary, it is deployed according to applicable consent requirements and may include content prioritization, remembered reading paths, and user-experience adjustments based on previous interactions.
5. Analytics, Audience Measurement, and Performance Monitoring
Analytics and performance technologies help us understand how visitors use the site, which pages are most useful, how navigation flows perform, and where technical issues or usability friction appear.
Depending on tool configuration, these technologies may require prior consent. Certain analytics configurations may be exempt only under strict legal conditions. Qodefy reviews analytics setups against those conditions before activation.
6. Embedded Content and Third-Party Services
Pages that include external media or integrations (for example video, maps, social widgets, hosted forms, documentation tools, calendars, chat, or scheduling modules) may trigger third-party cookies when loaded or interacted with.
When third-party content is enabled, the relevant provider may collect data under its own policy. Qodefy encourages visitors to review third-party cookie and privacy notices before interacting with embedded services.
7. Marketing, Social, and Campaign Measurement Technologies
If Qodefy activates campaign analytics, social advertising, conversion measurement, affiliate tracking, or audience segmentation tools, those technologies may record interaction signals such as referral source, campaign path, conversion events, and engagement metrics.
These technologies are generally non-essential and are activated only after prior consent where required by law. Refusing such cookies should not block access to the main website content.
8. Cookie Duration and Data Lifecycle
Qodefy may use both session cookies and persistent cookies. Session cookies usually expire at browser close, while persistent cookies remain until their configured lifetime ends or the user deletes them.
Retention periods depend on technical purpose, legal basis, and service design. We aim to limit duration to what is reasonably necessary and periodically review retention strategy.
9. User Controls and Preference Management
Visitors can manage cookie choices through the website consent interface, browser settings, device privacy options, and provider-specific opt-out tools when available. You may also delete previously stored cookies.
Disabling some cookies may reduce service quality, personalization, speed, or feature availability. However, rejecting non-essential cookies should remain straightforward and accessible.
10. Processors, International Transfers, and Policy Updates
Qodefy may rely on service providers for hosting, analytics, security, communication, and embedded modules. Depending on service architecture, related data may be processed within or outside the EEA under appropriate legal safeguards.
We may update this policy to reflect legal changes, infrastructure updates, new integrations, or product evolution. When material changes occur, the Last updated date and consent interface content are revised accordingly.