Cookies, honestly.

A cookie is a small file your browser stores when you visit a site; the same logic applies to other browser-side storage such as localStorage. Under French law, Article 82 of the Loi Informatique et Libertés (which transposes Article 5(3) of the ePrivacy Directive), supervised by the CNIL, makes these technologies subject to prior consent — except where they are strictly necessary to deliver a service you have expressly requested. klair keeps to that single exempt category, together with an anonymous, cookieless audience measurement (section 03). No consent is therefore required, and no banner is shown to you.

These items cannot be switched off from the site: they enable functions you asked for (sign-in, payment, routing). You can nonetheless delete them from your browser (section 05).

We measure site audience and performance anonymously and without cookies: no identifier is stored on or read from your device, the measurement is first-party, with no cross-site matching or advertising profiling, and the aggregate data is not kept beyond twenty-five (25) months. This measurement meets the CNIL's exemption criteria; it requires neither consent nor a banner.

klair runs no advertising network, sets no advertising cookies, embeds no marketing, conversion, or social-network pixels, and shares no device or browser identifier for tracking purposes. No consent-requiring tracker is set on the application; that is why no banner is needed. Should a demonstration page (under /dev) ever embed a consent-requiring tracker — for example a marketing pixel — a consent tool, where refusing is as easy as accepting, would be deployed on that page only, without affecting the rest of the service, and this policy would be updated beforehand.

You can view, block, or delete cookies at any time from your browser settings: in Chrome and Edge, Settings → Privacy and security → Cookies; in Safari, Settings → Privacy; in Firefox, Settings → Privacy & Security → Cookies and Site Data. Signing out of the portal deletes the authentication cookie. Blocking strictly-necessary cookies will, however, stop sign-in and payment from working.

Where a strictly-necessary cookie processes personal data, the legal basis is our legitimate interest in operating the service securely and functionally (Article 6(1)(f) GDPR). The detailed purposes, categories of recipients, retention periods, and international transfers are described in our privacy policy.

If we change this policy — for example by adding a cookie or a category — we will update the effective date shown at the top of the page. The possible introduction of a consent-requiring tracker would be accompanied, before any such tracker is set, by the corresponding consent mechanism.

Questions about this policy: privacy@klair.dev. Data-protection questions: our Data Protection Officer (DPO) at dpo@klair.dev. If you believe your data has been handled improperly, you may lodge a complaint with the CNIL — Commission nationale de l'informatique et des libertés (cnil.fr), or with the data-protection authority of the member state where you live or work.

The French-language version of this policy is authoritative. The English and Spanish versions are provided as a courtesy translation; in the event of any divergence of interpretation, the French version prevails.