Cookie policy
Last updated: 2026-05-21
Our approach
Cenaclo draws a strict line between necessary technical cookies and non-essential cookies (analytics, functional, marketing). During this waitlist phase (F0), we set no non-essential cookies — which lets us operate without a consent banner, in line with the exemption provided by article 82 of the French Data Protection Act (strictly statistical audience measurement, see details below).
Phase F0 (this waitlist landing)
No advertising cookies, no fingerprinting, no third-party trackers
We do not use Google Analytics, Facebook Pixel, Hotjar, or any advertising or profiling tracker.
Audience measurement: PostHog Cloud EU in CNIL-exempt mode
To understand how you reach the site (without identifying you), we use PostHog Cloud EU in a strictly statistical configuration:
- Hosting: PostHog Cloud EU, Frankfurt datacenter (Germany)
- No cookie set on the client side: the
persistence: 'memory'configuration means the visit identifier is disposable, regenerated on every visit, and is never persisted in your browser (neither as a cookie nor in localStorage) - IP truncated server-side: PostHog’s “Discard client IPs” option is enabled — your IP address is never stored
- No session replay: we do not replay your browsing
- No identification: we do not create a user profile on the landing page (the
identify()function is never called in F0) - Restricted autocapture: only
clickandsubmitinteractions are captured (no keyboard input, no scroll)
This configuration complies with article 82 of the French Data Protection Act (exemption for strictly statistical audience measurement) and with CNIL deliberation 2020-091 on cookies. No consent banner is required in this context.
PostHog measures, in aggregate:
- Page views
- Traffic sources (referrer)
- Approximate country (derived server-side from the IP, never stored in clear)
- Device type (desktop / mobile)
Exempt technical cookies
| Cookie | Origin | Purpose | Duration |
|---|---|---|---|
cf_chl_* (Turnstile challenge) | Cloudflare Turnstile | Anti-spam verification when submitting the waitlist form | Cleared immediately after the challenge (a few seconds) |
These cookies are strictly necessary for the page to work and are exempt from consent (article 82 of the French Data Protection Act).
How to check
You can open your browser’s developer tools (F12 → Application / Storage / Cookies tab) and confirm that the list stays empty during normal browsing (a Turnstile cookie may appear briefly when submitting a form, then disappears).
Phase V1.5 (upcoming, when Cenaclo SaaS opens)
When Cenaclo opens its full SaaS service (authentication, communities, rooms), additional cookies will become necessary. At that point:
Essential technical cookies (no consent required)
| Cookie | Purpose | Duration |
|---|---|---|
cenaclo_session | Authentication session (user login) | Session or 30 days if “Remember me” is enabled |
cenaclo_csrf | CSRF protection (security) | Session |
Non-essential cookies (opt-in consent required via banner)
| Cookie | Origin | Purpose | Duration |
|---|---|---|---|
ph_<projectId>_posthog | PostHog Cloud EU (full V1.5 config) | Cross-session identification for funnels, feature flags, session replay (with mandatory PII masking maskAllInputs: true) | Persistent ~13 months |
cenaclo_prefs | Cenaclo | UI preferences: light/dark theme, default locale | Persistent ~12 months |
These cookies will be subject to an explicit opt-in consent banner (refusal possible in one click, on equal footing with acceptance). Refusing does not impair how the application works — only personalization and enriched analytics are disabled.
Your rights
At any time, you can:
- Refuse the storage of non-essential cookies via the banner (V1.5+)
- Withdraw a previously given consent via the “Manage my cookies” link in the footer (V1.5+)
- Manually delete cookies through your browser settings
For any question, contact privacy@cenaclo.com.
Changes
This policy may be updated. The last-updated date is shown at the top.