Tracker and cookie policy

The getnobullshit.com website (“the Site”) uses a very limited number of technologies while you browse. This policy informs you of these technologies, their purposes, their lifetime and your means of control.

The principle adopted for this Site is frugality: we place no advertising cookie, no social-network cookie and no cross-site tracking. Our audience measurement works without cookies and without a consent banner, under the conditions described below.

Glossary — Cookie: a text file stored on your device by your browser. Tracker: any technology that reads or writes information on your device (cookies, pixels, local identifiers, fingerprinting). Tag (pixel): an invisible graphic element used to measure audience or track actions. For convenience, all of these are referred to below as “trackers”.

A. What we do. To understand how our Site is visited, we use Matomo, self-hosted on our own servers. Our installation is configured so that:

• No cookie is placed for audience measurement (disableCookies);
• the collected data stays with us: not shared with third parties or any advertising service;
• no cross-referencing with other processing;
• no cross-site tracking: measurement is limited to this Site;
• your IP address is pseudonymized (truncated);
• the “Do Not Track” signal is respected (setDoNotTrack).

B. Why there is no banner. Placing trackers is in principle subject to consent (Article 82 of the Data Protection Act, ePrivacy directive). The CNIL provides an exemption for audience measurement where the conditions of its September 17, 2020 guidelines and recommendation are met (purpose limited to audience measurement for the publisher only, no cross-referencing or transmission, no cross-site tracking, pseudonymization, ability to object). Our measurement being cookieless and meeting these conditions, no banner or consent is required. This information is nonetheless provided as it remains mandatory.

Note: even with an exemption, tracker lifetime must not exceed 13 months and data must not be kept beyond 25 months. As our configuration is cookieless, audience-measurement data retention is set to 25 months.

C. How to object. By enabling your browser’s “Do Not Track” option (automatically respected), or by configuring your browser to block the Site’s scripts.

Some trackers are essential to the proper functioning of the Site or to providing a service you requested. Under Article 82(2), they are exempt from consent:

• Session cookie — nbtl_session — keeps your session while you are logged in to your account; HttpOnly and Secure cookie; duration: session (deleted on logout).

This is the only cookie the Site places. The cart is stored in your browser’s local storage (localStorage, key nbt_cart_v1), not via a cookie: it stays on your device and is only sent when you validate the order. The language (FR/EN) is determined by the page URL — no language cookie is used. This cookie relies on contract performance / the requested service (art. 6.1.b GDPR) or, for security, on our legitimate interest (art. 6.1.f).

A. Audience measurement. See section II.C: measurement respects the “Do Not Track” signal. No management panel is needed since no audience-measurement cookie is placed.

B. Via your browser. You can accept, refuse or delete trackers, and enable “Do Not Track”: Chrome → Settings → Privacy and security; Firefox → Privacy & Security; Safari → Preferences → Privacy; Edge → Cookies and site permissions. Warning: blocking strictly necessary trackers may affect the Site (login, cart, payment).

A. Secure payment (Stripe). Payment is processed by Stripe (Stripe Payments Europe, Ltd.). During payment, you are redirected to a Stripe-hosted page (checkout.stripe.com): any trackers placed there are placed by Stripe, on its own domain, and fall under Stripe’s policy. They are strictly necessary to secure the transaction and exempt from consent (art. 82(2)). More: stripe.com/privacy and Stripe’s cookie policy.

B. Other third-party services. The Site embeds no advertising cookie, no tracking social widget, and no third-party tracking tool beyond those mentioned. To date, no other third-party tracker-setting service is integrated into the Site.

Information collected via audience measurement may constitute personal data. To learn about all processing operations, their purposes, legal bases, periods and your rights, see our privacy policy.

This policy may be updated to reflect legal or technical changes. The update date is shown at the top of the document. For any question about trackers: FGRibreau SARL, 3 rue de l’Aubépine, 85110 Chantonnay, getnobullshit.com, fg@getnobullshit.com.