Cookie Policy
Contents
- 1. What is a cookie?
- 2. Legal framework
- 3. Strictly necessary cookies
- 4. Payment cookies
- 5. Analytics cookies
- 6. Demo booking cookies (Cal.com)
- 7. Recording your consent
- 8. Summary table
- 9. Managing your cookies
- 10. Withdrawal of consent
- 11. Retention periods
- 12. Third-party cookies and transfers
- 13. Updates
The purpose of this cookie policy is to inform you in a clear and transparent manner about the cookies and trackers used during your browsing on the website www.softcallia.com(the “Site”) and the application app.softcallia.com (the “Application”), in accordance with the recommendations of the CNIL and the GDPR.
1. What is a cookie?
A cookie is a small text file placed on your device (computer, tablet, phone) when you visit a website or use an application. Cookies allow the site to recognize your device and store certain information relating to your browsing (preferences, login session, visit statistics).
A distinction is made between:
- First-party cookies: placed by the site you are visiting (here, Softcallia).
- Third-party cookies: placed by external services integrated into the site (Stripe, Google Analytics).
Cookies do not contain viruses, cannot access the information stored on your device and cannot install software.
Technologies equivalent to cookies (localStorage, sessionStorage, IndexedDB) are also covered by this policy insofar as they allow the storage of information on your device.
2. Applicable legal framework
The use of cookies and trackers is governed by:
- Regulation (EU) 2016/679 (GDPR), in particular its Articles 6 and 7 relating to the legal bases of processing and consent.
- Directive 2002/58/EC (ePrivacy directive), transposed into French law by Article 82 of the Data Protection Act.
- The CNIL guidelines (deliberation No. 2020-091 of 17 September 2020) and the recommendation on cookies (deliberation No. 2020-092 of 17 September 2020).
In summary: cookies strictly necessary for the operation of the service explicitly requested by the user are exempt from consent. All other cookies (analytics, advertising, social networks) require your prior, free, informed, specific and unambiguous consent before any placement.
3. Strictly necessary cookies CONSENT EXEMPT
These cookies are essential to the operation of the Site and the Application. They allow you to browse and use the essential features (authentication, security, interface preferences). Without these cookies, the Service cannot function correctly.
In accordance with the CNIL guidelines (deliberation No. 2020-091), these cookies are exempt from consent because they are strictly necessary for the provision of the service explicitly requested by the user (Article 82 of the Data Protection Act).
3.1. Authentication cookies (Supabase)
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
sb-access-token | First-party | Supabase | JWT authentication token for the user session. Used to verify your identity on each request. | 1 hour (renewed automatically) |
sb-refresh-token | First-party | Supabase | Session refresh token. Used to extend your session without logging in again. | 7 days |
sb-auth-token | First-party (httpOnly) | Supabase | Secure server-side storage of the session (Server-Side Rendering). Inaccessible to JavaScript. | Duration of the session |
3.2. Local storage of the Application (equivalent technologies)
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
softcallia-ui | localStorage | Softcallia | Saving your interface preferences (sidebar state, theme, notifications). Managed by Zustand (persistent store). | Persistent (until manual deletion or logout) |
softcallia-auth | localStorage | Softcallia | Local cache of the user and company profile to avoid a reload on each navigation. Managed by Zustand. | Persistent (cleared on logout) |
4. Third-party payment cookies (Stripe) CONSENT EXEMPT
These cookies are placed by Stripe Inc., our secure payment provider (certified PCI DSS Level 1), when accessing the billing or subscription pages. They are essential to the security of transactions and to fraud prevention. In accordance with the position of the CNIL, cookies for combating payment fraud are treated as strictly necessary cookies.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
__stripe_mid | Third-party | Stripe Inc. | Fraud prevention. Anonymously identifies the device to detect suspicious behavior during payment. | 1 year |
__stripe_sid | Third-party | Stripe Inc. | Fraud prevention. Temporary payment session identifier to secure the ongoing transaction. | 30 minutes |
To learn more about Stripe's cookie policy: stripe.com/cookie-settings.
5. Analytics cookies (audience measurement)
These cookies allow us to measure the audience of the showcase Site (www.softcallia.com) in order to understand how visitors use the Site and to improve our content and usability.
These cookies are only placed after obtaining your explicit consent.No analytics cookie is placed before you have clicked “Accept” in the consent banner. These cookies are not used on the Application (app.softcallia.com).
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
_ga | Third-party | Google Analytics (Google LLC) | Distinguishes unique visitors to the Site by assigning a random identifier. Measures the number of visitors, the most viewed pages, traffic sources. | 13 months |
_ga_[ID] | Third-party | Google Analytics (Google LLC) | Stores a unique value for each page visited (Google Analytics 4). Used to reconstruct the browsing journey. | 13 months |
Your analytics data is anonymized: the IP address is truncated before any processing by Google Analytics. We do not enable remarketing features or demographic reports. No browsing data is cross-referenced with other Google services.
If you refuse analytics cookies, no browsing data will be collected for audience measurement purposes. The operation of the Site and the Application will not be affected in any way.
6. Demo booking cookies (Cal.com) CONSENT EXEMPT
When you click “Book 15 min” or an equivalent button on the Site, a scheduling window or widget provided by Cal.com Inc. opens to allow you to choose a demo slot with the Softcallia team. Cal.com then places its own functional cookies (remembering the selected slot, protection against booking spam, smooth calendar display).
These cookies are strictly necessary for the provision of the booking service explicitly requested by the user (the act of clicking on the button). As such, they are exempt from consent within the meaning of Article 82 of the Data Protection Act. Cal.com places no cookie until you have clicked the booking button. No advertising or marketing tracking is used.
Sub-processor: Cal.com Inc., Delaware, United States. Transfer governed by the EU-US Data Privacy Framework and SCCs. DPA available at cal.com/legal. Cal.com privacy policy: cal.com/privacy.
If you do not want Cal.com to place cookies, do not click the booking buttons. You can always reach us by email at contact@softcallia.com or via the contact form.
7. Recording your consent CONSENT EXEMPT
Your consent choice (accept or refuse non-essential cookies) must be remembered, otherwise the banner would be displayed on every visit. We do not use a cookie for this: your choice is recorded in your browser's local storage (localStorage). It is therefore never transmitted to our servers, and we keep no copy of it.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
sc-cookie-consent | First-party (localStorage, not a cookie) | Softcallia | Saves your consent choice regarding cookies (acceptance, refusal, settings by category). Is never sent to the server and contains no personal data, only your preferences. | 13 months (your choice is requested again beyond that) |
You can delete this record at any time by clearing your browser's local storage: the banner will reappear on your next visit.
8. Summary table of all cookies
| Cookie / Storage | Category | Provider | First / Third-party | Duration | Consent |
|---|---|---|---|---|---|
sb-access-token | Authentication | Supabase | First | 1h | Exempt |
sb-refresh-token | Authentication | Supabase | First | 7d | Exempt |
sb-auth-token | Authentication | Supabase | First | Session | Exempt |
sc-cookie-consent | Consent | Softcallia | First (localStorage) | 13 months | Exempt |
softcallia-ui | Preferences | Softcallia | First (localStorage) | Persistent | Exempt |
softcallia-auth | Session cache | Softcallia | First (localStorage) | Persistent | Exempt |
__stripe_mid | Payment anti-fraud | Stripe | Third | 1 year | Exempt |
__stripe_sid | Payment anti-fraud | Stripe | Third | 30 min | Exempt |
cal.com (functional cookies) | Demo booking | Cal.com Inc. | Third | Session / 13 months | Exempt (triggered by user click) |
_ga | Analytics | Google Analytics | Third | 13 months | Required |
_ga_[ID] | Analytics | Google Analytics | Third | 13 months | Required |
9. How to manage your cookies
9.1. Via the Softcallia consent banner
On your first visit to the Site, a consent banner lets you:
- Accept all: you consent to the placement of all cookies (necessary + analytics).
- Refuse all: only strictly necessary cookies are placed. No analytics cookie is enabled.
- Configure: you choose category by category which cookies you accept (necessary: always active; analytics: can be enabled/disabled).
You can change your preferences at any timeby clicking the “Manage cookies” link available in the footer of the Site. No account is required to manage your cookie preferences.
9.2. Via your browser settings
You can also configure your browser to accept, refuse or delete cookies. Here are the links to the help pages of the main browsers:
- Google Chrome:Menu > Settings > Privacy and security > Cookies and other site data — support.google.com/chrome/answer/95647
- Mozilla Firefox:Menu > Settings > Privacy and security > Enhanced Tracking Protection — support.mozilla.org
- Apple Safari:Preferences > Privacy > Manage website data — support.apple.com
- Microsoft Edge:Menu > Settings > Cookies and site permissions — support.microsoft.com
Warning: disabling all cookies via your browser (including strictly necessary cookies) may cause malfunctions of the Service, in particular the inability to authenticate, to keep your interface preferences or to make a secure payment. We recommend that you use the Softcallia consent banner rather than the browser settings for more precise control.
9.3. Google Analytics opt-out
If you wish to disable Google Analytics on all sites you visit(not just Softcallia), you can install Google's official browser add-on: Google Analytics Opt-out Browser Add-on.
10. Right to withdraw your consent
In accordance with Article 7.3 of the GDPR, you can withdraw your consent to the placement of cookies at any time. The withdrawal of consent does not compromise the lawfulness of the processing based on consent carried out before that withdrawal.
To withdraw your consent:
- Click the “Manage cookies” link in the footer of the Site.
- Disable the categories of cookies you no longer wish to allow.
- Confirm your choices. The cookies concerned will be deleted from your device and will no longer be placed during your next visits.
Withdrawing consent is as simple as granting it (a CNIL requirement).
11. Cookie retention periods
In accordance with the CNIL recommendations (deliberation No. 2020-092):
- Cookies have a maximum lifetime of 13 months after their first placement. Beyond this period, your consent is requested again.
- The information collected through cookies (audience data) is retained for a maximum period of 25 months.
For strictly necessary cookies whose duration is less than 13 months (see table above), the duration indicated in the table applies.
12. Third-party cookies and data transfers
The third-party cookies used on the Site and the Application are placed by:
- Stripe Inc.(United States) — anti-fraud cookies for payments. Transfer governed by the EU-US Data Privacy Framework and SCCs.
- Cal.com Inc.(Delaware, United States) — functional demo booking cookies, placed only after a user clicks a booking button. Transfer governed by the EU-US Data Privacy Framework and SCCs. DPA available at cal.com/legal.
- Google LLC(United States) — analytics cookies (only upon consent). Transfer governed by the EU-US Data Privacy Framework and SCCs.
For more information on international data transfers, see the dedicated section of our Privacy Policy.
13. Updates to this policy
This cookie policy may be modified at any time, in particular to comply with any regulatory or technological developments or in the event of the addition of new cookies. Any modification will be published on this page with an updated date.
In the event of a substantial modification (addition of a new category of cookies, new third-party provider), your consent will be requested again via the consent banner.
Contact
For any question relating to cookies or to the protection of your personal data:
- Email: dpo@softcallia.com
- Privacy Policy: View the policy
- CNIL (French supervisory authority): www.cnil.fr
Questions?
contact@softcallia.comSIRET 102 453 487 00013