1. What is a cookie?
A cookie is a small file placed on your device when you visit a website. It allows the site to remember certain information between your visits, for example your login session or your display preference. StudiAI uses only the cookies strictly necessary for the operation of the service.
2. Legal framework
The placing and reading of cookies is governed by Article 82 of the French Data Protection Act (transposing Directive 2002/58/EC, the “ePrivacy” Directive) and by the guidelines of the CNIL (deliberation no. 2020-091 of 17 September 2020). Cookies strictly necessary for the provision of a service expressly requested by the user are exempt from prior consent. All the cookies used by StudiAI fall under this exemption.
3. Strictly necessary cookies
StudiAI places only the following technical cookies, which cannot be disabled without preventing the service from working:
- Session cookie: keeps you logged in (secure, HttpOnly, SameSite).
- Refresh cookie: renews your session without entering your password again (secure, HttpOnly, SameSite, rotated at each use).
- CSRF token: protects forms and sensitive actions against forged requests.
- Language preference: remembers the language of the interface.
- Theme preference: remembers the light or dark display.
These cookies contain no tracking data and are not shared with third parties. In accordance with CNIL deliberation no. 2020-091, they do not require your prior consent.
4. Cloudflare Turnstile (authentication pages)
The sign-up, login and password reset forms are protected by Cloudflare Turnstile, an anti-bot mechanism that replaces traditional CAPTCHAs. Turnstile is loaded only on those pages, is based on the legitimate interest of Perform Code SAS in securing the service (preventing automated account creation and brute-force attacks) and may place a short-lived technical cookie necessary for the verification. It is used neither for advertising nor for cross-site tracking. Cloudflare (United States) adheres to the Data Privacy Framework.
5. Cookie-free audience measurement
StudiAI uses Umami, self-hosted on our infrastructure, to measure audience and understand the aggregated use of the service (pages viewed, traffic sources, features used) in order to improve it.
Umami is configured without cookies or persistent identifiers: the IP address is truncated, no data is cross-referenced with your account and no cross-site tracking is carried out. This configuration corresponds to the consent exemption provided by the CNIL for audience measurement tools strictly limited to the production of anonymous statistics. You can nonetheless block the measurement script with a content-blocking extension, without affecting the essential functions of StudiAI.
6. No advertising cookies
StudiAI places no advertising cookie, shares no data with advertising networks or data brokers, and includes no social network pixel. Our business model relies exclusively on subscriptions and credit packs.
The banner displayed on your first visit is therefore purely INFORMATIVE: it does not condition the placing of any cookie, since no cookie subject to consent is used. Your answer is stored in the local storage of your browser (key “studiai-cookie-consent”) for the sole purpose of not showing you the banner again; you can delete it at any time by clearing the local storage of the site.
7. Managing your cookies
You can delete or block cookies at any time from the settings of your browser (Chrome, Firefox, Safari, Edge). Please note: deleting the session cookie will log you out, and blocking the essential cookies may make it impossible to log in to your account. The service will re-create the strictly necessary cookies at your next login.
8. Changes
This policy may change depending on the tools used or on the legal framework. If a tool subject to consent were to be introduced, it would only be activated after your explicit agreement through a dedicated banner. The date of the last update appears at the top of the page.
