1. What Is a Cookie?
A cookie is a file placed on the user's device when the user visits a website published by Arkane Cloud (hereinafter the "Site").
This policy applies to the following websites and applications, which together make up the Site:
- arkanecloud.com, corporate website (hereinafter the "Corporate Website");
- console.arkanecloud.com, customer application (hereinafter the "Customer Console");
- lp.arkanecloud.com, advertising landing pages (hereinafter the "Landing Pages");
- meeting.arkanecloud.com, sales meeting scheduling (hereinafter the "Meeting Scheduler").
Some cookies are strictly necessary for the operation of the Site; others require the user's prior consent in accordance with Article 82 of the French Data Protection Act (loi Informatique et Libertés) and the guidelines of the CNIL (the French Data Protection Authority).
Once transmitted, the cookie will be stored by the user's device for a certain period and sent back to the Site each time the user connects to it.
The cookie file enables its issuer to identify the device on which it is stored, for the period of validity or storage of the cookie.
For the purposes of this policy, the term "cookie" also refers to other trackers that read or write information on the user's device, such as local storage (localStorage), session storage (sessionStorage), IndexedDB databases and invisible pixels.
For the Site and the interfaces accessible from it, Arkane Cloud is the controller of the processing associated with the trackers that it places or has placed for its own purposes.
Where third-party companies place or read trackers on the Site for their own purposes, they act as controllers, where applicable jointly with Arkane Cloud. These companies are identified in the table set out in Article 2.
2. Cookies Used and Purposes
The Site uses cookies and other trackers placed either by Arkane Cloud or by third-party companies whose tools are integrated into the Site.
Some trackers are placed under an Arkane Cloud domain name, in particular from the technical subdomains eu1.arkanecloud.com and eu2.arkanecloud.com, while serving the purposes of a third-party company, in particular Google and PostHog. In such cases, the table below indicates the third-party company concerned. These trackers follow the choice expressed by the user on the website from which they are called.
Cookies are classified into the following categories:
- Strictly necessary cookies: they enable the technical operation of the Site, security, session management and the storage of cookie choices. They are not subject to consent where they are strictly necessary for the service requested by the user;
- Functional cookies: they make it possible to remember certain choices or settings of the user, where they are not strictly necessary for the operation of the Site. These trackers are subject to consent where they are not strictly necessary for the operation of the Site or for the provision of a service expressly requested by the user.
- Audience measurement cookies: they make it possible to measure traffic to and use of the Site;
- Marketing or advertising cookies: they make it possible to measure campaigns, personalize content or offer tailored communications or advertising.
Cookies subject to consent are only placed after the user has given their agreement.
Scope
Company using the cookie
Category
Purpose
Consent
Maximum duration
Site
Arkane Cloud
Strictly necessary
Authentication and session management, customer account security (protection against request forgery), technical operation of the site, storage of consent choices
Not required
1 year
Customer Console
Stripe
Strictly necessary
Fraud prevention and securing of bank card payments
Not required
400 days
Corporate Website, Customer Console
Google (reCAPTCHA)
Strictly necessary
Protection of forms against bots
Not required
180 days
Corporate Website, Customer Console
Cloudflare
Strictly necessary
Distinguishing between human traffic and automated traffic, anti-bot control
Not required
1 year
Customer Console
LinkedIn
Strictly necessary
Security, fraud detection, storage of LinkedIn's own consent choices
Not required
1 year
Customer Console
Google, HubSpot, PostHog
Strictly necessary
Technical verification of the browser's ability to accept cookies
Not required
1 day
Customer Console
Stripe
Functional
Operation of the payment window
Required
Session
Customer Console
LinkedIn
Functional
Load balancing between LinkedIn's servers
Required
1 day
Site
HubSpot
Audience measurement
Traffic statistics (visits, sessions, page views), interactions with call-to-action buttons and the chat module, linking of browsing history to a contact record upon submission of a form
Required
180 days
Site
Google (Google Analytics)
Audience measurement
Audience measurement, including measurement of successive visits made from the same browser, in order to assess the effectiveness of sales campaigns over negotiation cycles that may exceed one year; including by means of server-side measurement operated by Arkane Cloud (server side: hosting provider Stape.io, on the subdomain eu1.arkanecloud.com)
Required
2 years
Corporate Website, Customer Console, Landing Pages
Microsoft (Clarity)
Audience measurement
Analysis of browsing behavior: heatmaps and session recording
Required
1 year
Customer Console
PostHog
Audience measurement
Analysis of the use of the Customer Console, including session recording with masking of input fields
Required
1 year
Site
Arkane Cloud
Marketing / advertising
Sales attribution: storage of the landing page, the referring site and the campaign parameters, in order to associate them with a sign-up or a contact request
Required
Session
Site
HubSpot
Marketing / advertising
Transmission to HubSpot of browsing and device data by means of an invisible pixel
Required
Session
Corporate Website, Customer Console, Landing Pages
LinkedIn (Ads)
Marketing / advertising
Measurement of advertising conversions and creation of audience lists for remarketing purposes
Required
3 months
Site
Google (Google Ads)
Marketing / advertising
Measurement of advertising conversions and creation of audience lists for remarketing purposes (server side: hosting provider Stape.io, on the subdomain eu1.arkanecloud.com)
Required
3 months
Corporate Website, Customer Console, Landing Pages
Reddit
Marketing / advertising
Measurement of conversions and advertising targeting, including by matching a hashed email address
Required
3 months
Corporate Website, Customer Console, Landing Pages
Microsoft (Microsoft Advertising)
Marketing / advertising
Measurement of advertising effectiveness and recognition of the device on the websites of Microsoft's advertising network
Required
1 year
Some of the companies mentioned above are established or process data in the United States. Information relating to these transfers and the applicable safeguards is set out in the Privacy Policy.
3. Obtaining and Withdrawing Consent
On the first visit, a banner informs the user, clearly and comprehensively, of the identity of the controller(s), the purposes of each category of trackers, the consequences of refusing or accepting and the existence of the right to withdraw consent.
The banner allows the user to accept or refuse cookies subject to consent with the same degree of simplicity for both choices.
Continuing to browse, merely scrolling the page or taking no action does not constitute consent.
The user may change their choices at any time via the "Manage my cookies" module accessible from any page of the Site.
Each element making up the Site has its own consent collection mechanism: choices expressed on one of them do not necessarily apply to the others, so the user is invited to configure them on each of the websites they visit.
Consent is retained for a maximum of six (6) months before being requested again.
The choices and proof of consent are retained for the period necessary to demonstrate them.
4. Browser Settings
The user may also configure their browser to refuse all or some cookies; such settings may alter access to certain features of the site.
The configuration procedure depends on the browser used. Information is available on the help pages of the main browsers, in particular Chrome, Firefox, Safari, Edge and Opera.
Browser settings do not replace the consent collection mechanism made available on the Site where such mechanism is legally required.