Cookie policy
Full details of the cookies Pulzeo sets: what each one is for, how long it lasts, and how to manage your consent at any time. This policy forms an integral part of our privacy policy.
What is a cookie?
A cookie is a small text file that a website places on your device (computer, phone, tablet) while you browse. It lets the site remember certain things between visits: preferences, a session identifier, your consent choices.
This policy also covers similar technologies (local storage, session storage, web beacons, passive fingerprinting) when they serve equivalent purposes. The French data protection authority recommends treating them as cookies as far as consent is concerned.
Our approach
Pulzeo takes a minimal, consent-based approach to cookies:
- Only the cookies strictly necessary to run the service are set without asking for your consent (authentication, remembering your consent choices).
- Every other cookie (analytics, marketing, personalization) requires your explicit consent, which is collected through a banner on your first visit and can be changed at any time.
- No analytics or advertising cookie is set until you have accepted the corresponding category.
- Rejecting optional cookies is as easy as accepting them (a “Reject all” button directly on the banner).
- Your preferences are stored for 13 months, after which we ask for your consent again.
Essential cookies (set without consent)
These cookies are necessary for the service to work. Without them, you cannot sign in, and we cannot remember your consent choices. They are set under the consent exemption for strictly necessary cookies.
Pulzeo runs on two subdomains: pulzeo.com (the public site, pricing, legal pages) and app.pulzeo.com (the signed-in application). So that we only need to ask for your consent once and your session carries over between the two, these essential cookies are set on the root domain .pulzeo.com (prefixed with a dot to cover every subdomain). No cookie is set on any other domain.
| Name | Purpose | Set by | Lifetime |
|---|---|---|---|
sb-*-auth-token | User authentication session (signed JWT) | Pulzeo | 1 hour (refreshed automatically) |
sb-*-refresh-token | Automatic session renewal | Pulzeo | 7 days |
pulzeo_cookie_consent | Remembers your consent choices, category by category | Pulzeo (first-party) | 13 months |
NEXT_LOCALE | The language you chose for the site and the application (French or English) | Pulzeo (first-party) | 1 year |
PULZEO_ZONE | Displays prices in the correct currency: euros in the eurozone, dollars elsewhere. It contains only “eu” or “hors”, never your country. | Pulzeo (first-party) | 1 year |
pulzeo_attr_first and pulzeo_attr_last | Where your visit came from (campaign, search engine, referring site), so we know how you found us | Pulzeo (first-party) | The duration of your visit, or 90 days if you accept audience measurement |
Analytics cookies (consent required)
Analytics cookies let us understand how people use Pulzeo, so that we can improve the service.
The cookies below are only set once you have accepted the “Analytics” category. Without it, only anonymous, cookie-free measurements can be reported.
| Name | Purpose | Set by | Lifetime |
|---|---|---|---|
_ga | Distinguishes visitors (Google Analytics 4) | 13 months | |
_ga_* | Maintains the Google Analytics 4 session state | 13 months |
Measuring where sign-ups come from
Two cookies set by Pulzeo remember how you reached the site (search engine, social network, ad, a link in an article), so that we know which channels help people discover the service. They contain no identifier: no unique number, no fingerprint of your browser, nothing that could be used to recognize you elsewhere. They are set by our server as HttpOnly cookies (inaccessible to the page’s JavaScript) and are never shared with any third party.
Their lifetime depends on your choice: without consent, they expire when you close your browser and cover only the current visit; once you accept the “Analytics” category, they are kept for 90 days, which lets us attribute a sign-up to the visit that actually prompted it. If you withdraw your consent, they become session cookies again.
| Name | Purpose | Set by | Lifetime |
|---|---|---|---|
pulzeo_attr_first | The first known entry point (what led you to discover Pulzeo) | Pulzeo (first-party) | Session, or 90 days after consent |
pulzeo_attr_last | The last entry point before signing up | Pulzeo (first-party) | Session, or 90 days after consent |
Marketing cookies (consent required)
Marketing cookies are used to track advertising conversions or to serve personalized ads on other sites.
Pulzeo measures how well its ad campaigns work. The cookies below are only set once you have accepted the “marketing” category. Without it, no advertising data is stored on your device.
Two events are also sent to Meta from our servers: the creation of your account and your subscription to a paid plan. Your email address is included in hashed form, a fingerprint from which the original address cannot be recovered. Rejecting the “marketing” category also stops these events from being sent.
| Name | Purpose | Set by | Lifetime |
|---|---|---|---|
_gcl_au | Google Ads conversion linker (attributing conversions to ad clicks) | 90 days | |
_gcl_aw, _gcl_dc | Attributing a conversion after a click on an ad | 90 days | |
_fbp | A browser identifier assigned by Meta, used to measure conversions from Facebook and Instagram ads | Meta | 90 days |
_fbc | Attributing a conversion after a click on a Meta ad | Meta | 90 days |
Personalization cookies (consent required)
Personalization cookies adapt the interface to your preferences (other than essential preferences, such as light or dark theme, which are stored in an essential cookie).
At this time, no personalization cookie requiring consent is set. The personalization options currently in place (theme, language, time zone) are considered strictly necessary for ease of use and are set without consent.
Third-party cookies
The tags described above are present on the public site and in the application, and do not set any cookie until you have given your consent. Pulzeo does not embed any social media buttons.
Within the signed-in application, certain technical components are loaded from our subprocessors’ domains without setting any third-party tracking cookie. Our payment provider, Stripe, may set technical cookies only when a payment page is displayed, for security reasons (fraud prevention). These cookies fall under the consent exemption and are governed by Stripe’s own cookie policy.
Managing your consent
The first time you visit Pulzeo, a consent banner appears at the bottom of the page with three options:
- Accept all: you consent to all cookies, including those that require consent.
- Reject all: only the strictly necessary cookies will be set.
- Customize: you choose which categories to accept.
You can change your preferences at any time using the button below or the “Cookie preferences” link at the bottom of every page.
You can also block or delete cookies directly in your browser settings. However, deleting the essential (session) cookies will sign you out.
How long consent lasts
Your consent choice, whether you accepted or rejected cookies, is remembered for 13 months. After that, the banner appears again so you can make a new choice.
If you change your preferences (for example, by turning off a category you had previously accepted), we immediately stop setting cookies in that category and delete those already set as soon as technically possible.
Contact
For any questions about this cookie policy or about exercising your data protection rights:
Use our contact form. The GDPR point of contact and the general framework for our processing are described in our privacy policy.
This English version is provided for convenience only. If it differs from the French version, the French version prevails.