Cookie Policy

• Authentication session cookie (httpOnly, SameSite=Lax): keeps you signed in. Exempt from consent. Lifetime: the session (up to 7 days).

• Theme preference (localStorage): remembers light/dark.
• Language: your chosen locale.
• Support widget id (localStorage): a random id so a support conversation you start can be continued. No tracking across sites.
• Pricing country (localStorage): remembers the country used to show local pricing.

We load no Google Analytics, tag manager, advertising pixels or session-replay scripts. Because there are no non-essential cookies, there is no consent banner to gate them — if that ever changes, we will add a consent mechanism (deny by default).

Aggregate feature-usage counts are measured on our own servers from the requests the app already makes — no cookie, no device storage, no third party.

To know how many people visit assemblea.app, which pages they read, where they come from and how many start the sign-up form, each page of the public website sends a small request to our own servers. It carries the page, the site language, the domain of the page you came from (never its full address), the utm campaign tags of the link if any, and the step of the sign-up form. It uses no cookie and stores nothing on your device.

On our servers your IP address and browser identification are used only in memory: to look up the country (with a local database, no third party) and to count unique visitors per day through a hash mixed with a random value that is deleted after 48 hours, so visits cannot be linked across days or traced back to you. Only daily totals are kept, for about 24 months; abuse protection holds IP addresses for up to one minute.

Signed-in users, automated traffic and browsers sending Global Privacy Control or Do Not Track are not measured. The statistics serve only us and are not shared with anyone. You can object at any time by writing to [email protected].