Cookie policy

1. Introduction and controller

This cookie policy explains how the Athletis marketing website, accessible at athletis.app, uses cookies and equivalent storage technologies (local storage) on your device. It sets out what we store, why, for how long, and how you keep control.

The website is published by Athletis, a company being incorporated, acting as data controller for the technical storage described here. The publication director is Aymen Ezzayer, in his capacity as legal representative of Athletis. Full statutory identification details are set out in the legal notice.

This policy applies to the marketing site athletis.app. The application, accessible at my.athletis.app, is a separate product surface; storage used inside a signed-in account is governed by the terms and the data-processing agreement applicable to that service. For any question about this policy, contact us at hello@athletis.app.

2. What is a cookie?

A cookie is a small text file placed on your device by a website when you visit it. It lets the site store and read information, for example a preference you set or a technical token needed for a feature to work. Cookies are read by the browser and sent back to the server or the script that set them.

Alongside cookies, browsers offer local storage, a mechanism that keeps small pieces of data in the browser itself. Unlike a cookie, local-storage data is not automatically transmitted with each request to a server; it stays on your device and is read locally by the site's own scripts. We use local storage rather than cookies for your display preferences.

Storage is described by two further distinctions. A session item is deleted when you close the browser tab or window, while a persistent item survives until it expires or is deleted. A first-party item is set by the site you are visiting (here, athletis.app), whereas a third-party item is set by another domain whose service is loaded on the page, such as a security provider.

3. Cookies and trackers we use

We keep this to the strict minimum. The site uses only the following items, each of which is necessary for the site to function or to protect it. None of them profiles you or tracks you across other sites.

• Theme preference (local storage, first-party, strictly necessary, persistent): stores whether you have chosen the light or dark interface, so the site opens with your choice on your next visit. Lifetime: kept until you clear your browser storage; no expiry is enforced.
• Language preference (local storage, first-party, strictly necessary, persistent): stores the interface language you selected (French or English) so the correct version is shown on return. Lifetime: kept until you clear your browser storage; no expiry is enforced.
• Cloudflare Turnstile (third-party, technical, security and anti-bot): loaded only on the contact and newsletter forms to confirm that a request comes from a genuine visitor and not an automated bot. Turnstile processes the visitor's IP address for this security purpose; it is a privacy-friendly alternative to advertising CAPTCHAs and sets no advertising or cross-site tracking cookie. Any technical token it uses is short-lived and tied to the form submission.

We set no audience-measurement cookie, no advertising cookie, and no social-network sharing cookie.

4. Legal basis and consent

Under article 82 of the French Data Protection Act (loi Informatique et Libertés), transposing the ePrivacy Directive, prior consent is required before writing or reading any non-essential item on a user's device. Items that are strictly necessary to provide a service expressly requested by the user, or solely for the purpose of enabling or facilitating electronic communication, are exempt from consent.

All three items above fall within that exemption. The theme and language preferences exist only to deliver the display you requested, and Turnstile is strictly necessary to secure the forms against abuse. We therefore rely on the necessity of the service, not on consent, and no consent banner is required.

Were we to introduce any consent-based tracker in future (for example an analytics or advertising cookie), we would obtain your free, specific, informed and unambiguous consent beforehand, offer an equally simple way to refuse or withdraw it, and, in line with the CNIL's guidance, cap the validity of that consent at 13 months, after which we would ask again.

5. No analytics or advertising

The site runs no analytics, no advertising, and no marketing tracking. We do not measure audience, we do not build visitor profiles, and we do not share browsing data with advertising networks or data brokers.

Because the site places no non-essential tracker, there is nothing to consent to, and no cookie consent banner is displayed. This is a deliberate choice, not an omission.

If this ever changes, we will update this page first, describe precisely the new trackers and their purposes, and put a compliant consent mechanism in place before any such tracker is activated. No consent-based tracker will run before you have had the opportunity to accept or refuse it.

6. Third-party cookies

The only third-party technology loaded on the site is Cloudflare Turnstile, provided by Cloudflare, Inc. It appears solely on the contact and newsletter forms and serves a single purpose: distinguishing genuine human submissions from automated ones, to protect the forms and our inbox from abuse.

Turnstile is designed to work without tracking users across sites or serving advertising. As it is operated by Cloudflare on Cloudflare's own infrastructure, its handling of technical data (including the visitor's IP address) is also governed by Cloudflare's own privacy documentation, available at cloudflare.com. We embed no advertising, analytics, or social-media third-party scripts anywhere on the site.

7. Managing cookies

You control cookies and local storage through your browser. You can view what is stored, delete existing items, and block future ones. The exact steps depend on your browser, and are typically found under its privacy or data settings.

• Chrome: Settings, Privacy and security, Third-party cookies and Clear browsing data.
• Firefox: Settings, Privacy and Security, Cookies and Site Data.
• Safari: Settings (or Preferences), Privacy, Manage Website Data.
• Edge: Settings, Cookies and site permissions.

Clearing your browser storage removes your saved theme and language preferences, so the site reverts to its defaults until you set them again. Because the items we use are strictly necessary, blocking them may prevent parts of the site from working correctly, in particular the display preferences and the security check on the forms.

8. Retention

The theme and language preferences are stored in your browser's local storage and persist until you clear that storage or reset the preference; we enforce no server-side expiry on them because they never leave your device. Cloudflare Turnstile relies only on short-lived technical tokens tied to a single form submission, with no persistent identifier retained by us for tracking.

We currently operate no consent-based tracker. Should we ever deploy one, the associated consent, and the tracker's own lifetime, would be capped at 13 months in accordance with CNIL guidance, after which consent would be sought again.

9. Your rights

Beyond the browser controls described above, you hold the full set of rights granted by the RGPD and the French Data Protection Act over any personal data we process, including rights of access, rectification, erasure, restriction, objection, portability, and the right to give directives on the fate of your data after your death.

How to exercise these rights, the legal bases we rely on, our processors, retention periods, and your right to lodge a complaint with the CNIL are all set out in our privacy policy.

10. Changes

We may update this cookie policy to reflect changes in the site, in the technologies we use, or in applicable law. Any material change, in particular the introduction of a consent-based tracker, will be reflected here before it takes effect.

The version in force is the one published on this page, identified by its last-updated date. We invite you to review it periodically.

11. Contact

For any question about this cookie policy or about the storage described here, write to us at hello@athletis.app. This is our sole published contact channel for such requests.