Critical flaws CVE-2026-87902 + xss2shellTest my site

Cookie Policy

This policy describes the cookies and similar technologies used on the flawfence.com website. It does not cover the Flawfence application available after login. No cookie subject to consent is set until you have accepted it, and declining changes nothing about how the site works.

1. What is a cookie?

A cookie is a small text file stored on your device (computer, smartphone, tablet) when you visit a website.

It can be set by the site you visit (a “first-party” cookie) or by a third-party service (a “third-party” cookie).

The law separates cookies needed for the service you request, which are exempt from consent, from all others, which may only be set with your agreement.

2. Which cookies do we use?

2.1. Strictly necessary cookies

They are exempt from consent. The site sets only one, and only after you have answered the banner: it keeps us from asking you again on every page.

Cookie set:

  • ff_consent - Stores your choice (accept or decline) on advertising cookies

Duration: 6 months

Consent required: No

2.2. Audience analytics cookies

None. The site carries no audience measurement or behaviour analysis tool (no Google Analytics, no heat maps, no session recording).

2.3. Functional cookies

Only one, set solely if you change the site language yourself. Without it, the language is inferred from your browser on each visit.

Cookie set:

  • ff_lang - The language you chose (fr or en)

Duration: 1 year

Consent required: No, it answers a choice you make explicitly

2.4. Advertising cookies

They serve one purpose: knowing which of our Google Ads brought you to the site, and whether you then got in touch. They are only set after you agree. Before that, Google’s script is not loaded and no request goes to Google.

Service used:

  • Google Ads (Google Ireland Ltd) - _gcl_au, _gcl_aw and related cookies (_gcl_ prefix), advertising conversion measurement

Duration: 90 days

Consent required: Yes

2.5. Social media cookies

None. Links to our profiles are plain links: the site embeds no share button or third-party content able to set a cookie.

3. Similar technologies

Cookies are not the only way to keep information in a browser:

  • Session storage (sessionStorage): if you accepted advertising cookies, the origin of your visit (campaign, Google click identifier, first page viewed) is kept under the ff_attribution key for the lifetime of the tab. Without agreement, nothing is written there
  • Anti-bot check (Cloudflare Turnstile): loaded only if a form submission looks automated, in a frame hosted by Cloudflare. Security purpose, no advertising tracking
  • Tracking pixels and device fingerprinting: we use neither

4. Managing your preferences

4.1. Consent banner

On your first visit, a banner lets you accept or decline advertising cookies, with two buttons of equal weight. Not answering counts as declining. You can change your mind at any time with the “Manage my cookies” link at the bottom of every page: withdrawing immediately deletes the advertising cookies already set.

4.2. Your browser settings

You can configure your browser to block or delete cookies:

  • Chrome: Settings > Privacy and security > Cookies
  • Firefox: Settings > Privacy & Security
  • Safari: Preferences > Privacy
  • Edge: Settings > Privacy, search, and services

4.3. Opting out of targeted advertising

Independently of this site, you can set your advertising preferences here:

5. Consequences of declining

For you, none:

  • Advertising cookies declined: the site, its tools and its forms work exactly the same way. We simply know less about which of our ads are useful
  • No language cookie: the language is inferred from your browser on each visit

6. Retention period

The durations are those given above:

  • Cookie choice (ff_consent): 6 months, after which you are asked again
  • Language (ff_lang): 1 year
  • Google Ads cookies: 90 days
  • Session storage: until the tab is closed

7. Data protection

The data collected via cookies is processed in accordance with our Privacy Policy and the GDPR.

You have the right to access, rectify, erase and object to your data. Contact us at dpo@flawfence.com.

8. Changes to the policy

We may change this cookie policy at any time to reflect changes in our practices or in legislation. We encourage you to review this page regularly. The date of last update is shown below.

9. Contact

For any questions about the use of cookies:

Email: dpo@flawfence.com

DPO: Data Protection Officer, Trackflaw SAS

Last updated: 10/19/2026

Contact: dpo@flawfence.com