Cookie Management Policy

The purpose of this policy is to inform the User, in a clear and complete manner, of the cookies and other trackers that may be placed on or read from their device when using the Noryo service (hereinafter the "Service"), pursuant to Article 82 of French Act No. 78-17 of 6 January 1978 as amended, Directive 2002/58/EC (ePrivacy) and the guidelines and recommendations of the CNIL (the French data protection authority). It supplements the Privacy Policy.

Article 1 - Purpose and scope

This policy applies to the websites and the web application of the Service. It describes the nature of the trackers used, their purpose, their lifespan, their legal basis and the management options available to the User.

Article 2 - Definitions

Article 3 - Guiding principle

Article 4 - Trackers used

4.1 List

Tracker	Purpose	Category	Duration
Authentication session	secure maintenance of the User's connection	strictly necessary	duration of the session
Language preference	storage of the display language	strictly necessary	persistent
Household context	storage of the profile consulted within a household	strictly necessary	session
Anti-bot protection	form security and abuse prevention	strictly necessary	thirty minutes
Interface preferences	storage of the User's display choices	strictly necessary	persistent

4.2 Basis of the exemption

The trackers listed above are strictly necessary for the provision of the Service expressly requested by the User and, on that basis, are exempt from the collection of consent in accordance with Article 82 of the aforementioned Act.

4.3 Local storage

The Service may use local storage mechanisms of the browser or the application for strictly technical purposes, for example the temporary retention of a session identifier. These mechanisms are not used for advertising purposes.

Article 5 - Audience measurement

Audience measurement is carried out in a limited manner and without placing a cookie, solely for the purposes of internal statistics and improvement of the Service. The corresponding data is not used for advertising purposes nor transferred to third parties for that purpose, and is retained within the limits indicated in the Privacy Policy.

Article 6 - Absence of third-party trackers for advertising purposes

The Service does not integrate any advertising network or any third-party tracker intended for targeting, retargeting or behavioural tracking of the User. It does not resell any data for prospecting purposes.

Article 7 - Management by the User

7.1 Browser settings

The User may at any time delete existing trackers and configure their browser in order to limit or block their placement. The main browsers offer a dedicated management menu, generally accessible from their privacy settings.

7.2 Consequences

Strictly necessary trackers cannot be disabled without compromising the operation of the Service; blocking them is likely to impair access to certain features, in particular authentication.

7.3 Preference signals

As the Service carries out no tracking for advertising purposes, the preference signals emitted by browsers, such as do-not-track mechanisms, have no effect on the strictly necessary trackers used.

Article 8 - Retention periods

The lifespan of each tracker is indicated in Article 4. Any information collected by means of these trackers is not retained beyond what is necessary for the purposes described.

Article 9 - Similar technologies

Beyond cookies, other technologies, in particular invisible pixels, session identifiers or software development kits integrated into applications, may allow information to be placed on or read from the device. The Service uses such technologies only for purposes strictly necessary for its operation and security, to the exclusion of any advertising or profiling purpose. The Service does not place third-party cookies for advertising purposes.

Article 10 - Mobile application

The mobile applications do not use browser cookies. They use local storage mechanisms specific to the operating system, for technical purposes, in particular the secure retention of a session token and the User's preferences. No advertising identifier is used.

Article 11 - Detailed management by browser

The User may manage trackers from their browser settings:

• a privacy menu generally allows cookies to be displayed, blocked or deleted;
• it is possible to delete cookies already recorded and to configure the browser to refuse their placement in the future;
• the documentation specific to each browser, in particular Chrome, Firefox, Safari and Edge, describes the applicable procedure;
• some browsers offer a private browsing mode that limits the retention of trackers to the session.

Blocking strictly necessary trackers is likely to prevent access to certain features, in particular authentication.

Article 12 - Cookies and personal data

Where the information collected by means of strictly necessary trackers constitutes personal data, it is processed in accordance with the Privacy Policy, which specifies the purposes, the retention periods and the rights of the User.

Article 13 - Complaint

The User may lodge a complaint with the CNIL (the French data protection authority), 3 place de Fontenoy, 75007 Paris, www.cnil.fr, if they consider that their rights are not respected.

Article 14 - Amendments

This policy may be updated to reflect changes in the Service or in the applicable regulations. The applicable version is the one in force at the time the Service is used.