Privacy policy

This is an English translation provided for convenience. The French version (Politique de confidentialité) is the legally binding version: in the event of any discrepancy or difference in interpretation, the French version prevails.

Updated on 25 September 2026. Controller: KIPDEV SAS, 4 rue des Frênes, 33700 Mérignac, France. Contact: contact@orbeconsent.com.

Cookies and trackers on this website

• Session: one strictly necessary cookie, set when you sign in to the customer area (30 days). It does not require consent.
• Your cookie choice: a necessary cookie (cnst_choice, 6 months) remembers your choice. So that we can demonstrate it, our Orbe banner also records a random identifier (the one in the cookie), the categories accepted or refused, the date, the version of the text displayed, the page address, your browser and operating system in abbreviated form, and a truncated fingerprint of your IP address (never the address itself). This record is kept for as long as the website uses this banner.
• Audience measurement: kipstats, a cookieless audience measurement tool operated by KIPDEV SAS, used solely to measure traffic to this website and produce anonymous statistics. It receives the page address, the site you came from, the screen size and the browser language and, like any server, your IP address. This data is neither combined with other processing nor passed on to third parties. Although this measurement may fall within the exemption set by the CNIL (the French data protection authority), we leave it up to you: kipstats is only loaded if you accept it in the banner (“Audience measurement”). Until you have made a choice, or if you refuse, no request is sent to kipstats. You can change your mind at any time using the “Manage cookies” link at the bottom of every page.
• No advertising, no social networks, no third-party audience measurement. Fonts are served by this website, without calling any external service.

Customers (account holders)

• Data: email address, company name and SIREN number if provided, declared websites and their settings, subscription history (the payment itself is handled by Stripe; we do not see the card number), messages exchanged with us.
• Purposes and legal bases: providing the service and managing the subscription (performance of the contract); invoicing and accounting (legal obligation); security of the service and abuse prevention (legitimate interest).
• Recipients: our host Hostinger (server in Paris); Stripe (payment, Ireland and United States); Resend (sending emails, United States); Cloudflare (receiving emails sent to contact@orbeconsent.com, United States). Transfers to the United States rely on the EU–US Data Privacy Framework, under which these providers state that they are certified, and on the European Commission’s standard contractual clauses.
• Retention: for as long as the account exists; accounting records are kept for 10 years.

Public scan

For a scan run without an account, we keep the address of the website scanned, the result and a truncated HMAC fingerprint of your IP address (to limit the number of scans, legitimate interest). No other data about you.

Visitors to our customers’ websites

For cookie choices made on a customer’s website, that customer is the controller and we are its processor: see the data processing agreement. To exercise your rights, contact the website concerned; we will forward any request we receive to it.

Your rights

Access, rectification, erasure, restriction, objection and portability: write to contact@orbeconsent.com. You may also lodge a complaint with the CNIL (cnil.fr).