Cookie Policy
Last updated: 2026-05-12
Notice (2026-05-18) : this page reflects the previous 100% opt-in posture. As of v=36611155 the site emits an exempted-audience pageview (CNIL exemption, cookieless, sessionStorage-only) without consent in addition to the opt-in tiers described below. The canonical updated French version (cookies-fr.html) is authoritative until this English version is fully revised — translation pending DPO review.
1. Essential cookies only, except with explicit consent
The site sivel-labs.be uses no third-party cookies, no advertising pixel (Meta, LinkedIn Insight, X/Twitter Pixel, TikTok…). The only technologies active by default are strictly necessary for operation (language preference, contact-form anti-bot, PWA cache for offline display).
With your explicit consent, two additional measurements may be enabled via the banner shown on first visit:
- Audience measurement — aggregated traffic statistics, anonymised IP, processed on our own servers. Retention 12 months maximum. No data is sold, shared, or transmitted to a third party.
- Anonymous navigation replay — separate opt-in. Anonymous recording of the journey (clicks, scrolls); input-field content is automatically masked. Self-hosted processing. Retention 30 days.
You can at any time ; the default choice is opt-out (refusal) for both categories above.
2. Technical local storage
We use the browser's localStorage to remember two preferences essential for operation:
| Key | Content | Duration | Purpose |
|---|---|---|---|
sl-lang | "fr" / "en" / "nl" | 1 year (refreshed at each visit when the language changes) | Remember display language |
sl-cookie-consent | JSON v2: {essential, analytics, session_replay, consented_at, migrated_at} | Persists until manual erasure or browser expiry (12 months recommended) | Remember your choice for analytics and session replay cookies (strict opt-in) |
The sl-lang key itself is never transmitted in an HTTP header (unlike a cookie). However, when a visitor switches language or follows an internal link, the application adds a ?lang=fr|en|nl parameter to the URL to propagate the language: this language value appears in server logs (only the language code, no other PII). You can erase the key by clearing your browser's local storage (F12 → Application → Local Storage), and disable URL rewriting by blocking JavaScript for this site.
3. Cloudflare Turnstile (contact form)
The Turnstile anti-bot widget may set a technical cookie cf_clearance from Cloudflare upon contact-form submission. This cookie is strictly necessary for security (bot rejection) and benefits from the art. 5(3) ePrivacy exception.
4. PWA offline storage (Cache Storage)
The site registers a Service Worker that uses the browser's Cache Storage API to locally store the resources required for offline display (installable PWA mode). This storage is technical and necessary for operation (art. 5(3) ePrivacy exception):
| Cache | Content | Duration | Purpose |
|---|---|---|---|
sl-shell-<hash> | Site HTML, CSS and JS (~700KB), SVG logo, offline page | Until next site update (auto-purged on every new version) | Immediate offline display |
sl-fonts-<hash> | Web fonts (Outfit, Plus Jakarta Sans) | Same | Offline typography |
sl-runtime-<hash> | Legal pages + i18n JSON (strict allowlist, max 60 entries) | Same; LRU eviction | Lightweight navigation cache |
No personal data is stored in these caches — only public static site resources. With each new deployment, the <hash> identifier changes and old caches are automatically purged (Service Worker activate handler). You can manually clear Cache Storage via: F12 → Application → Storage → Clear site data, or fully disable the Service Worker by visiting https://sivel-labs.be/?nosw=1.
5. Audience measurement (opt-in)
If you enable the Audience measurement category in the banner, we measure site traffic (page views, journeys, session duration) using a tool self-hosted on our own servers (France or Belgium depending on the operational cluster). Applied safeguards:
- IP addresses are anonymised before any storage.
- No user profile is created: you are not identified on sivel-labs.be.
- Emails and phone numbers that may appear in URL parameters are filtered browser-side before the event is emitted.
- Retention: 12 months maximum, then automatic deletion.
- No third-party sub-processor: data never leaves our infrastructure. See privacy policy §sub-processors for the actual list of hosting providers and external services used.
6. Anonymous navigation replay (separate opt-in)
If you additionally enable this category, we record the sequence of your navigation (clicks, scrolls, mouse movements) without capturing the content of input fields: every input, textarea and element flagged as sensitive is automatically masked with asterisks before any recording. Self-hosted processing, 30-day retention, then automatic deletion.
7. Your choices
You can at any time:
- via this page
- block all local storage via your browser settings — the site remains functional (only the language memory will be lost between visits)
- fully disable the Service Worker by visiting
https://sivel-labs.be/?nosw=1
Refusal is strictly equivalent to acceptance with regard to site access: no "cookie wall" mechanism blocks you.
8. Contact
Question? dpo@sivel-labs.be