Cookies and trackers used by Flaynn
Flaynn uses only cookies strictly necessary for the operation of the service plus optional cookies that you can enable or disable at any time. No advertising cookies, no cross-site trackers.
Preamble
In accordance with articles 13 and 32 of the General Data Protection Regulation (GDPR), article 82 of the French Data Protection Act, and CNIL deliberation no. 2020-091 of 17 September 2020 on cookies, Flaynn informs you below of all the cookies and storage technologies used on flaynn.io (and the associated domains flaynn.tech, flaynn.com, flaynn.fr).
For cookies that are not strictly necessary, your choice is stored in the flaynn_consent cookie (JSON, 12 months, SameSite=Lax, Secure). You can change it at any time via the button below or from the site footer.
1. Strictly necessary cookies (exempt from consent)
1.1 Authentication and user session
These cookies are essential to identify you securely while you browse the personal areas (founder dashboard, business angel dashboard, super-admin console).
| Name | Issuer | Duration | Purpose |
|---|---|---|---|
flaynn_at |
flaynn.io (first-party) | 15 minutes | Session access token. Authenticates your requests to the server after login. Silently regenerated via flaynn_rt. |
flaynn_rt |
flaynn.io (first-party) | 7 days | Session refresh token. Avoids having to reconnect every 15 minutes. Revoked on logout or account deletion. |
flaynn_consent |
flaynn.io (first-party) | 12 months | Stores your cookie consent preferences (this cookie is itself CNIL-exempt: its purpose is to respect your choice). |
Technical characteristics: flaynn_at and flaynn_rt carry the attributes HttpOnly (inaccessible to any JavaScript script), SameSite=Strict and Secure. flaynn_consent is read by the banner script, so it is non-HttpOnly, but SameSite=Lax + Secure.
Legal basis: performance of the contract (GDPR art. 6.1.b) and legal obligation (art. 82 of the French Data Protection Act for flaynn_consent).
1.2 Language choice
| Name | Issuer | Duration | Purpose |
|---|---|---|---|
flaynn_lang |
flaynn.io (first-party) | one year | Chosen language, set only when you click the language toggle. |
2. Optional cookies (subject to your consent)
2.1 Functional preferences
These cookies store the display preferences you explicitly choose in the interface.
| Name | Duration | Purpose |
|---|---|---|
ba_sidebar_collapsed |
12 months | State of the BA dashboard sidebar (collapsed / expanded). Value 0 or 1, no personal data. |
Legal basis: consent (GDPR art. 6.1.a). Can be disabled via the "Change my cookie preferences" button.
2.2 Audience measurement
Flaynn has an in-house audience measurement tool (anonymised events stored in the database, table events_stream). It sets no third-party cookie. If you accept it, technical data (visited URL, country, aggregated browser data, visit duration) is recorded to measure traffic. No directly identifying data.
Legal basis: consent (GDPR art. 6.1.a). Can be disabled at any time.
3. Browser local storage (non-cookie)
Flaynn also uses the technologies localStorage and sessionStorage, along with the Cache API (Service Worker) for offline mode. Although these are not cookies in the strict sense of the CNIL deliberation, we inform you of them for transparency.
3.1 localStorage (persistent)
| Key | Purpose |
|---|---|
flaynn_auth | Cache of the user profile (id, email, first name, role). Cleared on logout. |
flaynn_pending_ref, flaynn_pending_email | Temporary storage after a Stripe payment. Cleared once the confirmation is shown. |
flaynn_scoring_draft | Automatic saving of the scoring form draft (every 5 seconds). Cleared after submission. |
flaynn_lang | Copy of the language choice, same purpose as the cookie, read when the cookie is absent. |
3.2 sessionStorage (cleared when the tab is closed)
| Key | Purpose |
|---|---|
flaynn_transition | Animation flag between internal pages (UX). |
flaynn_rejoindre_v1 | Saved copy of the multi-step BA application form, kept in case the page is reloaded. |
3.3 Service Worker cache (Progressive Web App)
Flaynn runs as a Progressive Web App (PWA) and preloads its static resources (CSS, images, public JS) into the browser cache via the standard Cache API. This cache (flaynn-vXX) contains no personal data, only the site's public technical files.
4. Third-party cookies related to payments
When you make a payment (investor subscription), you are redirected to the secure platform Stripe (checkout.stripe.com), operated by Stripe Payments Europe Ltd. Stripe sets its own cookies on its own domain to manage your payment session, prevent fraud (Stripe Radar) and ensure PCI-DSS compliance.
Flaynn has neither access to nor visibility over these cookies, which remain strictly confined to the domain *.stripe.com.
- Stripe cookie policy: stripe.com/cookies-policy/legal
- Stripe privacy policy: stripe.com/privacy
No Stripe cookie is set on flaynn.io.
5. How to manage these cookies
You can change your preferences at any time via the "Change my cookie preferences" button present in the footer of every page (or at the top of this page).
For strictly necessary cookies (authentication), you can delete them manually via your browser settings:
- Chrome: Settings › Privacy and security › Cookies and other site data
- Firefox: Settings › Privacy and security › Cookies and site data
- Safari: Preferences › Privacy › Manage website data
- Edge: Settings › Cookies and site permissions
flaynn_at and flaynn_rt will log you out and require you to enter your credentials again.
6. Your rights
In accordance with the GDPR, you have the following rights over your personal data at any time:
- right of access, rectification, erasure (art. 15 to 17);
- right to portability (art. 20);
- right to object and to restrict processing (art. 18 and 21).
For any request: contact@flaynn.fr.
You can also lodge a complaint with the CNIL: cnil.fr/fr/plaintes.
