Cookie Policy

July 2026 · Version 1.1 — Beta

1 — What is a cookie?

A cookie is a small text file placed on the user's device (computer, smartphone, tablet) when browsing a website. It allows the website to recognise the device on subsequent visits.

Omiros distinguishes two categories: strictly necessary cookies, placed without consent, and audience measurement cookies, placed only after explicit acceptance.

2 — Strictly necessary cookies

These cookies are essential to the operation of the Service and to User authentication. They cannot be disabled without impairing the functioning of the Service.

In particular, they enable:

  • Management of authentication sessions (maintaining the connection).
  • Form security (CSRF protection).
  • Storage of essential technical preferences.

These cookies are exempt from consent requirements in accordance with the CNIL's recommendations (deliberation no. 2020-091 of 17 September 2020).

3 — Audience measurement cookies (subject to consent)

Omiros uses Google Analytics 4 to measure site traffic: pages viewed, traffic sources, device type, navigation paths. This tool does not fall within the CNIL's consent exemption for audience measurement, in particular because data is transferred outside the European Union and reused by Google on its own behalf.

It is therefore disabled by default. As long as the User has not accepted, or if they have refused, no audience measurement cookie is placed: the tag runs in cookieless mode (Google Consent Mode v2, analytics_storage signal denied) and sets no identifier on the device.

Cookies placed only after acceptance

_ga
Distinguishes visitors — 13 months
_ga_X090GM1B65
Maintains measurement session state — 13 months

Google's advertising signals (ad_storage, ad_user_data, ad_personalization) remain denied at all times, including after acceptance: Omiros runs no advertising, performs no ad targeting, and enables neither Google signals nor cross-site tracking.

Measurement data is processed by Google Ireland Limited for users in the European Economic Area, and transferred to Google LLC in the United States. This transfer is covered by Google LLC's certification under the EU–U.S. Data Privacy Framework.

Omiros sells no data. Google's own use of the data collected through its service is governed by its own terms and privacy policy.

4 — Managing consent

A consent banner is shown on the first visit. Refusing is as easy as accepting: both actions are presented at the same level and available in a single click. No audience measurement is triggered before an answer is given.

The User's choice is retained for six months, refusals included, in accordance with the CNIL's recommendations; after that period the question is asked again. It is stored in the browser's local storage (key omiros.cookie-consent), not in a cookie.

The User may change their choice at any time using the “Change my choice” button at the bottom of this page: the banner reappears immediately and the new decision takes effect at once.

5 — Other browsing-related processing

  • Omiros's infrastructure relies on Vercel (hosting, performance analytics) and Cloudflare (DNS, R2 storage), which process anonymised or pseudonymised browsing data: geographic region, device type, traffic, loading performance.
  • Vercel Analytics and Vercel Speed Insights place no cookies and use no persistent identifier; they are therefore not subject to consent.
  • These processing activities are described in Omiros's Privacy Policy and in the respective policies of Vercel and Cloudflare.

6 — Browser settings

Independently of the banner, the User may configure their browser to accept or refuse cookies. Refusing strictly necessary cookies will prevent access to features of the Service that require authentication.

To configure cookies, the User may consult their browser's help section:

  • Chrome: Settings > Privacy and security > Cookies
  • Firefox: Preferences > Privacy & Security
  • Safari: Preferences > Privacy
  • Edge: Settings > Privacy, search, and services

7 — Retention periods

Session cookies
Deleted when the browser is closed
Authentication cookies
12 months maximum
Audience measurement cookies
13 months maximum
Consent choice
6 months, then the question is asked again

8 — Contact

For any question regarding cookies, the User may contact Omiros at the address indicated in the Legal Notice.