COOKIES AND TRACKERS
Cookie policy
Which trackers are placed in your browser, by whom, for what purpose, for how long, and how to change your mind.
Last updated: 4 September 2026
This translation is provided for your convenience. These documents are governed by French law and, in the event of any discrepancy, only the French version is authoritative.
What a tracker is
A tracker is a piece of information placed on your device by a site you visit, and read back later. The cookie is its best-known form, but the browser’s local storage is another. Some trackers are essential for the site to work; others serve to measure audience or to credit a purchase to whoever recommended it.
This page separates those three families, because they do not follow the same rules: only the first one needs no agreement from you.
Strictly necessary trackers
They let the site work and serve no profiling purpose. They are placed by kalyneo.com and exempt from consent under article 82 of the French Data Protection Act.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| kalyneo_session | Cookie | Identifies your session: language, market browsed, watchlist kept without an account, and sign-in to your account where applicable | Two hours of inactivity |
| XSRF-TOKEN | Cookie | Protects forms against cross-site request forgery | Two hours of inactivity |
| kalyneo-theme | Local storage | Remembers your light or dark theme choice, so the page does not change appearance on every load | Until the site data is cleared in your browser |
Refusing these trackers amounts to stopping the site from working: your watchlist would not survive from one page to the next, and no form could be submitted. They are therefore placed as soon as you arrive, without asking first.
Audience measurement
To date, Kalyneo places no audience measurement tracker at all. Traffic is not measured with any third-party tool. Should such a tool ever be installed, it would be named here, with its purpose and its retention period, and your consent would be collected before anything was placed.
Affiliate trackers
This is the mechanism that funds the site, and it deserves a precise description.
When you click a button leading to a merchant, your browser goes through an internal address of the form /go/…. Kalyneo records the departure there (the offer, the merchant, the page of origin, an irreversible hash of your IP address), without placing any advertising cookie, then redirects you to the merchant’s site.
It is then the merchant or its affiliate platform, and not Kalyneo, that places a third-party cookie in your browser containing our publisher identifier. If you buy while that cookie is still valid, the sale is credited to us and the merchant pays us a commission. That cookie is placed on the merchant’s domain, it is readable by that merchant alone, and it passes on neither your identity nor the contents of your basket: what we receive is commission statistics, never a list of buyers.
No affiliate programme is active to date. As soon as one is, it will be named on this page and on the Affiliation page, together with the attribution window it announces.
Refusing these trackers degrades your browsing in no way: prices, ratings, duels and rankings stay exactly the same. The only consequence is that we earn nothing on your purchase.
Giving and withdrawing your consent
No tracker subject to consent is placed before you have accepted it. Refusing is as simple as accepting, and a refusal is not asked again on every page.
Your choice can be revisited at any time: it is withdrawn as easily as it is given, from the tracker settings panel and, in any event, from the browser settings described below. Once collected, a consent is not kept for longer than six months without being asked for again.
Retention periods
Audience measurement trackers and the data they produce are kept no longer than thirteen and twenty-five months respectively, in line with the CNIL’s recommendations. Affiliate trackers follow the period announced by each programme. Necessary trackers expire with your session or when the site data is cleared.
The associated processing operations, their legal bases and your rights are set out in detail in the privacy policy.