Last updated: · Consent notice version v5
Cookie Policy
This page describes every cookie and every storage item set by Cuddlia, type by type and purpose by purpose. Nothing outside this list is set by us. Until you give your consent, only strictly necessary purposes are active: no analytics, affiliate or email script is loaded.
Strictly necessary
Always on: security, storing your choice and the language you asked for. Exempt from consent.
Exempt from consent (required for the service)
| Name | Type | Lifetime | Role |
|---|---|---|---|
| pp.consent | Cookie | 1 year | Mirror of your cookie choice, read by the server. |
| pp_consent | Local storage | Until revoked | Choice details (purposes, date, policy version). |
| pp.locale | Cookie | 1 year | The language you explicitly asked for (FR/EN). |
No third-party domain is contacted for this purpose.
Preferences
Comfort: remembering your currency between visits.
Set only after your consent
| Name | Type | Lifetime | Role |
|---|---|---|---|
| pp.currency | Cookie | 1 year | Display currency remembered between visits. |
No third-party domain is contacted for this purpose.
Analytics
Navigation and quiz usage statistics, with no advertising profiling.
Set only after your consent
| Name | Type | Lifetime | Role |
|---|---|---|---|
| pp_session_id | Local storage | Until revoked | Anonymous technical id grouping the events of one visit. |
| pp_quiz_variant | Local storage | Until revoked | A/B variant of the quiz shown to you. |
| pp_design_variant | Local storage | Until revoked | A/B layout variant. |
| pp_ab_(prefix) | Local storage | Until revoked | Other running A/B experiments. |
Third-party domains that may be contacted for this purpose: google-analytics.com, googletagmanager.com, analytics.google.com, hotjar.com, clarity.ms, segment.com, segment.io, plausible.io, matomo.cloud, mixpanel.com, amplitude.com, sentry-cdn.com
Affiliate
Attribution of clicks to Amazon (ascsubtag sub-tag) and partner networks.
Set only after your consent
| Name | Type | Lifetime | Role |
|---|---|---|---|
| pp.exit.seen | Local storage | Until revoked | Prevents showing the exit pop-in again. |
| pp.country | Local storage | Until revoked | Amazon marketplace used for your links. |
Third-party domains that may be contacted for this purpose: amazon-adsystem.com, assoc-amazon.com, affiliate-program.amazon.com, doubleclick.net, googlesyndication.com, connect.facebook.net, facebook.com/tr, analytics.tiktok.com, ads.linkedin.com, static.ads-twitter.com, ct.pinterest.com, sc-static.net, impact.com, awin1.com, shareasale.com
Email open/click measurement and attribution of visits coming from emails.
Set only after your consent
| Name | Type | Lifetime | Role |
|---|---|---|---|
| pp_email_(prefix) | Local storage | Until revoked | Attribution of a visit coming from an email. |
Third-party domains that may be contacted for this purpose: list-manage.com, sendgrid.net, mailchimp.com, klaviyo.com, customer.io
Your rights (GDPR)
Legal basis: strictly necessary cookies rely on our legitimate interest in providing a working site (art. 6(1)(f)). Every other purpose relies solely on your freely given, specific, informed and unambiguous consent (art. 6(1)(a)), collected purpose by purpose before anything is stored.
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time, as easily as you gave it.
Measurement data is kept for 13 months at most, then deleted or aggregated. Session identifiers are anonymous and cannot identify you by name.
To exercise your rights, write to privacy@cuddlia.com. You may also lodge a complaint with your supervisory authority (CNIL in France, Commission d'accès à l'information in Québec for Law 25).
California residents (CCPA/CPRA)
We do not sell your personal information and we do not “share” it within the meaning of the CPRA, i.e. for cross-context behavioural advertising. No ad network is present on the site.
You have the right to know which categories of information are collected and why, to request a copy, to request deletion, to correct inaccurate information, to limit the use of sensitive information (we collect none), and not to be discriminated against for exercising these rights.
Global Privacy Control (GPC): by default no optional purpose is enabled until you click. A GPC signal is therefore honoured by design and never turns a purpose on for you.
To exercise a CCPA/CPRA right, write to privacy@cuddlia.com with the subject “California privacy request”; we answer within 45 days.
Change or withdraw your choice
The “Cookie settings” link at the bottom of every page reopens the consent panel: accepting and declining take the same number of clicks, and no purpose is pre-ticked.
Withdrawing consent immediately deletes the related identifiers in your browser, blocks the matching scripts and requests again, and switches Google Consent Mode back to “denied”.
You can also block or delete cookies in your browser's privacy settings; private browsing clears them when the window closes.