Cookie policy
Last updated: July 26, 2026
In summary:SprintLead only uses technical cookies that are strictly necessary for the operation of the service (session and authentication). Internal audience measurement and, if configured, PostHog only start after your consent. No advertising, no sharing with advertising agencies.
What is a cookie?
A cookie is a small text file placed on your device by the browser when you visit a site. It allows the site to remember information (preferences, connection session, etc.) to offer you a consistent experience. Some cookies are essential for the operation of the service, others are optional.
Cookies used by SprintLead
| Name | Purpose | Type | Retention |
|---|---|---|---|
| __Secure-authjs.session-token | Maintain login session | Technical | 30 days |
| __Host-authjs.csrf-token | Protection against CSRF attacks | Technical | Session |
| __Secure-authjs.callback-url | Redirection after authentication | Technical | Session |
| sprintlead-cookie-consent | Remember your choice on this banner (local storage) | Technical | 6 months |
| sl_locale | Remember the selected language | Preferences | 1 year |
| sl_chat_sid | Restore the support conversation when chat is enabled | Technical | 1 year |
| sl_legal_acceptance | Secure the acceptance record during signup | Technical | 1 hour |
| sl-theme | Remember light/dark theme | Preferences | 1 year |
| __stripe_mid | Fraud prevention (Stripe) | Technical | 1 year |
| __stripe_sid | Payment session (Stripe) | Technical | 30 min |
Technical cookies (strictly necessary)
These cookies are essential for the operation of the service. They do not require your consent (Article 82 of the Data Protection Act):
Authentication : Maintain your session after login
Security : CSRF Protection and Fraud Detection
Preferences : Light/Dark Theme, Language
Payment : Stripe session during checkout
Analytics cookies
After your consent, SprintLead may enable internal audience measurement and, if configured, PostHog. The following safeguards are applied:
✓ No event before explicit consent
✓ URL parameters and fragments removed
✓ Authentication pages and other sensitive pages excluded
✓ No email, account ID, IP or user-agent retained by internal measurement
✓ Local analytics identifier deleted if you refuse or withdraw your consent
Measurement is limited to a minimized page path and explicitly instrumented product events. You can withdraw your consent at any time from the cookie manager.
Third-party cookies
Depending on the actions performed and the service configuration, the following providers may store cookies or local identifiers:
Manage your preferences
You can set your choice here at any time, and it takes effect immediately. Withdrawing it is as easy as giving it.
Cookies essentiels
Sign-in, security, and payment. The service does not work without them: they are exempt from consent and cannot be switched off here.
Anonymous audience measurement
Page views and journeys, with no advertising identifier and no resale. Rejecting degrades nothing.
Loading your preferences…
You can also block or delete cookies directly from your browser:
⚠️ Blocking technical cookies may degrade or prevent the operation of the service (connection, payment).
Shelf life
In accordance with the CNIL recommendation, the maximum duration of cookies is limited to 13 months. The precise durations per cookie are indicated in the table above.
Your rights
In accordance with the GDPR and the Data Protection Act, you have the rights of access, rectification, opposition and deletion. To exercise them:
Contact: GDPR contact form · Response within 30 days. See also our Privacy Policy.
Contact
For any questions relating to cookies: GDPR contact form
You can also file a complaint with the CNIL: cnil.fr.