Cookie policy
Last updated: July 26, 2026
In summary: without your consent, SprintLead only uses technical cookies strictly necessary for the service (session and authentication). Google Tag Manager, Google Analytics and internal audience measurement start only after your consent. No advertising, no sharing with advertising agencies.
What is a cookie?
A cookie is a small text file placed on your device by the browser when you visit a site. It allows the site to remember information (preferences, connection session, etc.) to offer you a consistent experience. Some cookies are essential for the operation of the service, others are optional.
Cookies used by SprintLead
| Name | Purpose | Type | Retention |
|---|---|---|---|
| __Secure-authjs.session-token | Maintain login session | Technical | 30 days |
| __Host-authjs.csrf-token | Protection against CSRF attacks | Technical | Session |
| __Secure-authjs.callback-url | Redirection after authentication | Technical | Session |
| sprintlead-cookie-consent | Remember your choice on this banner (local storage) | Technical | 6 months |
| sl_locale | Remember the selected language | Preferences | 1 year |
| sl_chat_sid | Restore the support conversation when chat is enabled | Technical | 1 year |
| sl_legal_acceptance | Secure the acceptance record during signup | Technical | 1 hour |
| sl-theme | Remember light/dark theme | Preferences | 1 year |
| sl_ref | Credit the sign-up to the referral link that was followed | Parrainage | 30 days |
| __stripe_mid | Fraud prevention (Stripe) | Technical | 1 year |
| __stripe_sid | Payment session (Stripe) | Technical | 30 min |
Technical cookies (strictly necessary)
These cookies are essential for the operation of the service. They do not require your consent (Article 82 of the Data Protection Act):
Authentication : Maintain your session after login
Security : CSRF Protection and Fraud Detection
Preferences : Light/Dark Theme, Language
Payment : Stripe session during checkout
Analytics cookies
Without your consent, an anonymous audience measurement counts visits: pages viewed, origin, time spent, country and device type. It sets no cookie and keeps no lasting identifier: a session identifier lives in the tab and disappears when it closes or after 30 minutes of inactivity. It falls under the consent exemption provided by the CNIL; you can object to it in the cookie manager below.
After you consent, SprintLead enables Google Tag Manager, which loads Google Analytics, and its internal audience measurement. The following safeguards apply to internal measurement:
✓ No event before explicit consent
✓ URL parameters and fragments removed
✓ Authentication pages and other sensitive pages excluded
✓ No email, IP address or user-agent in journey events; events are linked to your account when signed in
✓ Measurement identifiers and Google Analytics cookies deleted if you refuse or withdraw consent
✓ Fixed-lifetime identifiers, never extended at each visit
With your consent, we record a minimized page path, product milestones, campaign parameters and the referring domain. When signed in, these events can be linked to your account so authorized administrators can understand your journey; if you create an account, the visits made beforehand from this browser are linked to it too. No form contents, prospect identifiers or sensitive URL parameters are collected. You can withdraw consent in cookie settings.
| Name | Purpose | Retention |
|---|---|---|
| sl_aud_session | Group the pages of a visit for the anonymous measurement, without consent (session storage) | 30 minutes of inactivity |
| sl_exit_asked | Ask the pricing page question only once per visit (session storage) | Until the tab is closed |
| sl_analytics_id | Link the steps of your journey (cookie and local storage) | 1 year, not extended |
| sl_first_touch_v1 | Remember the source of your first visit (local storage) | Same as sl_analytics_id |
| sl_journey_session, sl_landing_session | Group the pages of one visit (session storage) | 30 minutes of inactivity |
| sl_visitor_id, sl_session_id | Count visits and online presence (local and session storage) | 13 months, not extended |
| _ga, _ga_KL0060Y64V | Google Analytics audience measurement | Up to 2 years (set by Google) |
Third-party cookies
Depending on the actions performed and the service configuration, the following providers may store cookies or local identifiers:
Manage your preferences
You can set your choice here at any time, and it takes effect immediately. Withdrawing it is as easy as giving it.
Cookies essentiels
Sign-in, security, and payment. The service does not work without them: they are exempt from consent and cannot be switched off here.
Anonymous audience measurement
Number of visits, pages viewed, origin and time spent, with no cookie, no lasting identifier and no link to your account. It does not require your consent, but you can object to it.
Journey analysis and Google Analytics
Journey linked to your account if you create one, and Google Analytics. No advertising identifier and no resale. Refusing degrades nothing.
Loading your preferences…
You can also block or delete cookies directly from your browser:
⚠️ Blocking technical cookies may degrade or prevent the operation of the service (connection, payment).
Shelf life
In accordance with the CNIL recommendation, the maximum duration of cookies is limited to 13 months. The precise durations per cookie are indicated in the table above.
Your rights
In accordance with the GDPR and the Data Protection Act, you have the rights of access, rectification, opposition and deletion. To exercise them:
Contact: GDPR contact form · Response within 30 days. See also our Privacy Policy.
Contact
For any questions relating to cookies: GDPR contact form
You can also file a complaint with the CNIL: cnil.fr.