Síguenos en
COOKIE MANAGEMENT POLICY – MYTRAFFIC
Version 1.1 – October 2026
Subject : Cookie Management Policy – MyTraffic
Author Mané DAMJANOVIC
Effective date 20/12/2025
Version / Revision date Version 1 – 20/05/2025
Scope All MyTraffic staff
Review Yaël COHEN (DPO – MyTraffic) and Simon Boissinot
Approval Hakim SAADAOUI (CEO – MyTraffic)
1. PURPOSE OF THE POLICY
This policy aims to inform you clearly and transparently about the use of cookies and other trackers by MyTraffic on its website (www.mytraffic.io) and its SaaS platform, in accordance with the requirements of the GDPR and the guidelines of the CNIL.
2. WHAT IS A COOKIE?
A cookie is a text file placed on your device (computer, mobile, tablet) when you visit a website. It allows its issuer to identify the device on which it is stored, for a limited period of validity, and to collect browsing information.
3. TYPES OF COOKIES USED
Like most websites, Mytraffic and its partners use cookies or similar technologies in order to analyse trends, manage cookies or similar technologies to track the use and performance of its site. This information may include the IP address (Internet Protocol), the browser type, the Internet service provider (ISP), the referring/exit pages, the pages viewed on our site (HTML pages, graphics, etc.), the OS, the date (time stamp), and/or the path (clickstream) to observe / measure site usage and help us improve it.
Depending on the CNIL's recommendations, these cookies may or may not be exempt from consent.
For cookies exempt from consent : You can control the use of cookies through your browser, but if you disable certain cookies, this may affect or limit access to certain features of our site.
For cookies subject to consent: The user's consent is stored in Mytraffic's cookie manager.
Each user may withdraw their consent at any time by accessing the cookie manager.
On the website:
In managing visitors to its website, Mytraffic uses the following types of cookies:
The user may then, at any time, by going to the cookie manager, configure their browser software to object in part or in full to the storage of cookies on their device.
As soon as you arrive on the site, a cookie management banner allows you to:
- accept
- refuse
- or customise cookies by purpose.
No non-essential cookie (analytics, marketing or non-exempt audience measurement) is placed on your device until you have expressed an explicit choice.
You can change your preferences at any time via the “Cookie management” link available at the bottom of the page.
3.1. Cookies strictly necessary for the site to function (exempt from consent)
Certain cookies are essential to ensure the proper functioning of the website and the SaaS platform, as well as to guarantee browsing security. In accordance with the CNIL's guidelines, these cookies are exempt from consent, because they are indispensable to the provision of the service explicitly requested by the user.
These cookies notably enable:
- authentication and the management of user sessions (session cookies);
- securing access to accounts (technical and anti-CSRF cookies);
- the detection and prevention of technical errors;
- login management on the SaaS platform;
- retaining the language or display choice;
- the functioning of the consent management banner.
Without these cookies, certain features could not be provided, and access to the site or the platform could be impaired.
These cookies do not collect any data for marketing or analytics purposes.
3.2 Cookies used on the website (www.mytraffic.io)
3.3. Cookies used on the SaaS platform (app.mytraffic.io)
On the SaaS platform:
In order to offer the best service to users of its SaaS platform, Mytraffic uses the following types of cookies:
Crisp cookies (online chat)
The Crisp tool used on the SaaS platform places two types of cookies:
(a) Strictly necessary cookies (exempt from consent)
These cookies are indispensable to the functioning of the chat and enable:
- management of the chat session,
- display and persistence of the widget across pages,
- continuity of exchanges,
- security of the service.
These cookies are not used to track the user's browsing or to build a profile.
Legal basis: legitimate interest + exemption provided for by Article 82 of the French Data Protection Act.
(b) Analytics or behavioural cookies (subject to consent)
Crisp may also place, where the user consents, cookies intended to:
- analyse the use of the chat,
- improve the quality of customer support,
- measure users' interaction with the widget.
These cookies are only activated after the user's explicit consent via the cookie management banner.
Legal basis: consent (Article 6.1.a of the GDPR).
The Amplitude software analyses the behaviour (pages visited, clicks, time spent) of visitors (Mytraffic customers) on the SaaS platform (anonymising their data).
The Hotjar software also analyses the behaviour (mouse movement) of visitors (Mytraffic customers) on the SaaS platform (anonymising their data).
On the website and the platform, in any event, the cookies placed on your browsing device are destroyed 13 months after they are placed on your device.
We decline all responsibility for the consequences linked to the degraded functioning of our services resulting from the impossibility of recording or reading the cookies necessary for their functioning that you have refused or deleted.
For more information on cookies, you can consult the CNIL's website.
Important — In accordance with the CNIL's guidelines, Google Analytics, Hotjar and all non-exempt audience measurement tools are never placed without the user's explicit consent. None of these tools is triggered until the user has clicked “Accept” in the consent banner.
3.4. Meta advertising (Facebook / Instagram) — Pixel and server-side sending
When you accept the “Meta (Facebook/Instagram)” purpose in the consent banner, MyTraffic shares certain data with Meta Platforms Ireland Ltd. in order to measure and optimise its advertising campaigns on Facebook and Instagram. This sharing takes place in two complementary ways: (i) via the Meta Pixel placed in your browser, and (ii) directly from MyTraffic's servers, using Meta's Conversions API, including when the Pixel is blocked by your browser.
The data thus transmitted includes online identifiers in hashed form (for example your email address and your account identifier), technical and browsing information (including the IP address and the device type) as well as Meta cookie identifiers (_fbp / _fbc). Hashing does not make this data anonymous: it allows Meta to recognise you among its own users.
For the collection and transmission of this data, MyTraffic and Meta act as joint controllers within the meaning of Article 26 of the GDPR. Meta acts as an independent controller for the processing it subsequently carries out on its own behalf. The legal basis for this sharing is your consent (Article 6.1.a of the GDPR and Article 82 of the French Data Protection Act), which you can withdraw at any time via the “Cookie management” link. No data is transmitted to Meta until you have accepted the “Meta” purpose.
This sharing involves a transfer of data to the United States. It is framed by Meta's certification under the EU–U.S. Data Privacy Framework and, as a complementary safeguard, by the European Commission's standard contractual clauses. Meta retains this data for a period of up to 2 years.
You may exercise your rights (access, erasure, withdrawal of consent, objection) both with MyTraffic and directly with Meta. For more details on recipients, transfers and your rights, see our Personal Data Management Policy.
4. Legal basis applicable to cookies
In accordance with Article 82 of the French Data Protection Act and Article 6 of the GDPR, the cookies used by MyTraffic rely on the following legal bases:
Strictly necessary cookies (indispensable to the functioning of the site and the SaaS platform)
These cookies are exempt from consent, because they enable:
- authentication and session management,
- securing access to accounts,
- the detection of technical errors,
- the retention of essential preferences (language, consent management).
They rely on MyTraffic's legitimate interest (Art. 6.1.f) and the exemption provided for by Article 82.
Analytics and audience measurement cookies: These cookies make it possible to understand the use of the site or the SaaS platform, to improve the user experience and to optimise our services (e.g. Google Analytics, Hotjar, Amplitude, MixPanel, Segment).
- These cookies are subject to the user's prior consent.
- No analytics cookie is placed until the user has explicitly accepted the “Analytics” purpose.
Legal basis:
→ Consent (Art. 6.1.a)
5. COOKIE VALIDITY PERIOD
Cookies are retained for a maximum period of 13 months from the time they are placed. Beyond that, they are automatically deleted or renewed after a new consent.
6. MANAGING COOKIES
On your first visit, a banner allows you to manage your preferences: accept, refuse or customise cookies by purpose. You can change your choice at any time via the “Cookie management” link at the bottom of the page.
6.1. Consent Management Platform (CMP)
MyTraffic uses a consent management platform (CMP) compliant with the CNIL's guidelines in order to collect, store and record users' choices regarding cookies.
The CMP:
- displays the consent banner from the first visit;
- allows cookies to be accepted, refused or customised by purpose;
- keeps proof of consent or refusal in a dedicated cookie;
- allows the user to change their choice at any time via the “Cookie management” link at the bottom of the page.
The preferences expressed are retained for a maximum period of 6 months, after which the banner will be presented again.
6.2 Analytics cookies on the SaaS platform
The analytics tools used on the SaaS platform (app.mytraffic.io) make it possible to analyse product usage in order to improve features, detect anomalies and optimise the user experience. In accordance with the CNIL's recommendations:
Amplitude, MixPanel, Segment and Hotjar are non-exempt audience measurement tools; these tools are only placed after the user's explicit consent for the “Analytics” purpose;
- when they are activated, the data collected is pseudonymised and does not allow a user to be directly identified;
- no sensitive personal data is collected or cross-referenced.
Legal basis: consent (Article 6.1.a of the GDPR).
7. DATA CONTROLLER AND CONTACT
Controller: MyTraffic – 12 rue Vivienne, 75002 Paris
Contact: privacy@mytraffic.com
DPO: Me Yaël COHEN-HADRIA – yael.cohen.hadria@ey-avocats.com
8. UPDATING THE POLICY
This policy is liable to be amended. In the event of a substantial change, a notification will be sent to you via a banner or dedicated message. We invite you to consult it regularly.
APPENDIX 1
Website cookies (www.mytraffic.io)
4.2 SaaS platform cookies (app.mytraffic.io)
