Table of contents
Last updated: September 3, 2026
This page explains how Charik uses cookies on www.charik.app and the crm.charik.app application. Charik is operated by Charik SAS, a French company registered in Paris. This English version is provided for convenience; the French version at charik.app/cookies is the reference under French and EU law.
1. What is a cookie?
A cookie is a small text file stored on your device (computer, smartphone, tablet) when you visit a website. Cookies let the site recognise your device on later visits, remember your preferences, measure audience and, for some categories, tailor commercial communication. This policy covers cookies and equivalent technologies (pixels, local storage, session storage) used on both charik.app and crm.charik.app.
2. Legal framework and Consent Mode V2
Our use of cookies is governed by the GDPR (EU Regulation 2016/679), the ePrivacy Directive (2002/58/EC), the French LCEN and the guidelines of the CNIL.
On www.charik.app, no non-essential cookie is placed before you explicitly choose via our banner. We use Google Consent Mode V2 with all four signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) set to denied by default. Until you accept, Google tools (GA4, Google Ads) only receive anonymous, non-identifying pings without cookies on your device.
On crm.charik.app (our authenticated customer application), product analytics rely on contract performance and legitimate interest to improve the service. Advertising cookies are never used on the CRM.
3. Cookie categories
- Essential: needed for the site to work and for security, no consent required
- Functional: remember your preferences (language, theme, layout)
- Analytics: help us understand usage of the site and the CRM (audience, journeys, UX)
- Advertising: measure the performance of our Google Ads campaigns and build remarketing audiences
4. Essential cookies
These cookies are indispensable and are placed without consent (legal basis: legitimate interest, contract performance).
| Name | Set by | Purpose | Retention |
|---|---|---|---|
charik-cookie-consent-v1 |
charik.app (localStorage) | Stores your consent choices | 13 months |
charik_session, csrf_token |
crm.charik.app | Authenticated user session, CSRF protection | Session / 30 days |
__cf_bm |
Cloudflare | Bot detection and anti-scraping | 30 minutes |
cf_clearance |
Cloudflare | Turnstile / security challenge validation | 30 min to 1 year depending on config |
5. Functional cookies
| Name | Set by | Purpose | Retention |
|---|---|---|---|
pll_language |
Polylang (charik.app) | Remembers the chosen language (FR / EN) | 1 year |
charik_view_prefs |
crm.charik.app | Remembers your display preferences (columns, filters, sort) | 90 days |
crisp-client/session/* |
Crisp | Preserves the chat history so the conversation can continue across visits | 6 months |
6. Analytics and behavioural cookies
These cookies require your consent (Analytics option in the banner). We use them to understand how you navigate and to improve our pages.
| Service | Cookies / storage | Purpose | Retention |
|---|---|---|---|
| Google Analytics 4 via Google Tag Manager (ID G-FDQ73S0LLY) |
_ga, _ga_FDQ73S0LLY, _gid |
Anonymised audience measurement, user journeys, product conversions. IP is truncated before storage. | _ga: 13 months_gid: 24 h |
| Microsoft Clarity | _clck, _clsk, CLID, MUID, ANONCHK, SM |
Anonymised session recording, heatmaps, behavioural analytics to improve UX. Form field values are masked by default. | _clck: 1 year _clsk: 24 h MUID: 1 year |
| Google Tag Manager (container GTM-KWF3R4N9) |
None of its own | Loads and orchestrates the other tags according to your consent preferences. Does not set cookies itself. | N/A |
7. Advertising cookies
These cookies require your consent (Advertising option in the banner). We only use them on www.charik.app to measure our Google Ads campaigns and re-engage visitors who showed interest in Charik. They are never placed on crm.charik.app.
| Service | Cookies | Purpose | Retention |
|---|---|---|---|
| Google Ads (account AW-16459038127) |
_gcl_au, _gcl_aw, _gcl_gb |
Google Ads conversion attribution, campaign ROI measurement. | 90 days |
| Google Ads Remarketing (via doubleclick.net) |
IDE, test_cookie |
Building remarketing audiences on Google ad networks. No advanced cross-site profiling. | IDE: up to 13 months |
8. Embedded third-party services
Some features rely on third-party services that may set their own technical cookies:
| Service | Role | Privacy |
|---|---|---|
| Crisp | Live chat support widget available at the bottom right of the site and CRM. | Crisp policy |
| Stripe | Secure payment processing for Charik subscriptions. Only loaded on checkout pages. | Stripe policy |
| YouTube (nocookie mode) | Tutorial videos embedded via youtube-nocookie.com, which only sets cookies after you click on the player. |
Google policy |
| Google Fonts | Typography. Requests to fonts.googleapis.com do not set persistent cookies. |
Google policy |
| Cloudflare | CDN, DDoS protection and bot management. __cf_bm and cf_clearance are listed under Essential cookies. |
Cloudflare policy |
| OVHcloud | Hosting of product data in France. No cookie set on visitors. | OVHcloud policy |
| Pennylane | Native connector for customer invoicing. No cookie set on public site visitors. | Pennylane policy |
9. Retention
In line with CNIL guidance, the maximum retention of a non-essential cookie is 13 months. After that, your consent is requested again. You can withdraw consent at any time (see next section).
10. Managing your preferences
10.1 Banner and preferences bubble
On your first visit, a banner lets you accept, reject or customise your choices. You can reopen these settings any time using the button below, or the cookie bubble at the bottom-left of every page.
10.2 Browser settings
You can also manage cookies directly from your browser:
10.3 Google Analytics opt-out
Google provides an official Google Analytics opt-out add-on which blocks all GA4 measurement across every website you visit.
11. Contact
For any question about this policy or the processing of your data:
Email: [email protected]
Data Protection Officer (DPO): [email protected]
Mail: Charik — Data Protection, 10 rue de Penthièvre, 75008 Paris, France
See also our privacy policy for the full details on personal data processing.