Cookies

Atlas uses a small number of cookies to operate the platform. This page explains which cookies we set, why we set them, and what choices you have. We keep our cookie footprint as small as possible: no advertising networks, no cross-site tracking, no third-party retargeting.

A cookie is a small text file stored in your browser when you visit a website. Cookies serve different purposes: some are essential for a site to function, others help us understand how the platform is used in aggregate. We describe each category below.

These cookies are required for the platform to function and cannot be switched off. They are set by NextAuth, the authentication library that powers Atlas sign-in.

• Session cookie (name: next-auth.session-token or __Secure-next-auth.session-token on HTTPS): keeps you signed in across page loads. It expires when you sign out or when the session duration lapses.
• CSRF cookie (name: next-auth.csrf-token): protects sign-in and sign-out actions against cross-site request forgery attacks.
• Callback/state cookies: short-lived cookies used during the OAuth or email sign-in flow to preserve state across redirects. They are deleted once authentication completes.

No consent is required for strictly necessary cookies because they are essential to deliver the service you have requested.

Atlas uses Sentry to capture JavaScript errors and server-side exceptions. When an unhandled error occurs, Sentry records a diagnostic report that includes the error message, a stack trace, the URL, the browser version, and the operating system. This information is used solely to identify and fix software bugs.

Session replay is not used. We do not record or reconstruct your screen activity, mouse movements, or keystrokes. Sentry only receives error events, not a continuous recording of your session.

We rely on our legitimate interest in maintaining a stable and secure platform as the legal basis for this processing. Error data is retained for [TO BE COMPLETED] days and is not used for advertising or profiling.

We measure how the platform is used in order to understand which features are valuable and where we should invest. Our analytics are:

• First-party: data is collected directly by Atlas and is not shared with advertising networks.
• Privacy-friendly: we do not build individual user profiles or link analytics events to your identity for marketing purposes.
• Aggregate: reports show trends across all users (page views, feature usage, session counts), not individual behavior.

Details of the analytics tooling and its data-processing terms are available on request at [TO BE COMPLETED].

Under the GDPR and the French data protection rules enforced by the CNIL (the French data protection authority), a consent banner is required only when a site drops cookies or uses trackers for purposes that require user consent, such as advertising, cross-site behavioral tracking, or non-essential profiling.

Atlas does not do any of those things. Specifically:

• Our session and CSRF cookies are strictly necessary, and strictly necessary cookies are exempt from the consent requirement.
• Our error-monitoring data (Sentry) is processed under legitimate interest for platform stability and security, and does not require consent.
• Our audience measurement is first-party and aggregate, and does not involve cross-site tracking or individual behavioral profiling.

Because we run no consent-requiring trackers, no banner is necessary. If we introduce any new cookies or tracking technologies in the future, we will update this page and add a consent mechanism if required.

You can control and delete cookies through your browser settings. The major browsers provide dedicated cookie management interfaces:

• Chrome:Settings > Privacy and security > Cookies and other site data.
• Firefox:Settings > Privacy & Security > Cookies and Site Data.
• Safari:Preferences > Privacy > Manage Website Data.
• Edge:Settings > Cookies and site permissions > Cookies and site data.

Please note that blocking or deleting the strictly necessary cookies described above will prevent you from signing in to Atlas, as the platform requires those cookies to authenticate your session.

If you have questions about our use of cookies, contact us at [TO BE COMPLETED].