Cookies

Soft Atlas uses a small number of cookies to operate the platform. This page explains which cookies we set, why we set them, and what choices you have. We keep our cookie footprint as small as possible: no advertising networks, no cross-site tracking, no third-party retargeting. One cookie, the audience measurement cookie described below, is optional and is set only if you accept it.

A cookie is a small text file stored in your browser when you visit a website. Cookies serve different purposes: some are essential for a site to function, others help us understand how the platform is used in aggregate. We describe each category below.

These cookies are required for the platform to function and cannot be switched off. They are set by NextAuth, the authentication library that powers Soft Atlas sign-in.

• Session cookie (name: next-auth.session-token or __Secure-next-auth.session-token on HTTPS): keeps you signed in across page loads. It expires when you sign out or when the session duration lapses.
• CSRF cookie (name: next-auth.csrf-token): protects sign-in and sign-out actions against cross-site request forgery attacks.
• Callback/state cookies: short-lived cookies used during the OAuth or email sign-in flow to preserve state across redirects. They are deleted once authentication completes.

No consent is required for strictly necessary cookies because they are essential to deliver the service you have requested.

Attribution cookie (name: atlas_ft): on your first visit, we record which channel brought you here, taken from the referring site your browser announces, from any campaign tag in the address, and from the first Soft Atlas page you opened. It is stored for 90 days, is never updated afterwards, and is read only if you go on to create an account, in which case that channel is saved on your account.

It records a channel, such as LinkedIn, Google or Direct, and never the full address of the page you came from. It is a first-party cookie: it is not shared with anyone, and it cannot follow you to other websites.

Google Analytics cookies (names beginning with _ga): they let us count visits, see which pages are read and understand how people move through the site. The recipient is Google Ireland Limited, acting as our processor, and the measurement may involve a transfer to the United States under the safeguards described in our Privacy Policy.

This cookie is not strictly necessary, so we ask first. Until you accept, nothing is stored and no request is made to Google: the measurement script is not even loaded. If you accept, the cookie is kept for up to 13 months, and the data it feeds is retained for up to 14 months.

We do not use Google Analytics for advertising: no advertising features, no remarketing audiences, no sharing of the data with Google for its own purposes.

You can change your answer whenever you like, from the button below or from the footer of any page. Refusing after having accepted switches the measurement off straight away and deletes the cookies it had set.

Soft Atlas uses Sentry to capture JavaScript errors and server-side exceptions. When an unhandled error occurs, Sentry records a diagnostic report that includes the error message, a stack trace, the URL, the browser version, and the operating system. This information is used solely to identify and fix software bugs.

Session replay is not used. We do not record or reconstruct your screen activity, mouse movements, or keystrokes. Sentry only receives error events, not a continuous recording of your session.

We rely on our legitimate interest in maintaining a stable and secure platform as the legal basis for this processing. Error data is retained for 90 days and is not used for advertising or profiling.

Under the GDPR and the French data protection rules enforced by the CNIL (the French data protection authority), consent is required before a site stores or reads anything on your device for a purpose that is not strictly necessary. Audience measurement is one of those purposes, so on your first visit we show a banner asking the question.

The banner offers exactly two answers, Accept and Refuse, side by side, the same size and one click apart. Refusing is never harder than accepting, and refusing costs you nothing: every page of Soft Atlas works identically either way. Your answer is remembered in your browser's local storage, not in a cookie, so we do not have to store anything about you in order to remember that you said no.

The rest of what we set needs no consent, and here is why:

• Our session and CSRF cookies are strictly necessary, and strictly necessary cookies are exempt from the consent requirement.
• Our attribution cookie is first-party, records a channel rather than an identity, is never shared and cannot follow you to other sites.
• Our error-monitoring data (Sentry) is processed under legitimate interest for platform stability and security, and does not require consent.

Note: Soft Atlas also collects certain usage data linked to your account (for example, to improve the product and support moderation). This does not involve any additional cookie , it is described in our Privacy Policy, which covers all processing of personal data, whether or not it involves a cookie.

You can control and delete cookies through your browser settings. The major browsers provide dedicated cookie management interfaces:

• Chrome:Settings > Privacy and security > Cookies and other site data.
• Firefox:Settings > Privacy & Security > Cookies and Site Data.
• Safari:Preferences > Privacy > Manage Website Data.
• Edge:Settings > Cookies and site permissions > Cookies and site data.

Please note that blocking or deleting the strictly necessary cookies described above will prevent you from signing in to Soft Atlas, as the platform requires those cookies to authenticate your session.

If you have questions about our use of cookies, contact us at hello@softatlas.io.