Privacy policy
Last updated: August 9, 2026
This page is a translation. In the event of any discrepancy, the French version prevails.
Who is responsible for your data
Jérémy Nourri, publisher of the CookieScan site (https://cookiescan.eu), acting as data controller.
Contact: contact@cookiescan.eu
What data we collect
CookieScan collects personal data at two specific moments:
When you ask to receive your scan report by email, or leave your email address to be contacted back:
- your email address;
- the URL of the store you scanned;
- the scan verdict (compliant / needs fixing / non-compliant);
- the interface language you used.
When you scan a store, we keep the scan result (technical report: detected trackers, cookies, verdict) so it can be cached and the same URL is not needlessly re-scanned shortly afterwards. That report contains no personal data about you: it documents the technical behaviour of the scanned store (cookies set, scripts loaded), not the identity of a visitor.
We set no cookies or trackers on CookieScan itself: no analytics, no advertising pixel, no audience measurement. That is consistent with what the tool helps you check on your own store.
Why we collect it (purpose)
- To send you the scan report you requested.
- To contact you back if you asked for help fixing a detected issue.
- To measure overall use of the service (number of scans, non-compliance rate) — never on an individual basis.
Legal basis
Your consent, given by filling in the form (email address + the “contact me back” / “send me my report” checkbox).
How long we keep it
- Email address and information relating to your request: kept until you ask for their deletion, or 2 years after the last contact.
- Scan reports: kept for 90 days for technical caching and product statistics, then deleted automatically.
Who your data is shared with
- Resend (email delivery provider), located in the United States — a transfer outside the EU framed by the European Commission’s standard contractual clauses.
- IONOS SARL, which hosts the site and may keep standard technical logs (IP address, connection date) for security purposes.
- We do not sell or share your data for advertising purposes.
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, contact us at contact@cookiescan.eu.
You may also lodge a complaint with the CNIL (cnil.fr), the French supervisory authority, or with the data protection authority of your country of residence.
Security
Data is stored in a protected database accessible to one person only. Emails travel encrypted (HTTPS/TLS) between your browser and our servers.
Changes
This policy may change. The last-updated date at the top of the page is the one that applies.