Cookie policy

Last updated: 7 October 2026

This policy informs users of the NeoPhi website and platform about the use of cookies and other trackers.

A cookie is a small file that a site stores on your device (computer, tablet, smartphone), or reads from it, when you visit a website or use an application.

Cookies are used in particular to make the www.neophi.ai website and the app.neophi.ai application work properly, to remember your preferences, to secure your sign-in and to measure audience and use of the service.

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and French law no. 2018-493 of 20 June 2018 on the protection of personal data allow the cookies that are strictly necessary for this website to work to be stored. Any other cookie requires the visitor’s consent.

These cookies are essential to the operation and security of the platform; they do not require prior consent.

• neophi_consent_v2 — Provider: F.initiatives. Purpose: remembers your choice for each category of cookies, the date of that choice and the version of this policy, so that the website and the application do not ask you separately; if you are signed in, the choice is also saved on your account. Duration: 6 months.
• mtm_consent_removed — Provider: F.initiatives (Matomo, self-hosted). Purpose: remembers your objection to anonymous audience measurement. Duration: 13 months at most (your browser caps the requested duration at 400 days).
• __Host-neophi-auth.jwt — Provider: F.initiatives. Purpose: keeps you signed in to the app.neophi.ai application, and to it alone. Duration: 30 days at most.
• __Host-neophi-auth.sid — Provider: F.initiatives. Purpose: secures your sign-in to the application with single-use values exchanged during it. Duration: 15 minutes.
• neophi-auth.jwt.signed-in — Provider: F.initiatives. Purpose: tells the www.neophi.ai website that you are signed in to the application, and with which account; it cannot be used to open a session. Duration: 1 hour, renewed while you use the application.

The application also keeps strictly technical values in your browser’s local storage: the state of the interface and the queue that synchronises your cookie choice.

Your decision is also recorded in our server logs — date, purposes, notice version — with no IP address and no visitor identifier.

A cookie we read without setting it

On the www.neophi.ai website, the neophi-auth.jwt.signed-in cookie is read without being set there: it comes from the application. Reading a cookie is still an access to your device, so we declare it. It has two uses: checking its signature, which decides which action button the header shows; and, when a visit is recorded for campaign attribution below, taking your account identifier from it to attach to that record. Your session itself is never sent to the website. Sign out of the application to remove it.

Subject to your consent, NeoPhi uses cookies that identify the channel that brought you here, the source of your visit or of an account creation. This information is used to assess how effective our communication is and to credit a sign-up to the channel it came from.

Nothing is stored before you agree, and nothing is stored on an ordinary visit: the link you followed must itself carry a campaign or partner parameter.

• neophi_visitor — Provider: F.initiatives. Purpose: links the visits of one browser through a pseudonymous identifier that only our servers can read. Duration: 180 days from when it is first set, never extended.
• neophi_utm — Provider: F.initiatives. Purpose: keeps the campaign of your first visit tagged in this way; the first signal received wins. Duration: 90 days.
• neophi_aff — Provider: F.initiatives. Purpose: keeps the partner link of your first visit tagged in this way. Duration: 90 days.

The application also keeps a copy of these campaign values in your browser’s local storage, under the same agreement, deleted after 90 days.

The information collected is: the visitor identifier, the campaign parameters, the partner code, the referring site reduced to its domain, the landing page, a timestamp, and your account identifier if you are signed in. If you have also accepted detailed audience measurement, a SHA-256 fingerprint of your IP address, salted and renewed every day, and your browser’s technical signature are added. The address itself is never recorded.

Subject to your prior consent, NeoPhi uses the Matomo audience measurement solution, hosted on its own infrastructure, to better understand how the website and the platform are used, to improve the services offered and to measure their performance.

The data collected are the pages viewed, the actions taken, some technical characteristics of the device used (type of device, browser, resolution) and a pseudonymised visitor identifier. When you are signed in to your account, this identifier may be linked to your pseudonymous user identifier.

No audience measurement data is passed to a third-party analytics provider.

• _pk_id — Provider: F.initiatives (Matomo, self-hosted). Purpose: identifies your browser pseudonymously from one visit to the next. Duration: 13 months.
• _pk_ses — Provider: F.initiatives (Matomo, self-hosted). Purpose: marks the current visit, so that its origin is not counted twice. Duration: 30 minutes.
• _pk_ref — Provider: F.initiatives (Matomo, self-hosted). Purpose: keeps where your visit came from (referring site or campaign); only set if your visit has one. Duration: 6 months.

These names carry a suffix specific to the Matomo property concerned and to your browser, which you see as such in your browser’s settings.

Subject to your prior consent, NeoPhi uses cookies that measure the effectiveness of advertising campaigns run on third-party platforms such as Meta, Google or LinkedIn, and that credit a visit, a sign-up or a subscription to an advertising campaign.

The data associated with this purpose may be passed to the advertising platforms concerned, under the conditions set out in their respective privacy policies.

With your agreement, our pages load the Google Tag Manager tag manager, which activates the Meta, Google and LinkedIn tags; without your agreement, it is not loaded.

• _fbc — Provider: Meta. Purpose: keeps the Meta ad click that brought you here. Duration: 90 days.
• _fbp — Provider: Meta. Purpose: identifies your browser pseudonymously for Meta’s advertising measurement. Duration: 90 days.
• li_fat_id — Provider: LinkedIn. Purpose: keeps the LinkedIn ad click that brought you here. Duration: 30 days.
• neophi_mkt — Provider: F.initiatives. Purpose: keeps the identifier of the ad click (Google, Meta or LinkedIn) that brought you here, to credit a demo request or a sign-up to that ad. Duration: 90 days.

These platforms may also set or read their own cookies on their own domains, for example LinkedIn: bcookie (1 year), li_gc (6 months) and lidc (24 hours). They are governed by their respective privacy policies.

Withdrawing your agreement deletes the advertising cookies set on our domain; they are not merely ignored.

To analyse traffic to the website, F.initiatives uses Matomo, self-hosted on its own infrastructure: no statistic passes through an analytics provider.

Audience measurement covers all visitors. Because Matomo is configured in line with the recommendations of the CNIL (the French data protection authority), the user’s consent is not required. As a result, for every visitor who has not consented to the audience cookie:

• no cookie is set;
• the IP address is truncated before it is recorded;
• campaign parameters are removed;
• there is no visits log and no visitor profile;
• no user account identifier is linked to the statistics;
• the data collected is kept for 180 days.

You can nevertheless object to this anonymous audience measurement with the “Object” button, in Cookie settings at the bottom of the page. If you clear your cookies or change browser, you will need to object again.

Campaign attribution data and statistics stay with F.initiatives, which is their only recipient.

The whole platform and its Matomo installation are hosted in France, within the European Union. This data is in no way passed to third parties for commercial purposes.

When you accept advertising cookies, the data processed by Meta, Google and LinkedIn is transferred outside the European Union, specifically to the United States.

At the date this policy was last updated, Meta, Google and LinkedIn adhere to the data protection framework agreed between the European Union and the United States, the “Data Privacy Framework”. This framework, recognised by the European Commission, aims to ensure an adequate level of protection for your data when it is transferred to the United States.

On the server side, attribution journey records are kept for one year — a period applied automatically by our database, longer than that of the cookie. The first-visit values attached to your account are never overwritten: they are kept with it and deleted with it.

On your first visit to the website, and then every 180 days, a banner lets you freely choose to accept, refuse or customise the cookies that require your consent.

The Cookie settings panel is always available from the bottom of the page, so you can change your choices at any time.

You can also block or delete cookies from your browser.

If you have a question, or to exercise your rights over your personal data, write to the dedicated address: dpo@f-initiatives.com.

Lodging a complaint with a national supervisory authority

https://www.cnil.fr/fr/plaintes/internet, and by post to:

Commission nationale de l’informatique et des libertés (CNIL)
3 place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07, France
Telephone: +33 (0)1 53 73 22 22