Cookie policy

1. What is a cookie?

A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. It allows the website to recognise your browser, remember your preferences, or measure its audience.

This policy also applies to similar technologies (local storage, session storage, pixels, tags) that we use on https://www.rushly-ai.app.

2. Your choices

In accordance with the recommendations of the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority) and the ePrivacy Directive, cookies that are not strictly necessary are placed only after your explicit consent. This consent is requested through a banner on your first visit. You can withdraw it at any time.

3. Categories of cookies used

Strictly necessary cookies

Essential for the website to work. They do not require consent (Article 82 of the French Data Protection Act, loi Informatique et Libertés, LIL). If you create an account or sign in, a session cookie (sb-…-auth-token, set by our authentication provider Supabase for Rushly) keeps you signed in. The other necessary trackers are stored locally in your browser (local storage), not sent to a third-party server.

• rushly_consent (local storage): remembers your cookie consent choice, so that the banner is not shown again on every visit. Retention: about 6 months.
• rushly_utm (local storage): keeps the traffic source (UTM parameters) that brought you to the website, for attribution purposes. Retention: 30 days.
• rushly_attr (local storage + first-party cookie): remembers how you first arrived: the domain name of the referring site (for example a search engine or an AI assistant), the landing page and any campaign parameters (UTM) of our own links. Purpose: knowing the origin of each account, in order to know which content brings in customers. We keep neither the full address of the referring page, nor your search terms; no advertising identifier is used and no data is sent to a third party or cross-referenced with other websites. Attachment to the account: if you create an account, this origin is saved to your account (an origin can only be attached to a single account). Legal basis: our legitimate interest in measuring the effectiveness of our content (Art. 6(1)(f) GDPR); you can object to it by writing to us (see section 6). Retention: 90 days in your browser.

Visit journey (only with your consent)

These purposes were added on 25 September 2026: your consent choice was therefore asked for again on that date.

If you accept audience measurement, we also keep, in your browser, a short log of your visit, to understand what helps people decide (for example: “read the Pricing page, then downloaded the plugin”). Without this consent, none of this is created, and if you withdraw it, everything is erased immediately.

• rushly_vid (local storage): a random visitor identifier, unrelated to your identity.
• rushly_journey (local storage): the last 30 steps of your visit: the date, the page (its path, without address parameters, except our UTM campaign parameters) and the type of step (page viewed, pricing table viewed, click on a plan, download, start of sign-up). No form input, no email address.

If you create an account, this identifier and this log are saved to your account, and the visitor identifier is attached to your payment with Stripe Payments Europe Ltd.. Once you are signed in, your account identifier is also sent to Google Analytics 4 to link your visit to your account. Legal basis: your consent (Art. 6(1)(a) GDPR). Retention in your browser: until you withdraw your consent or it expires (about 6 months).

Payment cookies (Stripe)

When you start a payment flow, our provider Stripe Payments Europe Ltd. places cookies on its own domains (stripe.com, js.stripe.com) for security and fraud prevention purposes. These cookies are necessary for the proper completion of the transaction.

Stripe cookie policy: stripe.com/legal/cookies-policy.

Audience measurement cookies

We use Google Analytics 4 + Microsoft Clarity + Meta Pixel to measure website traffic and improve its content. These cookies are placed only after your consent.

• Data collected: pages visited, duration, traffic source, device type.
• Anonymised data: no individual identification possible.
• Duration: 13 months maximum.

Anonymous, cookie-free audience measurement (no consent needed)

The key steps on the site (page view, opening the demo, quiz, download, opening checkout) are counted in our own database, even if you refuse cookies. This measurement meets the conditions of the CNIL exemption for audience measurement:

• Single purpose: counting visits and steps on the Rushly site. No cross-referencing with your account, your email or any other tool, and no sharing with third parties.
• No cookie. A randomly drawn visit number is kept in the tab's session storage (rushly_v). It disappears when you close the tab and is only used to count a visit once.
• Your IP address is never stored, nor is your browser. We keep the date, the step, the page, the language, the country (never the city), mobile or desktop, and the campaign parameters (utm_…) of the link you arrived from.
• No typed data (email, text) is ever sent. Results are only read as aggregated figures. Retention: 25 months at most.

You can object at any time, with one click: Your visit is counted. Stop counting me

Advertising cookies

Rushly uses the Meta Pixel (Meta Platforms, Inc.) to measure the effectiveness of its advertising campaigns (conversions) and, where applicable, to show retargeted ads on Meta platforms (Facebook, Instagram). This tracker, which places in particular the _fbp cookie, is enabled only after your marketing consent and is never loaded if you refuse it. The data sent to Meta may be hosted outside the European Union (see our privacy policy).

rushly_parrain (first-party cookie, also only after your marketing consent): if you arrive through the affiliate link of a Rushly user (?ref=…, or the former ?parrain=…), it keeps the code of that link so that, if you create an account, it can be attached to the person who recommended Rushly to you, who then earns a commission on your payments (see the affiliate programme). Neither your identity nor the details of your payments are shared with them. No other data, no third party. If you refuse, it is not set (and it is deleted if you withdraw your consent). Retention: 60 days.

4. Inventory of cookies and trackers

Here is the precise list of trackers actually placed depending on your choices. Audience measurement and advertising trackers are only placed after your consent.

The __stripe_mid and __stripe_sid cookies are placed by Stripe Payments Europe Ltd. on its own domains (stripe.com, js.stripe.com) only when you start a payment flow.

5. How can you manage your consent?

At any time, you can:

• Change your choices through the consent banner, available at the bottom of every page (“Manage my cookies” link).
• Configure your browser to block or delete cookies. Detailed instructions:
  • Chrome
  • Firefox
  • Safari
  • Edge

Please note: if you block the necessary local storage, your consent choice will not be remembered and the banner may reappear on every visit.

6. More information

To find out more about cookies and your rights, you can visit the website of the CNIL: cnil.fr/fr/cookies-et-traceurs.

For any question about cookies, you can write to us at hello@rushly-ai.app.