CookieDetox
Data Governance & GDPR Standards

Privacy Policy & Legal Notice

Last updated: September 20, 2026. CookieDetox practices the exact standards it audits: uncompromised transparency and an absolute Privacy-by-Design architecture.

1. Service Publisher & Legal Notice

The www.cookiedetox.org platform is published by the CookieDetox Observatory, an independent legal-tech initiative operated by Welink Tech SAS.

Company Name: Welink Tech (SAS)
Registered Office: 6 Rue des Bateliers, 92110 Clichy, France
Corporate Registration: SIREN: 984 800 136 | SIRET: 984 800 136 00017 | RCS Nanterre
Publication Director: The legal representative of Welink Tech SAS
DPO & Legal Inquiries: hello@cookiedetox.org
Infrastructure Hosting: Global Vercel Edge front-end / Render computation engine (EU)

2. Privacy-by-Design Architecture & Audience Telemetry

In sharp contrast to conventional web practices, CookieDetox sets zero advertising cookies, zero retargeting pixels (Meta, TikTok, Criteo, Google Ads), and zero commercial tracking IDs on your terminal. Google Consent Mode v2 advertising signals (ad_storage, ad_user_data, ad_personalization) are permanently locked to denied.

Audience Measurement & Telemetry (Google Analytics 4 / GTM): Our infrastructure operates Google Consent Mode v2 with a default status strictly set to denied (analytics_storage: 'denied'). No analytics cookies or persistent identifiers are placed without your positive, explicit opt-in. If you select "Reject all" or dismiss the banner, telemetry remains completely blocked and no tracking cookie is written to your browser.

Under Article 5(3) of the ePrivacy Directive (2002/58/EC) and GDPR Article 25, technical session data required for the counter-audit scanner (scan tokens and language preferences) are preserved locally in your own browser (localStorage) and are never transmitted to third parties without your explicit request.

3. Data Collection & Purposes

A. Public URL Scans:

When you submit an address for analysis, our headless crawler navigates the target website publicly just as a regulatory inspection bot would. Observed technical signals (HTTP Set-Cookie headers, loaded tags, piggybacking script dependencies) are processed solely for forensic scoring and comparative benchmarks.

B. Lead & Remediation Unlocking Forms:

If you request an executive audit dossier, we collect your professional email, company name, and functional role (E-commerce Executive, Traffic Manager, Lead Dev, DPO). This information is utilized strictly to provide your audit documentation and, upon your opt-in, connect you with certified remediation partners.

4. Managing Cookie & Storage Preferences

Although we do not deploy marketing cookies, you may inspect or modify your local storage settings at any time using our preference panel:

5. Your GDPR Rights

Under Articles 15 through 22 of Regulation (EU) 2016/679 (GDPR), you hold the right to access, rectify, erase, restrict, and object to the processing of your personal information.

To exercise any of these rights, contact our Data Protection Officer at: hello@cookiedetox.org. All formal requests receive a detailed response within 30 days.

$2

Enter your domain: the scanner detects trackers loaded before consent and generates a technical compliance report in seconds.

No sign-up required. Report generated from actually observed network requests. Your contact details are only processed with your consent (Art. 6(1)(a) GDPR).