Privacy Policy – Cardonaut Website

Last Updated: September 29, 2025

Scope

This policy covers the website only (the marketing pages under Cardonaut’s official domain). For the policy applicable to the mobile app, please refer to the separate document.

Controller

GALLION LABS, 61 avenue de Toulouse, 31750 Escalquens, France. Contact: [email protected].

Data We Collect on the Website

We do not offer forms or user accounts on the website. We only measure audience using Google Analytics (GA4), subject to your prior consent.

Analytics (GA4): pages viewed, interaction events, technical information (device type, browser, language, approximate country), timestamps.
IP addresses: processed by Google for security/anti‑abuse and approximate geolocation. We use Consent Mode v2 and do not set analytics cookies unless you agree.

Legal Basis

Setting/reading trackers for Google Analytics is based on your consent (GDPR Art. 6(1)(a)). Without consent, analytics remain disabled.

Cookies and Consent

A consent banner is displayed upon arrival. You can accept or decline analytics. Your choice is stored locally. You can change it anytime via the persistent “🍪” button (“Manage cookies”).

Default settings (without action): analytics_storage = denied. If you accept, we then load the GA4 tag and enable audience measurement.

Recipients and Transfers

Google Ireland Limited (Google Analytics). Data may be transferred outside the EU under Google’s contractual terms.

Google acts as a recipient and, in some cases, as a processor. See Google’s privacy documentation and Google Analytics documentation for details.

Retention Periods

GA4 event data is retained according to your GA4 property settings (typically 2–14 months). Consent information is stored locally in your browser until you delete it or change your preferences.

Your Rights

Under GDPR, you have rights of access, rectification, erasure, restriction, objection, and data portability where applicable. You can also withdraw consent at any time via the “🍪” button (withdrawal does not affect the lawfulness of prior processing).

To exercise your rights: [email protected].

Security

We implement reasonable technical and organizational measures to protect information processed via the website. However, no transmission or storage is entirely secure.

Changes to This Policy

We may update this policy to reflect legal, technical, or operational changes. The “Last Updated” date will be adjusted accordingly.

Contact

GALLION LABS
61 avenue de Toulouse
31750 Escalquens – France
[email protected]