Cookie policy
This English version is provided for convenience. ClearCloud is a French company and these terms are governed by French law: in the event of any discrepancy, the French version prevails.
OKStatus uses no advertising cookie, no social network cookie, no third-party tracker, and does no cross-site tracking. Only two categories are involved, and both are exempt from prior consent: cookies strictly necessary for the service to work, and audience measurement on our public site.
Article 1 — Strictly necessary cookies
These cookies are essential to authenticate you, secure the sign-in flow and remember your display choices. Without them the service does not work. They are never used to profile you and are never read by a third party.
| Cookie | Domain | Lifetime | Purpose |
|---|---|---|---|
| okstatus_session | app.okstatus.eu | 30 days | Keeps the authenticated session |
| okstatus_id_token | app.okstatus.eu | 30 days | OpenID identity token, required for a clean sign-out |
| oauth_state | app.okstatus.eu | 10 minutes | Protects the sign-in flow against replay (anti-CSRF) |
| oauth_code_verifier | app.okstatus.eu | 10 minutes | PKCE proof for the OAuth code exchange |
| oauth_idp_hint | app.okstatus.eu | 10 minutes | Records the chosen sign-in method, for the audit log |
| PARAGLIDE_LOCALE | okstatus.eu | 1 year | Chosen interface language |
| sp_unlock_<organisation>_<page> | okstatus.eu | 12 hours | Access to a password-protected status page, once entered |
| okstatus_admin_session | admin.okstatus.eu | 8 hours | ClearCloud internal console only: staff session (deliberately shorter than the customer one) |
| admin_mfa_ok | admin.okstatus.eu | 12 hours | ClearCloud internal console only: attests the administrator's two-factor authentication |
Article 2 — Local storage (localStorage)
Article 82 of the French Data Protection Act covers local storage in the same way as cookies, so we document it here. OKStatus keeps only your display preferences there — light or dark theme, content width, date format, collapsed sidebar, dismissed banners, dashboard time range and expanded groups — plus your objection to audience measurement, if any (article 3). Nothing leaves your browser: these values are never sent to our servers, and you can erase them at any time by clearing the site's data.
okstatus.theme · okstatus.layout · okstatus.datetime-prefs · okstatus.region-prefs · okstatus.sidebar.collapsed · okstatus.cookieNotice.dismissed · okstatus.notif.dismissed · okstatus.dashAlertsBanner.dismissedAtCount · okstatus.dashboard.heatRange · okstatus.dashboard.monitorsMode · okstatus.dashboard.llmMode · okstatus.maintenance-agenda · okstatus.monitors.density · okstatus.monitorIds · oks-groups-fold:monitors · okstatus.analytics.optOut
Article 3 — Audience measurement (Matomo)
The audience of our public site is measured with Matomo, self-hosted by ClearCloud at matomo.clearcloud.fr, in France. No data is passed to a third party, and Matomo is loaded only on the public pages of OKStatus: never in the dashboard, never on our customers' status pages.
Measurement is configured as follows:
- No cookie is set to measure your visit. Only one technical cookie exists on the analytics side, and only if you refuse measurement: it records your refusal (see below).
- Your IP address is anonymised before being recorded: the last two octets are replaced with zeros, which makes re-identification impossible.
- No advertising identifier, no user identifier, no screen resolution or device model, no individual visit log, no campaign tracking.
- No cross-referencing with any other processing, no cross-site tracking: the technical session identifier is recomputed every day and is never shared between sites.
- Raw data is purged automatically after 180 days; only aggregated statistics are kept afterwards.
- Your browser's Do Not Track signal is honoured.
Objecting to audience measurement
You can refuse to be counted, immediately and without giving a reason. If you tick the box below, Matomo is no longer loaded at all in this browser: no request is sent, so no data is processed. Your refusal is remembered by the key okstatus.analytics.optOut and by the cookie mtm_consent_removed (until site data is cleared) — remembering an objection is the only way to honour it. Unticking the box removes both and restores measurement.
This choice is stored locally in this browser (okstatus.analytics.optOut). You will need to set it again on another device or after clearing site data.
Article 4 — Why there is no "accept / reject" banner
Article 82 of the French Data Protection Act imposes two obligations as soon as information is written to or read from your device: to inform you (that is the purpose of this page and of the banner shown on your first visit) and to give you a means to object (article 3 above). Consent, on the other hand, is not required in two cases set out in CNIL decision no. 2020-091, and those are exactly the only two uses we make: cookies strictly necessary for the service, and audience measurement limited to our own site, operated on our own behalf, with no cross-referencing and no transmission, with an anonymised IP and capped retention periods.
We therefore display no consent banner: asking you for a permission we do not need would make it legally binding without giving you anything. If we ever added a tracker outside those two cases, a genuine consent banner — with refusal as easy as acceptance — would be put in place before anything was stored.
Article 5 — Managing cookies from your browser
You can delete already-stored cookies or block them at any time from your browser settings. Be aware that blocking strictly necessary cookies will prevent you from signing in to the dashboard. For any question, or to exercise your rights: contact@clearcloud.fr — see also our privacy policy.