Cookies Policy
This policy describes the cookies and similar technologies used by Agentizen and its applications, including the Citizen of AI service, in accordance with Article 82 of the French Data Protection Act and the CNIL recommendations.
01 — What is a cookie?
A cookie is a small text file placed on your device (computer, tablet, phone) by the browser when you visit a website or web application. It allows the site to recognise your browser and, in some cases, to remember information about you.
This policy also covers similar technologies (browser local storage, session storage) whenever they are used to store or read information on your device.
02 — No consent banner
The only cookies deposited are strictly necessary for the operation of the service you have explicitly requested (authentication and security). These cookies are exempt from the prior consent obligation under Article 82 of Law No. 78-17 of 6 January 1978, as amended, and the CNIL guidelines of 17 September 2020.
In accordance with the GDPR transparency principle, we nevertheless inform you of their existence, purpose and lifetime below.
03 — Strictly necessary cookies
The following cookies are essential to the provision of the service. Deleting them prevents you from logging in to your account and securing your session.
| Cookie | Type | Purpose | Lifetime | Flags | Issuer |
|---|---|---|---|---|---|
| citizen_of_ai_access_token | Authentication | JWT access token to authenticate each request | 12 hours | HttpOnly · Secure · SameSite | Agentizen (first party) |
| citizen_of_ai_refresh_token | Authentication | Renews the access token without re-entering credentials | 7 days | HttpOnly · Secure · SameSite | Agentizen (first party) |
| citizen_of_ai_token_expires | Session | Client-readable expiration date to trigger refresh | 7 days | Secure · SameSite | Agentizen (first party) |
| csrf_token | Security | Protects against CSRF attacks (Double Submit Cookie Pattern) | 24 hours | Secure · SameSite | Agentizen (first party) |
04 — Technical third-party cookies (Cloudflare)
We use Cloudflare, Inc. as a content delivery network (CDN) and application firewall (WAF). Cloudflare deposits technical cookies necessary for protection against bots, denial-of-service attacks, and human user detection.
| Cookie | Type | Purpose | Lifetime | Issuer |
|---|---|---|---|---|
| __cf_bm | Cloudflare | Automated bot detection (Bot Management) | 30 minutes | Cloudflare (technical third party) |
These cookies are also considered strictly necessary for the security of the service and benefit from the same consent exemption. They collect no browsing data for advertising or statistical purposes.
05 — Browser local storage
The service may use the browser's local storage (localStorage) to remember non-identifying interface preferences:
- Selected light / dark theme;
- Preferred display language;
- Display state of certain panels (collapsed / expanded).
These elements contain no personal data and remain solely on your device. They are never transmitted to our servers or to third parties.
06 — No trackers and no analytics
Agentizen and its applications use none of the following tools:
07 — Managing cookies in your browser
You can at any time view, block or delete the cookies placed on your device via your browser settings. Please note: deleting authentication cookies will result in your automatic logout from the service.
08 — Changes to this policy
We may update this policy, notably to reflect technical or regulatory changes. Any modification will be published on this page with an updated last-revision date. In the event of a substantial change introducing new cookies not exempt from consent, clear information and a consent collection mechanism will be put in place before they are deposited.
09 — Contact and exercising your rights
For any question relating to cookies or the exercise of your GDPR rights (access, rectification, erasure, objection, portability):
Associated legal documents
© 2026 GRONDIN Florian — Agentizen (SIREN 798 470 811). All rights reserved.
Document established in accordance with the GDPR (EU 2016/679) and the amended French Data Protection Act.