Cookies Policy

Preamble

This Cookies Policy describes how Solutions Hypora inc., a corporation incorporated in Quebec, uses cookies and similar trackers when you visit hypora.ca or use our application.

This Policy supplements our Privacy Policy. In case of conflict, the Privacy Policy prevails.

1.What is a cookie

A cookie is a small text file placed on your device by your browser when you visit a website. Cookies let the site recognize you on subsequent visits, remember preferences, secure your session or measure usage.

Other similar technologies are used for the same purposes, including:

• browser local storage (localStorage, sessionStorage);
• web beacons (invisible pixels);
• device identifiers transmitted by the application.

In this Policy, "cookie" refers to all of these technologies.

2.Our consent framework (Law 25)

Since September 22, 2023, Quebec's Law 25 requires your consent to be free, informed, specific and separate before any cookie that is not strictly necessary is set.

When you first visit hypora.ca, a consent banner appears with three visually equivalent choices:

• Accept all: all cookies listed below are set.
• Reject all: only strictly necessary cookies are set.
• Customize: you choose by category.

Your choice is stored for 12 months, after which the banner reappears. You can change your choice at any time by clicking "Manage cookies" at the bottom of any page.

3.Categories of cookies we use

3.1 Strictly necessary (no consent required)

These cookies are essential for basic site operation and cannot be disabled without preventing site use.

3.2 Analytics (consent required)

These cookies help us understand aggregate usage to improve the service. No personally identifiable data is derived.

We configure PostHog to anonymize IP addresses and disable persistent identifiers when consent is not granted.

3.2.1 Cookieless audience measurement

On our public pages (marketing site, pricing, demo, sign-up), Hypora measures traffic with an in-house mechanism that uses no cookies and no local storage: nothing is written to your device. To count a day's unique visitors, a technical fingerprint is computed on our servers from the IP address and browser, combined with a secret key that is regenerated every day and destroyed after 48 hours. The IP address is never stored or logged: past that window, nobody, Hypora included, can link a visit to a person. No profile is built across days. Your browser's refusal signals (Global Privacy Control, Do Not Track) are honoured: when active, no measurement happens. Since this mechanism is neither a cookie nor local storage, it does not require prior consent; we describe it here for transparency.

3.3 Marketing (consent required)

These cookies measure advertising campaign effectiveness and suggest relevant content to non-customers.

No marketing cookie is set without your explicit consent. If you decline, these cookies are not installed and you can still browse the site freely.

4.Third-party cookies

Some cookies are set by our providers. These third parties may process your data under their own privacy policies:

• Stripe: stripe.com/privacy
• Supabase: supabase.com/privacy
• PostHog: posthog.com/privacy
• Meta: facebook.com/privacy/policy
• Google: policies.google.com/privacy
• LinkedIn: linkedin.com/legal/privacy-policy

5.Managing consent

5.1 Via the Hypora banner

You can change your consent at any time by clicking "Manage cookies" at the bottom of any page.

5.2 Via your browser settings

Most browsers let you block, delete or manage cookies in privacy settings. Note: blocking all cookies including strictly necessary ones may prevent the site from working.

• Chrome: chrome://settings/cookies
• Safari: Preferences > Privacy
• Firefox: about:preferences#privacy
• Edge: edge://settings/privacy

6.No sale or sharing with unlisted third parties

We do not sell cookies or data derived from cookies to third parties not listed in this Policy.

7.Automated decisions

No decision producing legal effects on you is made based on the cookies we use.

8.Changes

We may amend this Policy to reflect changes in our practices, providers or legal framework. Material changes will be communicated by email to active accounts and signaled on the consent banner.

9.Contact us