At a Glance
- Lattot currently sets no tracking, advertising or third-party marketing cookies.
- Our analytics provider (Plausible) is cookieless.
- Where any non-strictly-necessary cookie is introduced in future, we request your prior, freely given, specific, informed and unambiguous consent.
- You can change or withdraw preferences at any time — using the button below.
- Refusing is as easy as accepting, and refusing has no detrimental effect on the Service.
Contents
- What This Policy Covers
- What Is a Cookie? (Technologies Covered)
- Legal Bases for Cookie Use
- Cookie Categories
- Cookies We Currently Use
- Third-Party Cookies
- Consent Mechanism
- Withdrawing Consent
- DNT and Global Privacy Control
- Managing Cookies in Your Browser
- Jurisdiction-Specific Rules
- Children
- Changes
- Contact
1. What This Policy Covers
This Cookie Policy explains how Lattot ("we", "us", "our") uses cookies and similar tracking technologies on lattot.com (the "Service"). It supplements the Privacy Policy and the Terms of Service.
The Policy complies with: EU ePrivacy Directive 2002/58/EC (and successor ePrivacy regulation); UK PECR; GDPR Articles 6 and 7; UK GDPR; Quebec Law 25; California CCPA/CPRA; Brazilian LGPD and Decree 10.474/2020; and the consumer-consent rules in our other principal markets.
2. What Is a Cookie? (Technologies Covered)
A cookie is a small text file a website asks your browser to store on your device, then reads back on subsequent visits.
This Policy applies not only to cookies but to any similar tracking technology — any technology that reads or writes information to your device, including:
- HTTP cookies (session and persistent);
- HTML5 localStorage and sessionStorage;
- IndexedDB;
- Web beacons / tracking pixels;
- Service workers used for tracking;
- Device fingerprinting (canvas, audio, WebGL, fonts);
- UTM parameters and other persistent identifiers passed through URLs;
- Server-side analytics that link multiple requests to a single user.
3. Legal Bases for Cookie Use
Under the EU ePrivacy Directive (Article 5(3)) and equivalent national laws, the placement of cookies and similar technologies requires prior, freely given, specific, informed and unambiguous consent, except:
- Communications-necessary cookies — strictly necessary to carry out the transmission of a communication over an electronic network.
- Service-necessary cookies — strictly necessary to provide a service the user has explicitly requested (e.g., a login session cookie).
All other cookies — analytics, personalisation, marketing, advertising — require opt-in consent before they are placed. We apply this rule globally, not only for EU users.
4. Cookie Categories
| Category | Description | Consent required? |
|---|---|---|
| Strictly Necessary | Essential for the Service to function (security, consent record). Cannot be switched off. | No (statutory exception) |
| Functional | Remember preferences (language, theme, region). | Yes |
| Analytics | Aggregated, non-identifying measurement. | Yes (currently fulfilled by cookieless Plausible — no storage on device) |
| Marketing / Advertising | Targeted advertising, retargeting, cross-site tracking. | Yes — and Lattot does not use this category at all. |
5. Cookies We Currently Use
5.1 Strictly Necessary
| Name | Purpose | Provider | Duration | Type |
|---|---|---|---|---|
lattot_consent | Stores your cookie preferences so we can honour them across pages and sessions. | Lattot (first-party) | 12 months | localStorage |
lattot_consent_ts | Timestamp of consent, used to demonstrate compliance and refresh consent after expiry. | Lattot (first-party) | 12 months | localStorage |
5.2 Functional
None at present. If we introduce any (for example, to remember a language preference), this section will be updated and consent will be requested before placement.
5.3 Analytics
Lattot uses Plausible Analytics, which is cookieless. Plausible processes pseudonymised request data (page URL, country, browser, device class) in aggregated form and does not store any persistent identifier on your device. No HTTP cookie or localStorage entry is set by Plausible. Because no information is stored on or read from your device, ePrivacy Article 5(3) consent requirement does not apply; processing relies on legitimate interest under GDPR Article 6(1)(f) for aggregated statistical purposes.
5.4 Marketing / Advertising
None. Lattot does not run advertising on the Service and does not embed any third-party advertising network. No Meta Pixel, Google Ads tag, LinkedIn Insight Tag, TikTok Pixel, or equivalent is loaded.
6. Third-Party Cookies
| Provider | Purpose | Cookies set? |
|---|---|---|
| Netlify (CDN + hosting) | Server delivery, request logging for security | No (only short-lived edge logs; no cookies) |
| Plausible Analytics | Cookieless aggregated analytics | No |
| Google Fonts | Font delivery | No cookie set on lattot.com. Google may log the IP address of the font request. We plan to migrate to self-hosted fonts in an upcoming update. |
7. Our Consent Mechanism
On your first visit (and each time consent has expired or there has been a material change), we present a consent banner that:
- presents the choice before any non-essential cookie is placed (no pre-checked boxes, no implicit consent from continuing to browse);
- gives equal prominence to "Accept all", "Reject all", and "Preferences" — refusal as easy as acceptance (CNIL Recommendation; Belgian DPA Decision 2022);
- describes each category in plain language before requesting consent;
- treats closing the banner without making a choice as a refusal of non-essential cookies, per CNIL guidance;
- records your choice locally with a timestamp to demonstrate compliance;
- refreshes consent every twelve (12) months, per EDPB and ICO guidance;
- respects the Global Privacy Control (GPC) signal — if your browser sends GPC, non-essential categories are treated as refused by default.
8. Withdrawing or Changing Your Consent
Withdrawal of consent must be as easy as giving it (GDPR Article 7(3)). You can change or withdraw your consent at any time by:
- clicking the "Manage cookie preferences" button at the top of this page or in the footer of any page;
- clearing site data in your browser (which will reset the consent record and prompt the banner on next visit);
- emailing privacy@lattot.com if you require assistance.
Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Withdrawing analytics consent will not degrade the Service in any way.
9. Do Not Track and Global Privacy Control
Because Lattot does not engage in cross-site tracking or advertising profiling, the classic browser "Do Not Track" (DNT) signal does not change our processing — there is nothing for it to opt out of.
For the Global Privacy Control (GPC) signal, our consent banner treats Sec-GPC: 1 as an opt-out for any non-strictly-necessary category. Where applicable law (CPRA, Colorado CPA, Connecticut CTDPA) treats GPC as a valid opt-out, we honour it as a binding legal instruction.
10. Managing Cookies in Your Browser
Independent of our banner, every major browser lets you view, block, or delete cookies and clear local storage:
- Chrome: Settings → Privacy and security → Site settings
- Safari: Preferences → Privacy
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Edge: Settings → Cookies and site permissions
- Brave: Settings → Shields and Privacy
Blocking strictly necessary technologies (such as the consent record itself) will cause the banner to reappear on every page load.
11. Jurisdiction-Specific Rules
EU / EEA — ePrivacy Directive + GDPR
Cookie consent in the EU is governed by Article 5(3) ePrivacy Directive (2002/58/EC as amended by 2009/136/EC) and Article 7 GDPR. Our banner meets the EDPB Guidelines 03/2022 on Deceptive Design Patterns and the EDPB Guidelines 05/2020 on Consent. Consent is freely given, specific, informed, unambiguous, and not bundled with non-cookie consents.
United Kingdom — PECR + UK GDPR
Cookie consent is governed by Regulation 6 PECR and the UK GDPR. We follow the ICO's Guidance on the use of cookies and similar technologies (last updated 2023) — same consent standards as EU GDPR.
France — CNIL Recommendation
We apply the CNIL Cookie Recommendation: the "Reject all" option is as visible and accessible as "Accept all", on the same level, with comparable visual weight. Closing the banner without making a choice does not constitute consent.
Germany — TTDSG
Cookie consent is governed by §25 of the Telecommunications-Telemedia Data Protection Act (TTDSG / TDDDG). The standard is identical to ePrivacy: opt-in for any non-essential cookie, with the exceptions in §25(2). We comply.
Quebec, Canada — Law 25
Since 22 September 2023, the use of identification, location or profiling technology requires prior notice and the activation of such functions only with the user's express consent. Our banner provides the required notice and a refusal option at parity with acceptance.
California — CCPA / CPRA
California residents can opt out of "sale or sharing" of personal information at any time. As Lattot does not sell or share personal information for cross-context behavioural advertising, no opt-out action is required. We nevertheless honour the Global Privacy Control (GPC) signal as a binding opt-out.
Brazil — LGPD + Decree 10.474/2020
Consent in Brazil must be specific to a determined purpose (LGPD Article 8) and may be withdrawn at any time without prejudice. Our banner records consent per category and supports withdrawal.
Other markets
For users in Australia, Singapore, Japan, South Korea, China, India, UAE, Saudi Arabia, South Africa and elsewhere, we apply the higher of (a) local mandatory cookie/electronic-marketing rules and (b) the EU standard described above.
12. Children
The Service is not directed to children. We do not place cookies on devices used by children to the best of our knowledge, and we do not target advertising to minors under any circumstances.
13. Changes to This Policy
We may update this Cookie Policy. Material changes (a new cookie, a new provider, a new processing purpose) will be notified by re-triggering the consent banner on next visit and by posting a prominent notice on the homepage. The current version is identified by the date and version number at the top.
14. Contact
| Cookie / privacy enquiries | privacy@lattot.com |
|---|---|
| General | hello@lattot.com |
| Web | lattot.com/contact |