Privacy and cookies
Google Analytics, with your permission
If you accept audience measurement cookies, we use Google Analytics 4 to understand visits, sessions, acquisition sources and use of public pages (home, login and privacy). Google may process cookie identifiers and technical information about your browser, device and approximate location. This data is sent to Google and may be processed outside the European Union.
No Google Analytics script loads before you agree. Declining leaves the service accessible. We respect Do Not Track and Global Privacy Control. Advertising features and Google Signals are disabled. We do not send account information, entered values, results or audit URLs. URL queries and fragments are excluded, and only the referring site’s origin is used.
Change your choice
Use “Cookie preferences” at the bottom left of public pages to accept or withdraw permission. Your choice is kept for 180 days in a cookie needed to apply it. Google Analytics cookies are limited to 180 days without automatic renewal. Withdrawal blocks collection, removes accessible Analytics cookies on this site and reloads the page. It does not delete data Google has already received.
Google Privacy Policy · How Google uses data from partner sites
Cookies needed for the service
Allya also uses cookies for secure sign-in, your language preference and continuity when starting an audit. They are not used for advertising and do not depend on your Google Analytics choice.
Your account and service operation
Your account and audit data are separate from these statistics. Supabase provides authentication and the database, Render provides hosting, and Resend delivers transactional emails. These services may process technical data needed for operation and security. Google sign-in is optional.
The morning newsletter
Subscribing is optional and separate from your account and the contact form. We store your email address, chosen language, consent and subscription status. Your consent in the form activates your subscription, with no confirmation email. It is scheduled each morning at 7 a.m. Paris time when there is useful news. Every email includes an unsubscribe link.
Legacy pending subscriptions are deleted after 30 days. Active subscriptions and consent, unsubscribe or suppression records are retained to manage the list and prevent unwanted future mail. Resend delivers emails when sending is enabled. Bounce and spam reports are used to stop subsequent deliveries. We do not sell the subscriber list.
The briefing is prepared with automated assistance from public publications and links to its sources. Public text needed for writing is sent to OpenAI; your email address and contact messages are not. Automated checking does not replace human expertise and errors remain possible. Issue content and delivery metadata are retained to avoid repeats. Completed outbound message bodies are removed from the delivery queue after 90 days.
Contacting us
The contact form collects only your email address, message and chosen language. It does not subscribe you to the newsletter. Your message is stored in a private inbox accessible to the person authorized to manage a11ya, who may also receive an email notification. Messages are deleted after 12 months, or sooner on request. Use the same form to request access to, correction of or deletion of your data.
Historical counters
Historical anonymous request totals remain separate from Google Analytics. They contain only a UTC date, page category and request count. This version no longer adds to them.