What this site collects about you, why, and what you can do about it. This page covers the website only, not the KryllOS application, which runs on your own machine.
- Responsible
- Cryptense
- Covers
- This website
- Measurement cookies
- None without your consent
- Last updated
- October 9, 2026
Who is responsible
Cryptense, the company that publishes this site, decides what is done with your data and answers for it. Its address: 10 rue de la Paix, 75002 Paris, France.
This page covers this website only. It does not cover the KryllOS application, which runs on your own machine, nor the other Kryll services (the blog, Kryll Embark, the app), which are separate services.
Its legal form and registration number are in the legal notice.
When you ask for access
When you ask for a KryllOS access key, the form sends the email address you typed to a server run by Cryptense (dapi.kryll.io).
- What data
- Your email address. It is the only field, and we cannot send you a key without it.
- Why
- Recording your request, letting you know when your access is available and sending you your key.
- What allows it
- Your request: you ask us for access, and we need your address to answer (Article 6(1)(b) of the GDPR).
- How long
- Until the end of the KryllOS early access period, after which the addresses are deleted. You can ask us to delete yours sooner, at any time.
- Handled by
- Cloudflare, Inc., where the address is stored, and Brevo, which keeps a copy of it to send the emails.
We use this address for that and nothing else. We do not send a newsletter to it.
Audience measurement
If you accept, and only then, we use Google Analytics 4 to count visits and see which pages and sections are read. Until you accept, no Google script is loaded, no cookie is set and nothing is sent to Google.
- What data
- Two cookies that tell visitors and visits apart; the pages you view on this site and the sections you reach; your clicks on the main buttons and on outbound links; the page you came from; technical information about your browser and device. Google uses your IP address to work out roughly where you are; it states that it does not log or store the IP addresses of visitors located in the European Union.
- Why
- Knowing which parts of this site are read, in order to improve it.
- What allows it
- Your consent, given in the cookie banner (Article 6(1)(a) of the GDPR). Declining changes nothing about the site.
- How long
- The cookies expire 13 months after they are set and are not renewed by later visits. Google Analytics keeps the detail of your visits for 2 months, and what is tied to your identifier for 14 months after your last visit. Overall statistics are kept beyond that.
- Handled by
- Google Ireland Limited.
- We only measure audience: everything that serves advertising is switched off in the code of this site.
- The cookies are set for this site only. They are not shared with the other Kryll sites.
- Your email address is never sent to Google Analytics.
Hosting and security
The site is delivered by Cloudflare, Inc.: as with any website, your browser sends it technical data with every request.
- What data
- Your IP address, the page requested, the date and time, and information about your browser.
- Why
- Delivering the pages and protecting the site against attacks and abuse.
- What allows it
- We need it to run the site and keep it safe: what the GDPR calls a legitimate interest (Article 6(1)(f)).
- Handled by
- Cloudflare, Inc., which handles this data on our behalf.
When you write to us
- What data
- Your address and the content of your message.
- Why
- Answering you.
- What allows it
- Answering the people who write to us is a legitimate interest (Article 6(1)(f) of the GDPR). If your message is a request about your data, the law requires us to answer it.
Who receives your data
Your data is seen by the people at Cryptense who need it, and by the providers below, each for its own task.
| Provider | Role | Data concerned |
|---|---|---|
| Cloudflare, Inc. | Hosting, delivery and protection of the site and of the access-request server; storage of the addresses of those requests | Technical request data (IP address, browser, page requested); your email address if you ask for access |
| Brevo | Sending the emails about your access request, and storing a copy of the addresses in order to send them | Your email address |
| Google Ireland Limited | Audience measurement, only if you accept | Measurement cookies and your browsing data on this site |
Your data outside Europe
Cloudflare, Inc. is an American company with a worldwide network: your requests are handled by a data centre close to you, but the data it handles for us, including the access-request addresses it stores, may be processed in the United States. Google Ireland Limited may pass audience measurement data on to Google LLC, in the United States. Brevo is a French company.
Cloudflare, Inc. and Google LLC both state that they adhere to the Data Privacy Framework, the agreement between the European Union and the United States that the European Commission approved on 10 July 2023. Both also state that they rely, where needed, on the European Commission's model contracts (the standard contractual clauses).
Your rights
You can ask us what data we hold about you, have it corrected or deleted, ask us to stop using it or object to its use, and get back, in a reusable format, the data you gave us. When we act on your consent, you can withdraw it at any time; what was done before stays valid. Under French law you can also tell us what should happen to your data after your death.
To do so, write to admin@cryptense.com, or by post to Cryptense, 10 rue de la Paix, 75002 Paris, France.
We reply within one month, as the GDPR requires. If we have a serious doubt about who is writing, we may ask for something to check it.
For audience measurement there is no need to write: use the "Cookie preferences" button at the bottom of every page.
If our answer does not satisfy you, you can turn to the CNIL, the French data protection authority: online at cnil.fr/fr/plaintes, or by post at CNIL, Service des plaintes, 3 place de Fontenoy, 75007 Paris, France.
Cookies
This site remembers your choice about cookies, which needs no consent, and sets two audience measurement cookies only if you accept. No advertising cookie, no social network pixel.
| Name | What it does | Lifetime | Your consent |
|---|---|---|---|
kryllos_consentlocal storage of your browser | Remembers whether you accepted or declined audience measurement, and on what date. | 6 months | Not needed: it only remembers your choice |
_ga | Google Analytics: tells one visitor from another. | 13 months | Needed |
_ga_YWGCMV9PW3 | Google Analytics: keeps track of your visit. | 13 months | Needed |
Your choice is kept for 6 months, whether you accepted or declined, then we ask again. That is the period the CNIL recommends; it is not a legal requirement.
Your choice stays in your browser, for this site only. It is not sent to us and is not shared with the other Kryll sites, which ask for themselves.
If your browser is set to refuse tracking (the "Global Privacy Control" signal), we take it as a refusal: nothing is loaded and we do not ask.
Our hosting provider may set a security cookie when it has to check that a visit does not come from a bot. That cookie only serves security and needs no consent.
You can change your mind at any time:
If you decline after having accepted, measurement stops at once, the Google Analytics cookies this site can reach are deleted, and the page reloads without Google's script.
Changes to this page
We update this page when the way this site handles your data changes. The date at the top of the page is that of the last change.