Contents
Which cookies does this site use?
The avepto.ch website uses cookies that are necessary for it to function and, for audience measurement and session recording, cookies whose regime depends on where you are visiting from. From the European Economic Area and the United Kingdom, those wait for your consent. From Switzerland and the rest of the world, they are active by default and one click on the “Cookies” link in the footer is enough to refuse them. Avepto does not use advertising or marketing cookies.
What is a cookie?
A cookie is a small text file saved on your device when you visit a website. It is used in particular to remember your preferences, keep the site working correctly, or measure how it is used.
This policy supplements Avepto Sàrl’s Privacy policy and applies to the avepto.ch domain as well as to the subdomains operated by Avepto.
Which cookies cannot be disabled?
These cookies are essential for the site to function and cannot be disabled. They are used in particular to remember your privacy preferences and to keep the site secure.
Necessary cookies
Always activeThe consent cookie remembers your choice so that you are not asked for your preferences again on every visit. It is not used to measure your browsing.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| __av_c / __av_e | Avepto | Store your consent preferences (choice and banner state) | 12 months |
| __av_v | Avepto | Remembers which version of the site your browser has loaded, keeping the site consistent during an update | 7 days |
| __cf_bm | Cloudflare | Bot and abuse protection | 30 minutes |
| cf_clearance | Cloudflare | Records that a security challenge was passed; set only when Cloudflare has challenged the visitor | 30 minutes |
How do we measure site usage?
Avepto measures use of the site through its own first-party analytics infrastructure, operated on the site’s Cloudflare hosting. For this first-party measurement, no cookie is stored in your browser: the data is sent directly to our server, then forwarded to Google Analytics via the Measurement Protocol API. This approach ensures that Google cannot correlate your browsing on the site with other services. In addition, we use Microsoft Clarity for session recording (see below), which does store cookies in your browser: with your consent in the European Economic Area and the UK, active by default and refusable in one click elsewhere.
Two measurement levels coexist: an anonymous level, active by default for all visitors, and an enriched level, whose activation depends on where you are visiting from. From the European Economic Area and the United Kingdom, it waits for your explicit consent. From Switzerland and the rest of the world, it is active by default and you can refuse it at any time. Until you decide either way, nothing about that choice is stored in your browser.
Data collected server-side
| Data | Tier | Purpose | Duration |
|---|---|---|---|
| Tab identifier | Anonymous | A random value generated by your browser for the current tab, forgotten when it closes | About 90 days |
| Session identifier | Enriched | A technical fingerprint computed in your browser, sent to our server and transformed with HMAC-SHA256 before any storage. The raw value is not kept | About 90 days |
| Approximate country and city | Anonymous | Inferred by Cloudflare from your connection (cf-ipcountry and cf-ipcity headers) | About 90 days |
| IP address | Both | Truncated at the anonymous level (network, not machine), full at the enriched level. Used to tell apart visits from one site or one company and to spot abuse | About 90 days |
| Browser and operating system | Anonymous | Browser name and operating system, inferred from the User-Agent header | About 90 days |
| Language and referring site | Anonymous | Display language and the referring site’s domain, without the full address | About 90 days |
| Traffic source (UTM) | Anonymous | utm_source, utm_medium and utm_campaign parameters from the landing URL | About 90 days |
| Navigation events | Both | Pages viewed, clicks, form submissions, video playback, scrolling | About 90 days |
Anonymous level.
Before any consent, we count pages viewed together with, at most, the approximate country and city inferred by Cloudflare, your browser, the source through which you arrived and your truncated IP address (the first three groups of an IPv4 address, the first four of an IPv6 address): it identifies a network, not a machine. Legal basis: legitimate interest (anonymous audience measurement).
Enriched level.
At this level, the same events are tied to a stable session identifier: a technical fingerprint computed in your browser from its characteristics (graphics and audio rendering, fonts, screen), sent to our server over an encrypted connection and transformed with the HMAC-SHA256 cryptographic function before any storage. The raw value is not kept, and this identifier is used to reconstruct the path of your visits. If you send us a contact request, a job application, a briefing subscription or a meeting request, it is stored alongside your request so that path can be summarised for our team (see the Automated processing section of the privacy policy). At this level your full IP address is stored with each event, for the same window of about 90 days.
Legal basis.
In the European Economic Area and the United Kingdom: your consent. In Switzerland and the rest of the world we apply the Swiss regime of article 45c of the Telecommunications Act, which requires that you be informed and allowed to refuse: that is what this page is for, and refusing takes one click on the “Cookies” link in the footer.
One signal warrants a specific mention.
A heuristic detects whether your developer tools (browser DevTools) are open. This detection is imperfect (false positives are possible on Safari iOS and with certain extensions) and has no bearing on the service provided.
We do not keep the content you select or copy on the site: only the copy, cut and paste gestures are counted, without the text involved.
You can withdraw your consent at any time from the Cookies link in the footer, which opens this page and its management panel: enriched collection stops immediately.
Residual _ga cookies.
If you visited avepto.ch before this site went live, your browser may still contain the _ga (valid 2 years) and _ga_* (valid 1 year) cookies set by our former analytics system. These cookies are no longer used by Avepto and will expire naturally. You can delete them immediately via your browser’s privacy settings (search for “delete cookies for avepto.ch”).
International transfer.
Measurement events, at both levels, are sent by our server to Google LLC (United States) via the Measurement Protocol API. Google LLC states that it is certified under the Swiss-U.S. Data Privacy Framework. No IP address is transmitted to Google. For more information, see our Privacy policy.
Microsoft Clarity (session recording)
We use Microsoft Clarity to record, in anonymised form, how visitors use the site (movements, clicks, scrolling) and to produce heatmaps. From the European Economic Area and the United Kingdom, that recording waits for your explicit consent. From Switzerland and the rest of the world it is active by default, and one click on the “Cookies” link in the footer is enough to stop it. Unlike our first-party audience measurement, Clarity stores cookies in your browser, on this site and on Microsoft’s own domains, and transmits the data to Microsoft. This tool is not used for any advertising purpose.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _clck | Microsoft Clarity | Keeps a Clarity identifier to link sessions from the same browser | 1 year |
| _clsk | Microsoft Clarity | Links the pages viewed within a single session | 1 day |
| CLID | Microsoft Clarity | Third-party cookie set on the clarity.ms domain: records the first time Clarity saw this browser on any site using Clarity | 1 year |
| MUID | Microsoft Clarity | Third-party cookie set on Microsoft domains (clarity.ms, bing.com): a browser identifier shared across Microsoft sites. Microsoft states that Clarity does not pass it to its advertising cookies | 1 year |
| MR | Microsoft Clarity | Third-party cookie on Microsoft domains: indicates whether the MUID identifier should be refreshed | 7 days |
| SM | Microsoft Clarity | Third-party cookie on Microsoft domains: synchronises the MUID identifier across Microsoft domains | Session |
| ANONCHK | Microsoft Clarity | Third-party cookie on Microsoft domains: indicates whether the MUID identifier is passed to Microsoft’s advertising cookies. For Clarity, always 0 (not passed) | 10 minutes |
International transfer.
Session recording data is transmitted to Microsoft Corporation (United States). Microsoft states that it is certified under the Swiss-U.S. Data Privacy Framework. You can withdraw your consent at any time via the cookie management panel; recording then stops and does not resume until you reactivate it.
Do we use advertising cookies?
Marketing and advertising cookies
Not usedAvepto does not use advertising cookies, does not carry out advertising retargeting and does not sell browsing data.
How can you manage your consent?
From the European Economic Area and the United Kingdom, a banner lets you accept or refuse enriched measurement and session recording on your first visit. From Switzerland and the rest of the world, those are active by default, with no banner, and one click refuses them. In every case you can change your preferences at any time from the “Cookies” link in the footer, which opens this page and its management panel below.
Refusing cookies is as easy as accepting them: a single click from the management panel is enough. You can withdraw your consent at any time.
Browser settings
You can also configure your browser to block or delete cookies. The procedures vary depending on the browser you use. Blocking certain necessary cookies may affect how the site works.
How long are cookies kept?
Necessary cookies are kept only for as long as needed for their purpose. Analytics cookies are kept for the periods shown in the tables above and can be deleted at any time via your browser settings.
- Consent
- 12 months, renewed each time you change your preferences.
- Security (Cloudflare)
- 30 minutes, the length of a browsing session.
- Audience measurement (both levels)
- About 90 days. Measurement is kept in a rolling window and erases itself: there is no older archive on our side.
- Copies sent to Google Analytics
- According to the retention period configured in Google Analytics, currently 14 months. That copy contains no IP address.
- Session recording (Clarity)
- Cookies _clck (1 year) and _clsk (1 day) on this site, plus Microsoft’s third-party cookies listed in the table (from 10 minutes to 1 year). With consent in the European Economic Area, refusable everywhere.
How does this policy change?
Avepto reserves the right to change this cookie management policy at any time. The version in force is the one published on this site, with the last-updated date shown at the top of this page.
Who can you contact with questions?
For any question about the use of cookies: by email at , by phone at +41 22 552 96 70, or by post at Avepto Sàrl, Chemin de l’Epinglier 4, 1242 Satigny, Switzerland.