Cookie Policy

1. Quick comparison — dng.ai vs. studio.dng.ai

2. What are cookies?

Cookies are small data files stored on your device when you visit a website. They are widely used to make websites function, improve performance, and provide reporting and personalization. Similar technologies — web beacons, pixels, tags, software development kits, and local and session storage — are used for the same purposes and are covered by this policy. Cookies set by Super Nova on a domain we operate are first-party cookies; cookies set by third parties through our websites are third-party cookies.

3. Why we use cookies

3.1 dng.ai (Marketing Site)

We use first- and third-party cookies for strictly necessary purposes (bot protection, load balancing, security, language selection, consent management, page rendering); performance and functionality (remembering preferences, supporting forms, live-chat continuity — with consent); analytics and product improvement (with consent); and advertising and marketing measurement (with consent).

3.2 studio.dng.ai (Studio)

On the Studio we use cookies only for strictly necessary purposes (session authentication, security including CSRF and bot protection, and technical delivery) and privacy-preserving, cookieless analytics (a Google Analytics deployment without persistent cross-site identifiers, with IP truncation, advertising features disabled, no Google Signals, and no joining with other Google services). We do not use advertising, retargeting, marketing-measurement, social-media, profiling, or cross-context behavioral advertising cookies on the Studio.

4. Legal basis for processing

GDPR / UK GDPR (both websites). Strictly necessary cookies are exempt from consent under Article 5(3) of the ePrivacy Directive; to the extent personal data is processed, we rely on Article 6(1)(f) (legitimate interests). Cookieless analytics on the Studio are deployed under the CNIL audience-measurement exemption. All other cookies on the Marketing Site are set only with your freely given, specific, informed, and unambiguous consent (Article 6(1)(a) and Article 5(3) ePrivacy).

Quebec Law 25 — we collect personal information through cookies only with express, granular consent for any technology that identifies, locates, or profiles you; such technologies are disabled by default. United States state laws — we treat Global Privacy Control signals as a valid opt-out of “sale” or “sharing” for cross-context behavioral advertising. Canada (PIPEDA) — outside Quebec, we apply PIPEDA’s consent and limiting-collection principles.

5.1 dng.ai — strictly necessary cookies

These cookies are required for the Marketing Site to function and cannot be rejected through the Cookie Consent Manager.

5.2 dng.ai — performance and functionality cookies

Set only with your consent.

5.3 dng.ai — analytics and customisation cookies

Set only with your consent. Microsoft Clarity records anonymised session replays and aggregate heatmaps; form fields are masked by default.

5.4 dng.ai — advertising cookies

Set only with your consent. Used to make advertising more relevant, cap frequency, and measure effectiveness.

Google Tag Manager itself does not set tracking cookies. Cookies fired through GTM are gated by Google Consent Mode v2 in advanced mode, integrated with our CookieYes banner. Prior to consent, GA4 and Google Ads tags transmit cookieless, aggregated “modeled” pings only.

5.5 studio.dng.ai — strictly necessary cookies

The Studio sets only strictly necessary cookies, required to deliver the application you have requested.

The Studio uses Google Analytics in a cookieless, privacy-preserving configuration: no persistent cross-site identifiers, anonymised/truncated IP, advertising features and Google Signals disabled, aggregated internal audience measurement only, and a Consent Mode v2 default of “denied” at load. It does not deploy HubSpot, Meta Pixel, LinkedIn Insight, Microsoft Clarity, Bing UET, or any other advertising technology.

6. How to control cookies

When you first visit the Marketing Site, a cookie consent banner appears; no non-essential cookies are set before you choose. You can review or change your preferences anytime via the “Cookie Settings” link in the footer or at https://dng.ai/#cky-settings. Strictly necessary cookies cannot be rejected. Your consent choices are stored for a maximum of twelve (12) months.

Most browsers allow you to refuse or delete cookies (Chrome, Firefox, Safari, Edge, Opera). We honour Global Privacy Control (GPC) signals where required by law as an opt-out of sale/sharing for cross-context behavioral advertising; the Studio does not engage in such advertising. We do not respond to legacy Do Not Track signals. You can also opt out of interest-based advertising via the DAA, DAAC, EDAA, and NAI tools.

7. Your rights

Quebec residents (Law 25) — access, rectification, withdrawal of consent and de-indexing, data portability, and to be informed of automated decisions; complaints to the Commission d’accès à l’information du Québec.

EEA, UK, and Switzerland (GDPR / UK GDPR / FADP) — access, rectification, erasure, restriction, portability, objection to legitimate-interests processing, and withdrawal of consent; complaints to your local supervisory authority.

California, Colorado, Connecticut, Virginia, and other U.S. states — to know, access, delete, correct, opt out of “sale” or “sharing,” and limit use of sensitive information. We do not knowingly sell personal information. On the Marketing Site we may “share” certain identifiers and online activity with advertising and analytics providers; opt out via the footer link or a GPC signal. Other Canadian residents (PIPEDA) — access and correct, and complain to the Office of the Privacy Commissioner of Canada.

8. International data transfers

Cookies on both websites are served by providers located in or processing data in jurisdictions including the United States, the European Union, and Canada. When we transfer personal information outside Quebec, the EEA, the UK, or your jurisdiction, we rely on appropriate safeguards: the EU-US Data Privacy Framework (and UK/Swiss extensions) where the recipient is certified; Standard Contractual Clauses and the UK International Data Transfer Addendum; and documented transfer impact assessments with supplementary measures including encryption in transit and at rest. A list of cookie-related sub-processors is available at https://trustcenter.dng.ai.

9. ISO 27001 and ISO 42001 alignment

ISO/IEC 27001 — cookie-derived personal data is processed within our information-security management system, with TLS encryption, role-based access, logging and monitoring, vendor due-diligence, and defined retention limits.

ISO/IEC 42001 — the Studio is operated within our AI management system. We do not use cookie-derived data to train AI models offered through the Studio or Draft&Goal platform; Studio analytics are limited to aggregated, anonymised audience measurement under transparency, accountability, and human-oversight controls.

10. Children’s privacy

Neither website is directed at children, and we do not knowingly collect personal information from children through cookies. We apply the following thresholds: EEA — we do not rely on Article 8 GDPR consent for children under 16 (or a lower Member-State age, no lower than 13); Quebec — under 14 without parental consent; United States — under 13 (COPPA); other jurisdictions — whichever is higher of 13 or the local legal minimum.

11. Updates & contact

We may update this Cookie Policy from time to time. The “Last updated” date indicates the last revision. Material changes will be notified through a prominent notice on the Marketing Site, the Cookie Consent Manager, or in-Studio notification. We re-scan both websites at least quarterly; the last verified scan was performed on 15 May 2026.

Questions, requests, or complaints can be directed to our Privacy Officer: Vincent Terrasi — Data Protection Officer (GDPR Art. 37), Privacy Officer (Quebec Law 25) — Super Nova Research Inc., 6795 rue Marconi, Bureau 200, Montréal (Québec) H2S 3J9, Canada — . EU Representative (Article 27 GDPR): Super Nova Research Inc. — EU Representative, Station F, 5 Parvis Alan Turing, 75013 Paris, France.