Privacy & Cookies
Last updated: October 18, 2026 · Version française
Who we are
This site (dendrostudios.com and guest.dendrostudios.com) is operated by Dendro Studios, a French simplified joint-stock company (SAS) registered with the Pontoise Trade and Companies Register under number 933 823 239, 9 avenue Derondel, 95120 Ermont, France. For any privacy-related question or request, contact us at contact@dendrostudios.com.
Audience measurement
We use two tools to understand how the site is used:
- Plausible Analytics (self-hosted) — a privacy-friendly tool running on our own European server. It uses no cookies, stores no personal data and produces aggregate statistics only. Under CNIL's audience-measurement exemption it does not require consent.
- Google Analytics 4 — loaded only if you click “Accept” on the cookie banner. It helps us analyze traffic and marketing campaigns. Data is processed by Google. You can withdraw your consent at any time via the “Manage Cookies” link in the footer.
- Advertising measurement (Google Ads, Meta) — loaded only after you accept. These tools tell us whether our ads (Facebook, Instagram, Google) lead to a visit or an order, so we only spend on ads that work. When an order is paid and you accepted these cookies, we also send the purchase event to Meta through its server API (email and phone hashed, never in clear text). If you do not accept, nothing is sent to Meta or Google Ads.
- TikTok Pixel on the Dendro Guest storefront — after consent, measures product views, cart additions, successful email registrations on these pages, checkout and confirmed purchases (products, amount, currency and order reference), alongside technical navigation and advertising identifiers. We do not send form fields, addresses, emails or phone numbers to this Pixel. Automated contact matching and enhanced data collection are disabled in its settings. You can withdraw consent through the cookie controls.
Cookies
No cookie requiring consent is set before you make a choice on the banner.
| Cookie | Duration | Purpose |
|---|---|---|
| dendro_consent | 6 months | Remembers your cookie choice across dendrostudios.com and its subdomains. |
| _ga | ~13 months | Google Analytics visitor identifier — set only after you accept. |
| _ga_* | ~13 months | Google Analytics session state — set only after you accept. |
| _gcl_* | ~3 months | Google Ads conversion measurement (ad click) — set only after you accept. |
| _fbp / _fbc | ~3 months | Meta (Facebook/Instagram) conversion measurement — set only after you accept. |
| _ttp, _tt_enable_cookie, ttcsid*, ttclid | Up to 13 months after being set or last used | TikTok ad attribution on Guest, only after consent. |
Payments and customer accounts
Purchases on the Dendro Guest shop are processed by Stripe, our payment provider — we never see or store your card number. Account and order details (email, delivery address, phone) are used solely to fulfil your orders and are kept for the legally required accounting duration.
Dendro Guest tablet usage statistics
Each Dendro Guest tablet sends us usage statistics: screens and features used, apps opened and for how long, display language, and the onboard shop journey and sales, with their date and time. They are tied to the tablet, and therefore to its vehicle and customer account, and are used for support and to measure and improve the service. They contain no typed content, searches, locations or data directly identifying a passenger. This processing relies on our legitimate interest (article 16.5 of the Dendro Guest terms of use); the statistics are available to Dendro Studios only and are deleted automatically no later than 12 months after the event they describe.
Social networks and third-party services (Dendro Social)
To promote its products, Dendro Studios publishes its own marketing content on its own social-media accounts (YouTube, TikTok, Instagram, Facebook) through an internal tool, Dendro Social. For that purpose Dendro Studios uses the YouTube API Services, the TikTok for Developers APIs and the Meta APIs (Instagram and Facebook). These services let us publish our content and read the statistics and public comments of those posts.
By using the YouTube API Services, Dendro Studios is bound by the YouTube Terms of Service; data obtained through those services is handled by Google in accordance with the Google Privacy Policy. The TikTok and Meta APIs are used in compliance with those platforms' terms.
Data processed in this context:
- Access tokens of Dendro Studios' accounts — issued by the platforms when we connect our own accounts, stored encrypted on our servers and used only to publish and read our statistics. They never relate to a third party's account.
- Public comments and their authors' usernames — comments posted under our publications, exactly as they are visible to everyone on the platform, kept for 30 days at most so that we can reply, then deleted automatically. No profile is built.
- Aggregate statistics — views, likes, comment and share counts of our posts, without any individual data.
This data is never sold, never passed to any third party other than the originating platform, and never cross-referenced with our customers' data (accounts, orders, tablets). It is not used for targeted advertising. The processing rests on our legitimate interest in promoting our business and answering people who address us publicly.
You can revoke the permissions granted to Dendro Social at any time from your platform settings:
- Google / YouTube: myaccount.google.com/permissions (Google security page “Third-party apps with account access”).
- Meta (Instagram, Facebook): Settings › Business integrations, then remove the app.
- TikTok: Settings › Security › Connected apps, then remove access.
Data deletion
If you commented on one of our posts, or if your account was connected to Dendro Social, you can ask us to delete any data about you that we may still hold:
- Write to contact@dendrostudios.com with the subject “Data deletion – Dendro Social”.
- State the platform concerned (YouTube, TikTok, Instagram or Facebook) and the username or public identifier of your account, so that we can locate the data.
- We confirm receipt of your request by email, then confirm once it has been handled.
We delete the data concerned from our systems within 30 days at most from receipt of your request. Revoking a permission from your platform settings (see above) also deletes the corresponding token. This procedure does not cover content published on the platform itself, which remains governed by that platform's rules.
Your rights
Under the GDPR you may access, rectify, delete or object to the processing of your personal data by writing to contact@dendrostudios.com. You may also lodge a complaint with the French supervisory authority, the CNIL.