This Cookie Policy explains how Super Nova Research Inc. (“Super Nova,” “Draft&Goal,” “we,” “us,” or “our”) uses cookies and similar technologies on the two websites it operates: https://dng.ai (our marketing website, the “Marketing Site”) and https://studio.dng.ai (our authenticated product environment, the “Studio”). The two websites have different cookie practices, and this policy describes both.
1. Quick comparison — dng.ai vs. studio.dng.ai
| Topic | dng.ai (Marketing Site) | studio.dng.ai (Studio) |
|---|---|---|
| Purpose | Marketing, lead generation, brand presence | Authenticated access to the Draft&Goal platform |
| Strictly necessary cookies | Yes (consent banner, bot protection, language, page builder) | Yes (session/authentication, security, CSRF protection) |
| Functional cookies | Yes, with consent (HubSpot chat continuity, form state) | None beyond those required for authentication |
| Analytics cookies | Yes, with consent (GA4, HubSpot analytics, Microsoft Clarity) | Cookieless, consent-exempt Google Analytics only |
| Advertising / marketing cookies | Yes, with consent (Google Ads, Meta Pixel, LinkedIn Insight, Microsoft Ads / Bing) | None of any kind |
| Consent banner | Yes (CookieYes). Non-essential cookies blocked until you choose | No banner. Non-essential tags blocked; Consent Mode v2 default “denied” at load |
| Cross-context behavioral ads | Possible with consent; we honour Global Privacy Control signals | Not used |
| ISO alignment | ISO/IEC 27001 for security controls | ISO/IEC 27001 and ISO/IEC 42001 — part of our certified AI-management scope |
2. What are cookies?
Cookies are small data files stored on your device when you visit a website. They are widely used to make websites function, improve performance, and provide reporting and personalization. Similar technologies — web beacons, pixels, tags, software development kits, and local and session storage — are used for the same purposes and are covered by this policy. Cookies set by Super Nova on a domain we operate are first-party cookies; cookies set by third parties through our websites are third-party cookies.
3. Why we use cookies
3.1 dng.ai (Marketing Site)
We use first- and third-party cookies for strictly necessary purposes (bot protection, load balancing, security, language selection, consent management, page rendering); performance and functionality (remembering preferences, supporting forms, live-chat continuity — with consent); analytics and product improvement (with consent); and advertising and marketing measurement (with consent).
3.2 studio.dng.ai (Studio)
On the Studio we use cookies only for strictly necessary purposes (session authentication, security including CSRF and bot protection, and technical delivery) and privacy-preserving, cookieless analytics (a Google Analytics deployment without persistent cross-site identifiers, with IP truncation, advertising features disabled, no Google Signals, and no joining with other Google services). We do not use advertising, retargeting, marketing-measurement, social-media, profiling, or cross-context behavioral advertising cookies on the Studio.
4. Legal basis for processing
GDPR / UK GDPR (both websites). Strictly necessary cookies are exempt from consent under Article 5(3) of the ePrivacy Directive; to the extent personal data is processed, we rely on Article 6(1)(f) (legitimate interests). Cookieless analytics on the Studio are deployed under the CNIL audience-measurement exemption. All other cookies on the Marketing Site are set only with your freely given, specific, informed, and unambiguous consent (Article 6(1)(a) and Article 5(3) ePrivacy).
Quebec Law 25 — we collect personal information through cookies only with express, granular consent for any technology that identifies, locates, or profiles you; such technologies are disabled by default. United States state laws — we treat Global Privacy Control signals as a valid opt-out of “sale” or “sharing” for cross-context behavioral advertising. Canada (PIPEDA) — outside Quebec, we apply PIPEDA’s consent and limiting-collection principles.
6. How to control cookies
When you first visit the Marketing Site, a cookie consent banner appears; no non-essential cookies are set before you choose. You can review or change your preferences anytime via the “Cookie Settings” link in the footer or at https://dng.ai/#cky-settings. Strictly necessary cookies cannot be rejected. Your consent choices are stored for a maximum of twelve (12) months.
Most browsers allow you to refuse or delete cookies (Chrome, Firefox, Safari, Edge, Opera). We honour Global Privacy Control (GPC) signals where required by law as an opt-out of sale/sharing for cross-context behavioral advertising; the Studio does not engage in such advertising. We do not respond to legacy Do Not Track signals. You can also opt out of interest-based advertising via the DAA, DAAC, EDAA, and NAI tools.
7. Your rights
Quebec residents (Law 25) — access, rectification, withdrawal of consent and de-indexing, data portability, and to be informed of automated decisions; complaints to the Commission d’accès à l’information du Québec.
EEA, UK, and Switzerland (GDPR / UK GDPR / FADP) — access, rectification, erasure, restriction, portability, objection to legitimate-interests processing, and withdrawal of consent; complaints to your local supervisory authority.
California, Colorado, Connecticut, Virginia, and other U.S. states — to know, access, delete, correct, opt out of “sale” or “sharing,” and limit use of sensitive information. We do not knowingly sell personal information. On the Marketing Site we may “share” certain identifiers and online activity with advertising and analytics providers; opt out via the footer link or a GPC signal. Other Canadian residents (PIPEDA) — access and correct, and complain to the Office of the Privacy Commissioner of Canada.
8. International data transfers
Cookies on both websites are served by providers located in or processing data in jurisdictions including the United States, the European Union, and Canada. When we transfer personal information outside Quebec, the EEA, the UK, or your jurisdiction, we rely on appropriate safeguards: the EU-US Data Privacy Framework (and UK/Swiss extensions) where the recipient is certified; Standard Contractual Clauses and the UK International Data Transfer Addendum; and documented transfer impact assessments with supplementary measures including encryption in transit and at rest. A list of cookie-related sub-processors is available at https://trustcenter.dng.ai.
9. ISO 27001 and ISO 42001 alignment
ISO/IEC 27001 — cookie-derived personal data is processed within our information-security management system, with TLS encryption, role-based access, logging and monitoring, vendor due-diligence, and defined retention limits.
ISO/IEC 42001 — the Studio is operated within our AI management system. We do not use cookie-derived data to train AI models offered through the Studio or Draft&Goal platform; Studio analytics are limited to aggregated, anonymised audience measurement under transparency, accountability, and human-oversight controls.
10. Children’s privacy
Neither website is directed at children, and we do not knowingly collect personal information from children through cookies. We apply the following thresholds: EEA — we do not rely on Article 8 GDPR consent for children under 16 (or a lower Member-State age, no lower than 13); Quebec — under 14 without parental consent; United States — under 13 (COPPA); other jurisdictions — whichever is higher of 13 or the local legal minimum.
11. Updates & contact
We may update this Cookie Policy from time to time. The “Last updated” date indicates the last revision. Material changes will be notified through a prominent notice on the Marketing Site, the Cookie Consent Manager, or in-Studio notification. We re-scan both websites at least quarterly; the last verified scan was performed on 15 May 2026.
Questions, requests, or complaints can be directed to our Privacy Officer: Vincent Terrasi — Data Protection Officer (GDPR Art. 37), Privacy Officer (Quebec Law 25) — Super Nova Research Inc., 6795 rue Marconi, Bureau 200, Montréal (Québec) H2S 3J9, Canada — . EU Representative (Article 27 GDPR): Super Nova Research Inc. — EU Representative, Station F, 5 Parvis Alan Turing, 75013 Paris, France.