Cookie Policy

Strictly necessary (no consent required)

• Session and authentication, CSRF protection, OAuth flow hardening, post-login redirection.
• Secure payment: fraud-detection cookies set by Stripe (`__stripe_mid` — 1-year duration, `__stripe_sid` — 30-minute duration) only when accessing payment pages.
• Legal basis: performance of a contract / legitimate interest (security).

Audience measurement (consent required)

• Internal usage statistics to improve the Service (navigation and usage events).
• Google Analytics 4 (Google Ireland Limited) — the « _ga » and « _ga_<id> » cookies. Retention configured with Google at 14 months, reset on each new activity from you.
• Legal basis: consent.

Marketing (consent required)

• Meta trackers (Facebook Pixel / Conversions API) to measure campaign effectiveness and, where applicable, serve tailored advertising.
• Google Ads (Google Ireland Limited) — advertising conversion measurement, « _gcl_au » cookie.
• Legal basis: consent.

- No resale of your data to third parties

• No profiling producing legal or similarly significant effects on you
• No fingerprinting or alternative tracking techniques beyond the categories declared above

- Strictly necessary cookies are set without prior consent.

• Audience measurement and marketing cookies are only set after your explicit consent, collected via the banner displayed on your first visit.
• You may at any time accept, reject or customize your preferences via the "Manage cookies" link in the footer.
• In line with CNIL guidance, refusing is as easy as accepting, and your consent is renewed every 13 months.

Instructions by browser:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Settings > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Cookies and site permissions

- Saving application state (current projects, active phase)

• Storing your interface preferences
• Optimizing performance by caching certain data client-side