Legal document
Cookie policy
Last updated on June 2, 2026
1. What is a cookie?
A cookie is a small file placed on your device (computer, phone, tablet) when you visit a website or web application. It can, for example, keep you signed in, remember a preference or measure the audience of the Service. The sections below also cover similar technologies (local storage, invisible pixels), grouped under the generic term "trackers".
2. Our approach
Onirelo restricts the use of trackers to the strict minimum. The only trackers placed without your consent are those that are essential to the Service or that remember your interface preferences. All other trackers are only enabled once we have collected your explicit consent through the management banner shown on your first visit.
You can review your choices at any time by clicking the "Manage cookies" link in the Service footer.
3. Categories of trackers
3.1. Strictly necessary trackers (no consent required)
| Tracker | Purpose | Duration |
|---|---|---|
| onirelo_session | Keeps your session active | Session duration (session cookie) |
| XSRF-TOKEN | Protection against CSRF attacks | Session duration |
| remember_token (if the "stay signed in" option is enabled) | Allows automatic reconnection | 30 days |
These trackers are essential for the Service to work. They are exempt from consent under article 82 of the French Data Protection Act and CNIL recommendations.
3.2. Preference trackers (no consent required)
| Tracker | Purpose | Duration |
|---|---|---|
| locale | Remembers the chosen language | 12 months |
| theme | Remembers the chosen interface theme | 12 months |
| cookie_consent | Remembers your consent choices | 6 months |
These trackers are only placed following an action on your part (selecting a language or saving your preferences). They are also exempt from consent.
3.3. Payment-related trackers (Stripe)
When you take out a subscription, Stripe may place cookies on the js.stripe.com subdomain to secure the payment, fight fraud and operate the Stripe Checkout interface elements. These cookies are necessary to execute the payment.
For more information, see Stripe's cookie policy: https://stripe.com/legal/cookies-policy.
3.4. Consent-based trackers
The trackers below are only placed after you give consent through the dedicated banner.
| Tracker | Issuer | Purpose | Duration |
|---|---|---|---|
| [TO BE COMPLETED depending on the chosen tool, for example ph_* for PostHog] | [PostHog / Mixpanel / other] | Audience measurement, usage analysis for Service improvement | 13 months at most |
| [TO BE COMPLETED] | [Client-side error detection tool, if applicable] | Diagnosis of technical incidents | 90 days |
No targeted advertising is delivered on the Service. No advertising or social-network tracking cookie is placed.
4. Managing your consents
4.1. On your first visit
A banner is shown and lets you:
- accept all trackers;
- refuse all optional trackers;
- customise your choices category by category.
Refusing is as easy to express as accepting, and has no effect on access to the essential features of the Service.
4.2. Change your choices at any time
You can review your preferences at any time:
- by clicking "Manage cookies" in the Service footer;
- by deleting placed cookies from your browser settings.
4.3. Browser configuration
You can configure your browser to refuse all cookies or to warn you before any are placed. The steps differ depending on the browser. Official help is provided by:
5. How long your consent is kept
Your preferences are remembered for 6 months. After that period, the consent banner is shown again during a later visit.
6. Your rights
You have at all times a right of access, rectification, erasure, objection and restriction concerning the data associated with the placed trackers, under the conditions set out in the Privacy Policy.
For any question, please contact privacy@onirelo.com.