Cookies

Last updated: 18 October 2026.

This site sets no audience measurement or advertising cookies. The cookies and trackers it uses are needed for it to work: the law does not require your consent for them, but you have the right to know what they do. It does, however, measure its own audience, without cookies: see below.

The site's cookies

• PHPSESSID: keeps your session, such as your login or access to a password-protected page. Deleted when you close your browser.
• REMEMBERME: keeps you logged in to the site, only if you ask for it when logging in. 30 days.
• REMEMBERME_SUITE: the same for the management area, which is for the team only. 7 days.
• __Secure-mercure_access_token: enables real-time exchanges, such as a client space's chat or a note edited by several people. 1 hour.
• aurora_note_guest: recognises you as a guest on a shared note, only if you open such a link. 1 year.
• aurora_consent: remembers your choices in the cookie banner, if it is shown to you. 6 months.

What your browser keeps

A few preferences are also kept in your browser's storage, without being sent to anyone: light or dark mode, a vote already cast in a poll, your guest name on a shared note. They stay until you clear them.

Audience measurement

To know which pages are read and where visitors come from, the site counts its visits itself, without cookies and without any outside service. For each page opened, it notes the page's address, the site you came from, the campaign if the link carries one, and the type of device (phone, tablet or computer).

So as not to count the same person twice in a day, it computes a fingerprint from your IP address and your browser, mixed with a key drawn at random each day. Neither the IP address nor that key is kept, and the fingerprints are deleted every night: nothing allows you to be recognised from one day to the next. Only daily totals remain, kept for 25 months. This measurement falls within the scope the CNIL (the French data protection authority) exempts from consent. If your browser asks not to be tracked (Do Not Track or Global Privacy Control), nothing is counted.

The anti-bot service

The contact form and comments are protected by Turnstile, a Cloudflare service that checks a message is not sent by a bot. It only loads once you start filling in the form: reading the site never contacts it. It is needed to send the message, and Cloudflare states that it uses this data only for that check. Turnstile privacy policy.

Your choices

Today, no service needs your consent, which is why no banner asks for it. If that changes, for instance with a video or a map from another site, a banner will let you accept everything, refuse everything or choose service by service, and a “Manage cookies” link at the bottom of the page will let you change your mind at any time.

You can also delete or block cookies in your browser's settings. Blocking the site's cookies prevents you from logging in and from opening a password-protected page; the rest of the site reads as usual.

For the rest of your data, see the privacy policy (in French).