Cookie policy

1. What is a cookie?

A cookie is a small file placed by a website on your device (computer, tablet, smartphone). It is used, for example, to remember your language, your cart, your signed-in session, or to measure the site's audience.

2. Cookies used by EXAUTHYS

2.1 Strictly necessary cookies (consent-exempt)

These cookies are essential for the Site to function and do not require your consent (French Data Protection Act Art. 82 — “strictly necessary to the service” exemption).

• exa_session — httpOnly authentication cookie, sameSite=Lax, 7-day duration, auto-renewed.
• NEXT_LOCALE — remembers your chosen language, 12-month duration.
• exa_consent — stores your cookie-consent choice (accept, refuse, custom), 13-month duration.
• exa_csrf — anti-CSRF form protection, 24-hour duration.

2.2 Audience-measurement cookies (consent required)

Dropped only if you consent. Refusal means no such cookies are stored and the related services are disabled.

• Anonymised analytics tool (planned: self-hosted Matomo, no transfer outside the EU, IP truncated to 16 bits). Details published here once enabled.

2.3 Marketing & third-party cookies (consent required)

EXAUTHYS currently drops no marketing or advertising cookies. Any change will be reflected on this page and trigger a fresh consent request.

3. Third-party cookies — payment

During checkout, Stripe may drop its own technical security cookies (anti-fraud, 3-D Secure). These cookies are indispensable to payment execution and exempt from prior consent. Stripe's policy: stripe.com/cookie-settings.

4. How to manage cookies

• On your first visit, a banner lets you accept all, refuse all, or customise by purpose.
• At any time, the “Manage cookies” button in the footer reopens the preferences centre.
• You can also configure your browser to block or delete cookies (see Firefox, Chrome, Safari or Edge help).

Note: refusing strictly necessary cookies (session, language) may severely degrade the Site (you may be unable to stay signed in, lose your cart, etc.).

5. How long your choice is kept

Your choice (accept, refuse, custom) is stored for 13 months in line with the CNIL recommendation. After this period, the banner is shown again.