Cookie Policy
April 18, 2026
This Cookie Policy explains what cookies and similar technologies we use, for what purpose, and how you can control them. It complements our Privacy Policy.
1. What Are Cookies?
A cookie is a small text file placed on your device when you visit a website. Cookies are either 'first-party' (set by our domain) or 'third-party' (set by a partner domain).
We also use similar technologies, such as local storage, for the same purposes.
Under GDPR and Quebec Law 25, non-essential cookies require your explicit consent before being placed.
2. Strictly Necessary Cookies (no consent needed)
These cookies are essential for the website to function. They cannot be disabled.
next-auth.session-token / __Secure-next-auth.session-token — authentication session. First-party. Duration: 30 days or until sign-out.
next-auth.csrf-token / __Host-next-auth.csrf-token — CSRF protection. First-party. Duration: session.
next-auth.callback-url — sign-in flow. First-party. Duration: session.
os-locale — saves your language preference. First-party. Duration: 12 months.
os-cookie-consent — stores your cookie consent choice so we don't ask again. First-party. Duration: 6 months.
Legal basis: legitimate interest (Article 6(1)(f) GDPR) / necessary to provide the service (article 5(3) French Data Protection Act, Quebec Law 25). No consent required.
3. Analytics Cookies (opt-in only)
These cookies are NOT placed unless you click 'Accept analytics' in the cookie banner or enable them in your privacy settings.
_ga — Google Analytics 4, distinguishes users. Third-party (google-analytics.com). Duration: 2 years.
_ga_<container-id> — Google Analytics 4, persists session state. Third-party. Duration: 2 years.
_gid — (only if Universal Analytics, legacy) distinguishes users. Third-party. Duration: 24 hours.
Provider: Google LLC (USA). Data transfer to the United States is covered by Standard Contractual Clauses.
Legal basis: your consent (Article 6(1)(a) GDPR, article 82 French Data Protection Act, article 12 Quebec Law 25).
4. Third-Party OAuth Cookies
When you sign in with Google, Discord, or Facebook, your browser may be redirected to these providers, which set their own cookies on their own domains, governed by their own privacy policies.
We do not have access to these cookies.
5. How to Control Cookies
Cookie banner: on first visit, you are asked to accept or reject non-essential cookies. Your choice is stored for 6 months, after which we ask you again.
Change your mind: open Settings > Privacy > Cookie preferences at any time to withdraw or grant consent.
Browser settings: every modern browser lets you block or delete cookies. Disabling essential cookies will break sign-in.
Google Analytics opt-out: tools.google.com/dlpage/gaoptout
6. Changes
We will update this policy if we add or remove cookies. The date at the top always reflects the latest revision.
7. Contact
Any question about cookies: jerome.welty@gmail.com