Cookie policy
This is a translation provided for your convenience. The French version is the reference text and prevails in the event of any discrepancy. This does not affect the mandatory consumer protections available to you under the law of your country of residence.
This page explains which trackers Kotsu sets on your device, what they are used for, and what you can do to control them.
It supplements our Privacy policy, which covers all of your personal data.
1. In short
Kotsu only sets trackers that are exempt from consent.
We use no advertising cookies, no social network cookies, no cross-site tracking cookies. We do not resell any browsing data and we do not display any advertising.
That is why you do not see a consent banner when you arrive on the site. The law does not require one when the only trackers set are essential to providing the service you are asking for, or when they do no more than remember a setting you chose yourself. If we ever add others, you will see a banner and nothing will be set before you have made your choice.
2. What a cookie is
A cookie is a small file that a site places in your browser and can read again on your later visits. The word is used here in a broad sense: it also covers equivalent technologies such as browser local storage (localStorage, sessionStorage), which we use to keep your session open.
The rules are the same for all of these technologies: article 82 of the French Data Protection Act (loi Informatique et Libertés) requires your prior consent, except for trackers whose exclusive purpose is to enable or facilitate a communication, or which are strictly necessary for the provision of a service that you have expressly requested.
3. The trackers we set
3.1 Authentication and session
These are the ones that let you stay logged in from one page to the next without entering your password again.
| Tracker | Set by | Purpose | Duration |
|---|---|---|---|
sb-<projet>-auth-token | Supabase (our authentication provider) | Contains the session token that identifies you | Until you log out, renewed on each visit, automatic expiry after a period of inactivity |
sb-<projet>-auth-token-code-verifier | Supabase | Secures the exchange during login and prevents interception of the token | A few minutes, deleted as soon as the connection is established |
These trackers are essential. Without them, you cannot log in to Kotsu.
3.2 Security
| Tracker | Set by | Purpose | Duration |
|---|---|---|---|
| Anti-request-forgery token | Kotsu | Prevents another site from triggering an action in your name from your logged-in browser | For the duration of the session |
3.3 Ease of use
| Tracker | Set by | Purpose | Duration |
|---|---|---|---|
| Language preference | Kotsu | Remembers the language in which you view the site | 12 months |
| Display preferences | Kotsu | Remembers your interface settings, for example the state of the page editor panels | 12 months |
These trackers count as personalising the interface at your request. They are exempt from consent, and you can delete them at any time from your browser.
3.4 Subscription payment
These trackers only appear on the pages where you take out or manage a subscription, and only for makers. They are set directly by our payment provider.
| Tracker | Set by | Purpose | Duration |
|---|---|---|---|
__stripe_mid | Stripe | Bank card fraud detection | 12 months |
__stripe_sid | Stripe | Bank card fraud detection, for the current session | 30 minutes |
They are strictly necessary to secure a payment that you have expressly requested. Stripe acts here as our processor. The details are set out in its own policy, at stripe.com/fr/privacy.
4. Audience measurement
We want to know how many people visit Kotsu and which pages work well. We do this without cookies and without any persistent identifier: visits are counted from technical information sent by your browser, which is immediately turned into a non-reversible value that changes every day, so you cannot be tracked from one day to the next or from one site to another.
In practice, this means that:
- We see that a page has been viewed a certain number of times, from which country and on what type of device
- We build no profiles, we do not cross-reference these measurements with any other data, and we do not pass them on to anyone
- These statistics are used only to improve the site
This measurement falls within the category of processing exempted from consent by the Commission nationale de l'informatique et des libertés (the CNIL, the French data protection authority). If we ever had to adopt a measurement tool that does not meet these conditions, we would ask for your agreement beforehand.
5. Third-party content
Some pages may display content hosted elsewhere, for example an introduction video embedded by a maker on their page.
This content does not load automatically. We show a static preview instead, and nothing is sent to the third-party service until you have clicked to start playback. By clicking, you accept that this service sets its own trackers, over which we have no control and which are governed by its privacy policy.
The links that makers publish to their social networks are just links. They set nothing unless you follow them.
6. How to stay in control
6.1 From your browser
You can view, block or delete the trackers set on your device at any time. The settings are usually in the Settings menu, under Privacy and security.
Every publisher documents the procedure: Chrome, Firefox, Safari, Edge and the others all provide a dedicated help page.
Be aware of one practical consequence: if you block all cookies, you will no longer be able to log in to Kotsu. Logging in relies on them. You will still be able to view the public maker pages and browse Discover without an account.
6.2 The "do not track" signal
Some browsers send a signal refusing tracking. As we carry out no advertising tracking and no cross-site matching, this signal changes nothing in the way we operate.
7. If this policy changes
We will update this page every time something changes. If we introduce a tracker subject to consent, two things will happen: a banner will appear and nothing will be set before you make your choice, and you will have a permanent way of revisiting that choice, accessible from the footer.
The date of the last update appears at the top of this page.
8. Your rights and contacting us
Our Privacy policy sets out in detail the rights you hold under the General Data Protection Regulation and how to exercise them.
For any question about this page: contact@kotsu.shop
You can also read the cookies section on the website of the Commission nationale de l'informatique et des libertés (the CNIL, the French data protection authority), cnil.fr, and lodge a complaint with it if you believe we are not complying with these rules.