Cookies policy

Last updated: 2026

Draft document — to be reviewed by a lawyer before production use.

1. Essential cookies (no consent required)

These cookies are strictly necessary to operate the service and do not require your prior consent.

authjs.session-token — user session (NextAuth)
authjs.csrf-token — CSRF protection
authjs.callback-url — post-authentication return

2. Analytics cookies

No third-party tracking cookie is dropped by default. Merchants using the platform may enable their own pixels (Meta, TikTok, Google Ads) on their checkout page — those are governed by their own consent policy.

3. Language preference

A small piece of local storage (fp_lang) records your selected language. It is stored only in your browser and is never sent to a third party.

4. Stripe Checkout

When a payment is processed, Stripe may drop technical cookies needed for security (3-D Secure, fraud detection). See Stripe's cookie policy for details.

5. Management

You can block or remove cookies from your browser settings. Blocking essential cookies prevents use of the service.

6. Retention

Session cookies expire when the browser is closed. Persistent cookies (such as the language preference) are kept for 12 months unless you clear them.

7. Changes

This policy may evolve. Significant changes will be communicated by email or via the console.

8. Contact

For any cookie-related question: [email protected].