Cookie policy
Last updated: 3 August 2026
This is a courtesy translation. In the event of any discrepancy, the French version prevails: the publisher and the site are French, and the obligations stem from French law and the GDPR as applied in France.
1. What is a cookie?
A cookie is a small text file stored in your browser when you visit a website. It lets the site recognise you, keep you signed in and remember certain preferences.
This page also covers your browser’s local storage (localStorage, sessionStorage): Article 82 of the French Data Protection Act covers any writing of information into your device, not only cookies.
2. Trackers used by Casa Croqueta
Casa Croqueta uses only trackers that are strictly necessary to the operation of the service, or that remember a choice you have expressed. We use no advertising cookie, no third-party tracker and no behavioural analytics tool (Google Analytics, Facebook Pixel, and the like).
| Name | Purpose | Duration |
|---|---|---|
| cc_access_token | Authentication token, read by the server to serve you protected pages | 30 days if “Stay signed in” is ticked, otherwise cleared when the browser closes |
| refresh_token | Automatic session renewal. Not readable by JavaScript (HttpOnly) | 7 days |
| oauth_state | Cross-site request forgery protection during Google sign-in | 10 minutes |
| NEXT_LOCALE | Remembering the language you chose | Session |
One clarification. The authentication token carried by the cc_access_token cookie is only valid for 30 minutes; it is renewed automatically for as long as your session is active. The duration shown above is that of the cookie, not of the token it carries.
3. Browser local storage
Besides cookies, the service writes into your browser:
cc_access_token— your authentication token;casacroqueta.import.draftId— the identifier of an import in progress, so you can find your work again if you reload the page. Cleared as soon as the import finishes or is abandoned.
This information is strictly necessary to the operation of the service. On that basis, and in line with Article 82 of the French Data Protection Act as interpreted by the CNIL (decision no. 2020-091 of 17 September 2020), it does not require your prior consent. You can erase it at any time by signing out or by clearing your browser’s site data.
4. Why you see no consent banner
It is deliberate: we use no tracker that would require one. Concretely, Casa Croqueta loads no third-party script, no remote font, no iframe and no analytics tool.
- fonts are served from our own servers;
- profile pictures imported from Google or GitHub pass through our servers, so that your IP address is never disclosed to those platforms;
- payment takes place on Stripe’s pages, to which you are redirected: no Stripe component is loaded into our pages.
5. Cookies set by Stripe
During checkout you are redirected to Stripe’s secure pages, where Stripe may set its own cookies, necessary for the secure processing of the payment. Those cookies are governed by Stripe’s privacy policy and are set on Stripe’s domain, not ours.
6. Managing and refusing
The authentication trackers are essential: without them, signing in to the service is impossible. You can delete them by signing out or from your browser settings:
- Chrome: Settings → Privacy → Cookies and other data;
- Firefox: Settings → Privacy → Cookies and data;
- Safari: Preferences → Privacy;
- Edge: Settings → Privacy → Cookies.
Deleting them signs you out of the service.
7. Contact
Any question about this policy: support@casacroqueta.fr.
Any questions? For anything relating to these terms (refunds, right of withdrawal, access to your data…), contact our support: support@casacroqueta.fr