Cookies and trackers

Updated: 3 November 2026. A review of this website’s code identifies two first-party cookies: one limited to the security of the form, the other remembering the chosen language. Any additions by the hosting provider must be checked before publication. This translation is provided for information only; the French version prevails.

Strictly necessary cookie

MADUSSESSION is a first-party cookie, created when the form is opened. It contains a random identifier used to retrieve the anti-forgery token and the security timestamps on the server; it contains neither your name nor your message. It is sent to the same site only and cannot be read by JavaScript.

It is a session cookie, normally deleted at the end of the browser session (some restore features may keep it). The session is invalidated by the application after 30 minutes of inactivity on the form. The cookie uses HttpOnly and SameSite=Lax; Secure is enabled for the site configured over HTTPS. Deletion of server files depends on the hosting provider and remains to be specified.

Its sole purpose is the security of the form requested by the user. This strictly necessary tracker is exempt from prior consent under the CNIL rules. An “Accept / Refuse” banner is therefore not added for this cookie alone.

Language preference cookie

madus_langue remembers the site language (French, English, Italian or Spanish) when you choose it in the language selector. It contains only the language code, cannot be read by JavaScript and expires after 13 months. This customisation cookie, requested by the user, is also exempt from consent. Without it, the site offers you your browser’s language.

Technologies absent from the audited code

• Audience measurement and browsing history: no built-in tool.
• Persistent preferences: only the language cookie described above; no localStorage or sessionStorage.
• Marketing and advertising: no pixel or tracker.
• Third-party services: no embedded video player, widget, external CAPTCHA, chat or AI service.
• Digital fingerprint: no fingerprinting. Canvas drawings are used only for animations, with no visitor identification and no data sent.

Your choices

You can delete or block cookies from your browser. Blocking MADUSSESSION prevents the secure form from working, without preventing you from viewing the pages. There is no marketing choice to record or withdraw in this version.

If a service requiring your consent is added, it must remain blocked until you make your choice and offer refusal as simply as acceptance, along with a permanent way to change that choice. Hosting/CDN and actual configuration: TO BE VALIDATED.

For recipients, server-side retention periods and your rights, see the privacy policy.