Cookies
The service sets exactly two cookies, both needed to make it work, and no tracker at all.
Last revised:
Two cookies, and nothing else
Maatron sets two cookies: a session cookie and a language cookie. There is no third one, and none of them comes from a third party.
Both are HttpOnly: no script on the page can read them. Nothing in the browser needs what is inside them.
The session cookie
It is set when you sign in, and it alone keeps you signed in from one page to the next.
It holds an opaque token: a string that means nothing by itself and is worth only the matching session kept on our servers. It holds no name, no email address, no organization name.
Its attributes: HttpOnly, so no script can steal it; SameSite=Lax, so it does not ride along with a request triggered from another site; Secure, so it only travels over an encrypted connection.
It is cleared on sign-out, and the session is revoked on the server at the same moment. This cookie is strictly necessary: no consent is required for it, because without it there is no service at all.
The language cookie
It is called maatron_locale, its value is fr or en, and it lasts one year. It remembers the language you picked, so that an address with no language in it takes you to the right side.
It is HttpOnly too. The language is already readable in the page address; a cookie a script could read would be an exposed surface with nothing gained in return.
Why a cookie and not the browser's local storage: pages are rendered on the server, and the server cannot see local storage. The first page would go out in the wrong language and then flip in front of you. A cookie travels with the request, so the server knows which language to serve from the first byte.
No third-party cookies
No analytics, no advertising, no tracking pixel, no social network button, no font pulled from a domain outside the service.
So no cookie is shared with anyone, and none of them follows you beyond this service.
Why there is no banner
A banner exists to collect consent. Here there is nothing to consent to: both cookies are needed to operate, one to sign you in, the other to speak to you in your language.
A banner with no tracker behind it is a ritual, not a protection. It trains people to click "I accept" without reading, and it dresses up as a choice something that is not one.
The day a tracker is introduced — analytics, a third-party support widget — a banner becomes necessary, and this page is the first thing that changes. As long as you see no banner, there is nothing to refuse.
Clearing or blocking these cookies
Your browser lets you clear this site's cookies at any time, and refuse cookies in general.
Clearing the session cookie signs you out. Clearing the language cookie only forgets your preference: the language is then taken from your browser settings, with French as the default. Blocking all cookies makes signing in impossible, not by design choice, but because there is no other way to recognise a session from one request to the next.
Questions
How personal information is handled, how long it is kept and what your rights are is set out in Privacy policy. For any question, write to info@maatron.dev.