This policy describes which cookies and trackers are used on loveinroom.fr, their purpose, retention period and how you can manage your preferences. Our stance is simple: no third-party audience-measurement cookie is dropped on your device, no targeted advertising, no transfer of analytics data outside the European Union.
1. What is a cookie?
A cookie is a small text file dropped by a website on your browser when you visit. Depending on the case, it remembers a user choice, authenticates a session or measures audience. Not all cookies are equivalent: some are strictly necessary for the site to work, others require consent.
2. Categories of cookies used
a) Strictly necessary cookies (always active)
These cookies are essential to operate the Site and do not require your consent.
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
lir-session | Love in Room (1st party) | Keeps the session of a logged-in host | Browser session |
lir-theme | Love in Room (1st party) | Light or dark display preference | 12 months |
lir-locale | Love in Room (1st party) | Language preference (FR / EN) | 12 months |
__stripe_mid | Stripe (3rd party) | Payment security, dropped only when accessing the payment flow | 1 year |
__stripe_sid | Stripe (3rd party) | Payment security, dropped only when accessing the payment flow | 30 minutes |
b) Audience measurement (no cookie)
To understand how the Site is used we rely exclusively on Umami, a self-hosted analytics tool we run from France. No persistent cookie is dropped on your device, no browser fingerprint is computed, no data is shared with a third party or transferred outside the European Union. This measurement benefits from the exemption from consent provided by CNIL deliberation no. 2020-091 (anonymous audience measurement). The six cumulative criteria are met: strictly statistical purpose, anonymisation, no cross-referencing with other processing, no cross-site tracking, data retention ≤ 25 months, identifiers ≤ 13 months.
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
| Umami counter | Love in Room (1st party) | Visit statistics, no persistent cookie, no browser fingerprint | No cookie |
c) Functional third-party cookies (essential for security)
These cookies are dropped by our security provider Cloudflare to distinguish human visitors from bots and to protect the Site against attacks.
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare (3rd party) | Bot management | 30 minutes |
cf_clearance | Cloudflare (3rd party) | Anti-bot challenge | 30 minutes |
3. How to manage your preferences
The Site uses no third-party audience-measurement cookie. There is therefore no consent for you to give or revoke regarding analytics. If you nonetheless wish to opt out of the anonymous statistical collection performed by Umami, write to [email protected]: we will exclude your browser from statistics within 72 hours.
Strictly necessary cookies (session, preferences, Cloudflare security, Stripe payment) can be deleted at any time from your browser settings. This deletion may degrade some features of the Site (forced sign-out, lost language preference).
4. Retention period
- session cookies (authentication): duration of the session, deleted when the browser closes;
- preference cookies (theme, language): 12 months;
- Umami audience measurement: no cookie. Server logs are retained for at most 13 months as anonymous aggregates.
5. Third-party cookies
Cookies dropped by our subprocessors (Cloudflare, Stripe) are governed by their own policies. We have selected GDPR-compliant providers and limited shared data to what is strictly necessary. The current list of subprocessors is in our privacy policy.
Privacy policies of the third parties involved:
- Cloudflare: cloudflare.com/privacypolicy
- Stripe: stripe.com/privacy
6. No advertising or third-party analytics cookies
Love in Room undertakes never to drop any targeted advertising cookie and never to load any third-party analytics tool (Google Analytics, Meta Pixel or equivalent), today or in the future without prior notice. This commitment is one of our pillars of trust: no affiliate tracking, no data reselling, no advertising retargeting.
Should the introduction of a cookie subject to consent ever become necessary (for instance a third-party tool to run an advertising campaign), a CNIL-compliant consent banner would be put in place and this page would be updated before any such cookie is dropped.
7. Updates to this policy
Any change to the list of cookies (addition of a subprocessor, removal of a tool) is reflected on this page. The date of last update is shown at the bottom of the page.
8. Contact
For any question about cookies, write to [email protected].