Cookies and trackers

In forceVersion of 11 October 2026 · 4 min read

This translation is provided for convenience; the French version prevails. The inventory of the cookies actually set by the website and by the signed-in space.

1. On the public website

Without your consent, the website doonza.com sets only one cookie, and only if the person clicks the “English” or “Français” link in the footer: “doonza-lang”, the chosen language, kept for one year, so that the home page then opens in that language. Without that choice, the home page opens in English for a visitor from a non-French-speaking country, based on the country deduced from the IP address by the host at the time of the request, without that country or the address being kept — unless their browser asks for French first, in which case it stays in French; search-engine crawlers are never redirected, and a choice made with the “English” or “Français” link always prevails. Its traffic is measured by Vercel Web Analytics, which sets no cookie and reads or writes nothing on the device: visits are counted from a daily technical fingerprint, irreversible, with no personal identifier. The Google Analytics audience-measurement cookies and the cookie that remembers your choice are described below. No advertising or social-network tool is used. The website stores nothing else in the browser.

2. In the signed-in space

The signed-in space, on app.doonza.com, sets without your consent only cookies that are strictly necessary or requested by the person. “sb-…-auth-token” (sometimes split into “.0”, “.1”): the session token issued by Supabase Auth, which keeps you signed in from one page to the next; it is deleted at sign-out. “doonza-lang”: the display language, French or English, deduced on the first visit from the country (read by the host from the IP address, without being kept) and from the browser’s language, and changeable in the settings (the choice is then also saved on the account), kept for one year, set on the server so that the page displays straight away in the right language. “doonza-nav”: on a computer, whether the sidebar is collapsed or expanded, kept for one year. “doonza-app”: set only in the application installed from the App Store or Google Play, so that the server displays the application’s screens rather than the website’s (application navigation); its value is “1”, it contains no personal data, is kept for one year and is never set in an ordinary browser. “doonza_parrain”: the referral code of a link followed, kept for thirty days at most and deleted upon sign-up, to attach the account created to the person who invited them. “doonza_vue”: for administrator accounts only, the view chosen in the administration. The application also stores in the browser a single local key, “doonza-installation-refusee”, when the person declines the offer to install the application, so as not to offer it again; it stays on the device and is never sent. As these items are strictly necessary for the service or for a feature requested by the person, they do not require prior consent. The audience measurement of the signed-in space works like that of the website: Vercel Web Analytics without cookies, and Google Analytics only with your consent, described below.

3. At Stripe

Payment and the opening of the payout account take place in a secure frame provided by Stripe and displayed inside Doonza; Stripe sets its own cookies there, needed for payment and fraud prevention, and applies its own policy. Doonza has no access to them.

4. Google Analytics audience measurement, with your consent

On the website and in the signed-in space (but never in the mobile application installed from an app store), a “Cookies and audience measurement” window appears on the first visit, with three buttons: “Refuse”, “Accept”, of equal weight, and “Customise”. Until you have accepted, Google Analytics is not loaded, no request is sent to Google and no Google cookie is set: refusal is the default rule. Your choice is remembered by the “doonza-consentement” cookie, shared by doonza.com and app.doonza.com, kept for six months, after which you are asked again; it contains only that choice. If you accept, Google Analytics 4 (Google Ireland Limited and Google LLC) sets “_ga” and “_ga_…” (a random identifier and the state of the visit), kept for thirteen months at most, to count visits and movements between doonza.com and app.doonza.com; the advertising permissions of Google’s consent mode remain refused and Google signals are disabled. This data may be transferred to the United States: the transfer is governed by the adequacy decision on the EU–US Data Privacy Framework and by its Swiss extension, to which Google LLC has adhered, and by the European Commission’s standard contractual clauses. You withdraw or change your choice at any time with the “Manage cookies” link in the footer: a refusal deletes the “_ga” cookies that the browser allows to be deleted and stops the measurement. Accepting the terms of use does not amount to consent to cookies.