Cookie and tracker policy

Last updated : 2026-08-20

Our approach

The service applications — property public pages, owner area, admin area — use no third-party analytics, no advertising and no non-essential tracker. No advertising or analytics cookie is set there, and public pages perform only first-party technical visit measurement, described below.

The marketing site noflyer.fr is the one exception: it loads a Google audience measurement tool, in production only and only after your explicit consent. That arrangement is described in detail below.

Strictly necessary storage

  • Session refresh cookie (httpOnly, with the Secure attribute in production and SameSite=Lax): essential to authenticate and restore the owner and admin sessions.
  • Access token: held temporarily in browser-tab memory and never written to localStorage; session recovery after a reload relies on the httpOnly refresh cookie.
  • Local storage (localStorage): used only for functional owner-area preferences, such as onboarding progress and whether the QR code has already been seen.
  • Cookie choice on the marketing site: kept in the browser's local storage (localStorage), on the marketing site only. It records your answer — acceptance as well as refusal — and the date of that choice, so it is not asked again on every visit for six months. This storage is necessary to honour your choice; it holds no advertising identifier and no browsing data.
  • Language preference: carried by the URL (fr / en).

Guest public pages

A property public page sets no non-essential cookie and uses no advertising tracker or third-party analytics. First-party technical visit measurement is performed, from minimised and pseudonymised data (viewed route, referrer origin, locale, user-agent, a hashed IP-address value and a timestamp), without advertising profiling.

Third-party measurement trackers

The marketing site noflyer.fr loads a Google Tag Manager tag container (provided by Google Ireland Limited), used for Google audience measurement of that site. Three limits govern that load:

  • it happens in the production environment only: development and pre-production environments never load it;
  • it happens only after explicit consent: before that consent, no tag is installed, no iframe is inserted and no request is sent to a Google service from the page. With JavaScript disabled, no measurement takes place at all;
  • the container is loaded with advertising consent denied (ad storage, user data for advertising purposes, advertising personalisation); only analytics storage is allowed. The intended purpose is audience measurement of this site. The container's contents are configured in Google's interface, outside this site's code: what this site guarantees is the permanent denial of those three consents, which a tag honouring Google's consent mode therefore cannot obtain from it.

Consent, refusal and withdrawal

On the marketing site, a banner presents the choice before any measurement tool is loaded. It offers two actions, "Refuse" and "Accept": same presentation, equal prominence, same number of clicks. Until one of them is chosen, no measurement tool is loaded.

Refusal is remembered just as acceptance is: the banner therefore does not come back on every page to insist. You can change your choice at any time through the "Manage cookies" link in the marketing site's footer.

That choice, refusal as well as acceptance, is kept for at most six months. After that period it stops being honoured: the banner is presented again and no measurement tool is loaded until you have answered. The same applies if the stored choice is unreadable or inconsistently dated.

Withdrawing consent takes effect immediately: audience measurement is disabled and the page is reloaded without the container, in that tab and in any other tab open on this site; the container is then no longer loaded during that visit or later ones. Cookies possibly set before the withdrawal can be removed from your browser settings.

The stored choice only covers the purposes presented to you, namely the audience measurement described above. Any change to those purposes will lead to an update of this policy and to a fresh collection of your consent.

Service pages carry no banner: they use no non-essential tracker.