1. What is a cookie?
A cookie is a small file stored on your device (computer, tablet, smartphone) when you visit a website. It helps remember information between visits in your browser.
We may also use comparable technologies (local storage, session storage) to keep certain settings in the browser.
Important: these technologies do not always identify you by name; they primarily identify the browser or device. They cannot install malware by themselves.
2. Data controller
The controller for personal data collected via cookies and trackers on the site is:
rachat-telephone.com
Email: contact@rachat-telephone.com
3. List of cookies and trackers
Transparency
We list first-party trackers we deploy with their purposes. Third-party tools described below apply when they are actually integrated.
A. Strictly necessary trackers
They are required for the service to work (for example language preference or securing admin access). They are generally not based on advertising consent.
NEXT_LOCALENecessary- Purpose:
- Remember the display language to match your browsing choice.
- Retention:
- Usually up to 12 months (browser dependent).
- Legal basis:
- Legitimate interest in providing the site in the selected language; pre-contractual measures where relevant.
next-auth.session-token, next-auth.csrf-token, next-auth.callback-urlNecessary- Purpose:
- Secure the administration area session: maintain login, CSRF protection, and post-login redirect parameters (NextAuth cookies).
- Retention:
- Session-based or server-defined duration (typically hours to a few days).
- Legal basis:
- Pre-contractual measures / security of access (legitimate interest).
B. Analytics and performance
These trackers help understand how the site is used (traffic, journeys). When they are not strictly necessary, consent may be required under applicable law.
We currently do not place analytics cookies on public comparator pages. This policy will be updated if that changes.
C. Advertising and retargeting
These trackers measure campaigns or personalize ads on other sites.
We currently do not place advertising or retargeting cookies on public pages.
4. Third-party cookies
Technical partners (payments, social networks, analytics) may place their own cookies when their modules are embedded on a page.
As of this version, Meta Pixel, Microsoft Clarity, and embedded Stripe checkout are not active on public pages. The boxes below describe typical scenarios if such services are added.
Stripe
Secure online payments when Stripe is included in the flow.
Typical cookies:
cookie_banner_showncheckout.stripe.comm.stripe.com
- Typical duration:
- Varies with Stripe (often session or a few weeks).
- Legal basis:
- Contract performance and payment security obligations.
- Privacy policy:
- https://stripe.com/privacy
Meta Pixel (advertising retargeting)
Advertising measurement and campaign delivery when the Meta pixel is installed.
Typical cookies:
_fbpfr
- Typical duration:
- Up to about 90 days in common setups.
- Legal basis:
- Consent (GDPR Article 6(1)(a)) when trackers are not strictly necessary.
- Privacy policy:
- https://www.facebook.com/privacy/policy/
Microsoft Clarity (journey analysis)
Session recordings and heatmaps when the service is enabled.
Typical cookies:
_clck_clsk
- Typical duration:
- Up to 13 months per Microsoft documentation.
- Legal basis:
- Consent (GDPR Article 6(1)(a)) when trackers are not strictly necessary.
- Privacy policy:
- https://privacy.microsoft.com/privacystatement
5. How to manage cookies
You can refuse or delete non-essential cookies in your browser settings. If a consent banner is added later, it will complement these controls.
Browser settings
Help pages for major browsers:
- Chrome : Settings → Privacy and security → Cookies
- Firefox : Settings → Privacy & Security → Cookies
- Safari : Settings → Privacy → Cookies
- Edge : Settings → Cookies and site permissions
Impact
Blocking all cookies may break some features (language memory, secure admin session).
6. Your rights
Under the GDPR you notably have:
- Right to information: be informed about trackers (this page).
- Right to object: object to processing based on legitimate interest where the law allows.
- Consent: withdraw consent when processing relies on it.
- Access and rectification: obtain a copy or correction of your data.
- Erasure: request deletion where the GDPR provides for it.
To exercise your rights or ask a question: contact@rachat-telephone.com
Complaint to the CNIL (French DPA): https://www.cnil.fr/fr/plaintes
7. Transfers outside the European Union
Some providers may process data outside the EU. Where applicable, we rely on safeguards recognised by the European Commission.
Stripe may transfer certain data to the United States under appropriate safeguards (standard contractual clauses, PCI-DSS). See Stripe’s privacy policy.
8. Changes to this policy
We may update this page to reflect technical or legal changes.
The “Last updated” date at the top is revised for substantive changes.
If we introduce consent-based trackers, we will align collection with applicable law.
Useful links
Further reading on data protection:
Contact
Questions about cookies or trackers:
Email: contact@rachat-telephone.com