Cookies and browser storage

Last updated: 29 September 2026.

The visitor cookie

st_uid is a first-party random identifier used to connect requests. It is set when an API response creates a new visitor identifier and expires after 365 days; ordinary visits do not renew it.

It is HttpOnly and SameSite=Lax, with Secure enabled in production. HttpOnly prevents JavaScript access; SameSite=Lax limits cross-site sending but still permits some top-level navigations.

This cookie serves the requested service, rather than advertising or cross-site audience tracking. Strictly necessary storage is exempt from prior consent under article 82 of the French Data Protection Act. Any additional non-essential tracking must be described and consented to before activation.

Sign-in cookies

st_at and st_rt keep an approved account signed in. They are HttpOnly, SameSite=Lax and Secure in production, and are removed at sign-out. Fonts are self-hosted; see privacy. No payment or advertising cookie is used.

Your choice

You can delete or block this site's cookies in your browser settings. This may sign you out or prevent access to browser-linked history.

Questions: [email protected].