Centenary Paris 2026
Cookie Policy
Local preview cookie notice. Production hosting and tracking have not been configured.
1. Summary
This local preview uses an access_token cookie for its local access flow. Analytics are disabled and no optional analytics cookies are configured.
Last updated: 12 October 2026.
2. Cookie used by this site
| Name | Type | Duration | Purpose | Domain |
|---|---|---|---|---|
access_token |
Strictly necessary | 1 year (365 days) | Authentication. Allows a visitor who has entered via the official QR code to navigate the site without re-authenticating on each page. Without this cookie, the QR access flow cannot function. | localhost (local preview) |
_ga, _ga_* |
Analytics (consent required) | Up to 2 years | Not active in this local preview. Analytics configuration and any consent flow require review before publication. | Not configured |
3. Consent choices
Analytics cookies are not configured in this local preview. The access_token cookie is strictly necessary for QR access and is used only for authentication:
- It is essential for the QR-code authentication flow initiated by scanning the official QR code.
- Without it, the user would need to re-enter the access token on every page navigation.
- It is not used for analytics or advertising.
- It is not shared with an analytics provider.
No analytics tag is loaded by this local preview.
4. Cookie security attributes
| Attribute | Value | Reason |
|---|---|---|
HttpOnly | Active | Cookie not accessible via client-side JavaScript, mitigating XSS attacks. |
Secure | Active in production | Cookie only sent over HTTPS, mitigating interception. |
SameSite | Lax | Cookie not sent on most cross-site requests, mitigating CSRF. |
Path | / | Cookie valid for the whole site. |
Max-Age | 31536000 | Allows return visits for the duration of the Centenary period without repeated QR entry. |
__Host- prefix | Not applied | The current cookie is named access_token. A future version may consider __Host-access_token if the deployment policy is revised. |
5. Your rights
For a published service in France, this notice must identify the data controller and explain applicable rights and contact routes. Those details have not yet been confirmed for this preview.
If you have any questions about cookies on this site, please contact the community through the Facebook pages listed on the site.