1. What we do
The public website (home, pricing, legal pages) does not set any cookies. Signed-in areas (account, administration, customer portal, payment) only use cookies strictly necessary for operation, exempt from consent under Article 82 of the French Data Protection Act and CNIL guidelines. No audience analytics tool, advertising network or tracking pixel.
2. Cookies used
| Name | Purpose | Lifetime | Set on |
|---|---|---|---|
| foyer.session_token (and technical variants foyer.*) | Sutempo account sign-in session (email, Google or Apple), protection against cross-site requests | Up to 7 days | Account, administration, customer portal |
| foyer_access | Remembers the business or environment selected from your access permissions | 7 days | Administration, console |
| foyer_customer | Links your Sutempo account to your customer portal at a business | 7 days | Customer portal |
| platform_session | Session for legacy code- or key-based access, being replaced by the Sutempo account | Session duration, limited inactivity | Administration, console |
| foyer_stripe_state | Protects the return from Stripe connection | 10 minutes | Integrations |
| foyer_calendar_state | Protects the return from Google Calendar connection | 10 minutes | Integrations |
Session and access cookies are HttpOnly (inaccessible to scripts) and Secure over HTTPS. Depending on their purpose, they use SameSite=Strict or SameSite=Lax. Temporary Stripe and Google Calendar connection cookies use SameSite=Lax to allow the return from the provider. They contain neither passwords nor unencrypted keys.
3. Local storage
Some preferences are kept in your browser’s local storage: the administration theme (light, dark, automatic) and the interface language. Dismissal of the suggested language on a business’s public page is kept for the session. The selected language may also be sent in links to retain your choice during navigation; it does not change the business’s language. You can remove these preferences by clearing the website’s data in your browser.
4. Third-party content
The default font on businesses’ public pages is served by Sutempo. When a business chooses another font for its page, booking surfaces (public page, widget, customer portal) load it from Google Fonts; Google then receives your IP address, without a cookie. The public page of a business that has provided an address offers a Google Maps map, loaded only when you click “Show map”: Google then provides this content and may set its own cookies for the map under its privacy policy. Signing in with Google or Apple, when you choose to do so, takes place on the provider’s website and is subject to its own terms.
This content does not appear on Sutempo’s public website (home, pricing, legal pages).
5. Your control
You can block or delete cookies in your browser settings; signed-in areas will then stop working, as these cookies are the only way to recognise you. Signing out immediately removes session cookies.
Questions: contact@sutempo.com.