Cookie Policy

1. What is a cookie?

A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. It allows the site to remember information about your visit, such as your preferred language and other settings.

Cookies may be placed by the site you are visiting ("first-party" cookies) or by third parties ("third-party" cookies).

2. Cookies placed by Hestoria

2.1 Strictly necessary cookies (no consent required)

These cookies are essential to the operation of the service. They cannot be disabled without making the service unusable.

• hestoria_auth — User session (authentication, story generation). Owner: Hestoria. Duration: 7 days.
• hestoria_admin — Administration session (only on /admin pages). Owner: Hestoria. Duration: 1 day.
• hestoria_cookie_consent — Stores your consent choice for analytics and advertising cookies. Owner: Hestoria. Duration: 13 months.

2.2 Analytics and advertising cookies (with prior consent)

These cookies are placed only if you click "Accept" in the cookie banner. Until you accept, they are not loaded. You can withdraw your consent at any time by clearing the hestoria_cookie_consent cookie in your browser.

Google Tag Manager + Google Analytics 4 (Google Ireland Limited, Ireland)

Before your consent, Google Tag Manager is loaded in anonymous mode (Consent Mode v2 with analytics_storage, ad_storage, ad_user_data and ad_personalization initialized to denied). No personal data is transmitted until you accept.

• _ga, _ga_* — Unique visitor identifier (traffic statistics). Duration: 13 months.
• _gid — Session identifier (daily statistics). Duration: 24 hours.
• Processor: Google Ireland Ltd. (Ireland). Transfers outside the EU: EU-US Data Privacy Framework.
• Global opt-out: tools.google.com/dlpage/gaoptout

Meta Pixel (Meta Platforms Ireland Limited, Ireland)

• _fbp — Facebook identifier for conversion measurement and retargeting. Duration: 90 days.
• fr (placed by facebook.com) — Facebook advertising identifier. Duration: 90 days.
• Processor: Meta Platforms Ireland Ltd. (Ireland). Transfers outside the EU: EU-US Data Privacy Framework.
• Opt-out: facebook.com/ads/preferences

TikTok Pixel (TikTok Information Technologies UK Limited, United Kingdom)

• _ttp — TikTok identifier for conversion measurement. Duration: 13 months.
• ttwid — TikTok advertising identifier. Duration: 13 months.
• Processor: TikTok Information Technologies UK Ltd. (United Kingdom). Transfers outside the EU: standard contractual clauses.
• Opt-out: tiktok.com/legal/page/eea/cookie-policy/fr

3. Hosting

Our hosting infrastructure (Railway, United States) may place technical cookies strictly necessary for performance and security (load balancing, anti-DDoS). None of these cookies is used for advertising purposes.

4. Legal basis

Strictly necessary cookies (section 2.1) are placed on the basis of our legitimate interest in providing a functional and secure service, in accordance with Article 82 of the French Data Protection Act and the CNIL guidelines.

Analytics and advertising cookies (section 2.2) are placed on the basis of your explicit consent (Art. 7 GDPR + ePrivacy Directive Art. 5(3)). You can withdraw it at any time.

5. Retention period

In accordance with the CNIL recommendations, the maximum lifetime of cookies is 13 months. Beyond that, your consent will be collected again.

6. How to manage your consents?

You can change your choice at any time:

• By clearing the hestoria_cookie_consent cookie in your browser settings — the banner will be shown again on your next visit.
• By disabling all cookies from your browser (see links below).
• By enabling the "Do Not Track" or "Global Privacy Control" signal.

• Google Chrome: Settings → Privacy and security → Cookies
• Mozilla Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions

Warning: disabling strictly necessary cookies (section 2.1) may affect the operation of the service (unable to log in, to pay, or to find a story in progress).

7. Your rights

In accordance with the GDPR and the French Data Protection Act, you have a right of access, rectification, erasure, objection and portability over the data collected via cookies. To exercise these rights, contact us at [email protected].

You may also lodge a complaint with the CNIL: www.cnil.fr.

8. Changes

Hestoria reserves the right to amend this cookie policy at any time. The update date is shown at the top of this page. In the event of a substantial change (for example, the addition of a new advertising processor), your consent will be collected again.

9. Contact

For any question regarding our use of cookies: [email protected] or via our contact form.