What a cookie does here
A cookie is a piece of data your browser keeps and sends back with every page. This site sets two, both necessary for the service you are asking for, and both cleared when your session ends. To these is added a display preference which never leaves your browser: it is not sent to us.
The two necessary cookies
“intercapitalism-session” carries your session: it is what keeps you signed in from one page to the next. It is marked HttpOnly — no script can read it —, Secure — it travels over HTTPS only — and SameSite=Lax. “XSRF-TOKEN” carries the token proving a form really came from you; without it, a third-party site could trigger an action in your name. Both expire after two hours of inactivity.
Why we do not ask you to accept them
A tracker strictly necessary for the service expressly requested is exempt from consent. Asking you to accept a cookie we will set anyway would be a staged choice: we would rather tell you which ones, what they do, and how long they live.
The display preference, and how to refuse it
The light or dark theme you choose, and the collapsed state of the administration sidebar, are kept in your browser's local storage. They are never transmitted. The notice shown on your first visit lets you refuse them: refusing immediately erases what was written and nothing is written afterwards — the theme then holds for the current visit only, without memory.
Changing your mind
The “Manage cookies” link at the foot of every page reopens the panel at any time. Your decision is kept in local storage, never in a cookie: a consent cookie would be the only one this site set without necessity.
Language is not a cookie
The language you read is carried by the address itself — “/en/”, “/fr/” — and not by a tracker. Once signed in, your profile language decides, and you can change it from your personal information.
What is not here
No advertising cookie, no audience measurement cookie, no script loaded from a third-party domain — fonts and images are served from this site. Nobody learns your IP address merely because you read a page.
The day a payment provider is connected
Card payment will go through a provider that sets trackers of its own. It is not enabled today. The day it is, a category will appear in the panel, it will be refusable, and this page will say which ones, by whom, and what for.
Clearing everything
Clearing this site's data in your browser signs you out, forgets your theme and erases your decision about trackers — the notice will reappear on your next visit. Nothing else is lost, because nothing else was there: your accounts, your movements and your documents live on our servers, not in your browser.