Last updated: 11 September 2026
A cookie is a small text file stored on your device (computer, smartphone, tablet) when visiting a website. It allows storing information related to your browsing.
On the drop-off form, the ticket, the payment page and the dashboard, Stashme only uses strictly necessary cookies for the service to work. The only audience measurement tools are loaded on the marketing website (section 2.4), never on these pages.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token | Maintaining the logged-in user session | Session / 30 days |
| next-auth.csrf-token | Protection against CSRF attacks | Session |
| next-auth.callback-url | Redirect after login | Session |
| Cookie | Purpose | Duration |
|---|---|---|
| ticket_<venue id> | Remembers the client's active ticket at this venue, to find it again on re-scan (one cookie per venue) | 24 hours |
| NEXT_LOCALE | User language preference | 1 year |
| ticketId, ticketVenueId | Former active-ticket cookies (single venue), read as a fallback then cleared | 24 hours |
Umami Analytics measures the audience of the marketing website and the application pages (drop-off form, ticket, payment, dashboard) without cookies or persistent identifiers, without cross-site tracking and without sharing data with third parties; data is aggregated. These are the conditions of the consent exemption set by the CNIL for audience measurement; should they no longer be met, Umami would require consent like the tools in section 2.4.
The addresses sent to Umami contain no ticket, payment or receipt identifier and no URL parameter. Google Analytics and Meta Pixel are never loaded on the drop-off form, the ticket, the payment page or the dashboard.
Google Analytics and the Meta Pixel are loaded on the marketing website pages (home, industry pages, blog, contact, legal pages) for audience measurement and advertising performance. They set the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics: distinguish visitors | 13 months |
| _ga_* | Google Analytics: measurement session state | 13 months |
| _fbp | Meta Pixel: advertising campaign measurement | 3 months |
The demo booking calendar (contact page and "Book a meeting" buttons) is provided by Cal.com. It only loads when you open the booking or view the contact page. Cal.com may then set, from its own domain, cookies strictly necessary for the booking to work. The information you enter (name, email, form answers) is sent to Cal.com to schedule the meeting.
Cookies on the application pages (form, ticket, payment, dashboard) are strictly necessary for the service to work. Disabling them prevents dashboard login and remembering the current ticket. The measurement cookies of the marketing website (section 2.4) are not necessary for the service.
You can configure your browser to refuse cookies. Here are the links to the instructions for major browsers:
For any questions regarding cookies: privacy@stashme.io