Cookie Policy
Effective from
Translation provided for information only; the French version is the only authoritative one. Read the French version
1. What is a cookie?
A cookie is a small file placed on your device (computer, smartphone, tablet) by the site or app you visit. It stores limited information (session ID, language preference, etc.) so the service can function or remember your choices.
Other equivalent technologies (browser local storage and session storage, device identifiers) may be used for the same purposes. In this policy, the word “cookie” covers all of these trackers.
2. Trackers used on Blisterr
Blisterr uses a minimal number of trackers, in two categories: those that are strictly necessary, placed without consent, and audience-measurement trackers, placed only after your consent. Blisterr uses no advertising cookies and no social network or ad network pixels.
2.1 Strictly necessary trackers (no consent)
Essential to the operation of the service or to a request you make, they are not used for audience measurement or advertising.
| Tracker | Purpose | Duration |
|---|---|---|
blisterr_consent (cookie) |
Remember your cookie choice | 6 months |
| App session and security cookies (login tokens, protection against CSRF attacks) | Keep you logged in and secure your actions | Duration of the login session |
blisterr_session_v2 (browser session storage) |
Know whether a session is open so the site shows the right button | 60 seconds |
blisterr.locale (cookie and app local storage) |
Remember your language | 12 months |
| App preferences and drafts (local storage: display theme, listing drafts, etc.) | Remember your settings and work in progress | Until you delete them |
referral_code (cookie) and blisterr.referral (local storage) |
Keep the referral code from an invitation link you opened, to apply it to your account; deleted as soon as the code is applied or refused | 30 days at most |
| Cloudflare Turnstile (Contact page) | Check that the contact form is filled in by a person and not by a bot | The time of the check |
The referral code is kept only to apply the invitation you opened when you create your account: it is not used for audience measurement or advertising, which is why no prior consent is required.
The site’s demo videos are served by Cloudflare Stream; playing them sends your IP address to Cloudflare, with no advertising use.
2.2 Audience measurement, masked session recording and error tracking (consent required)
With your consent only, PostHog, hosted in the European Union (Frankfurt), lets Blisterr understand how the platform is used and fix errors:
- page views and interactions (on the site, clicks are collected automatically);
- session recordings (replay): input fields are masked and, in the app, displayed text is masked too;
- tracking of technical errors;
- measurement of page loading performance (Core Web Vitals indicators);
- where you came from (
utm_*campaign parameters and thegclid,ttclidandfbclidclick identifiers) at your first contact, kept in the app only after your consent, erased if you withdraw it, and transmitted only to PostHog.
| Tracker | Purpose | Duration |
|---|---|---|
ph_<key>_posthog (cookie, copied to local storage) and window markers (session storage) |
Tell visitors and sessions apart, under a pseudonym | 12 months at most |
blisterr.first_touch (app local storage) |
Remember where you came from | 90 days |
Issuer: Blisterr, with PostHog as processor. Legal basis: consent. None of these trackers is placed before you make your choice, and they are deleted if you refuse or withdraw your consent. Blisterr respects your browser’s Do Not Track signal: if it is on, no audience measurement is carried out.
3. Your choices
On your first visit, a banner lets you accept or refuse audience-measurement trackers, with equal ease, or customise your choice.
- Accept all turns on audience measurement.
- Reject all keeps only the strictly necessary trackers.
- Customize lets you turn audience measurement on or off before saving your choice.
Refusing audience measurement has no impact on access to the service or its features.
4. Changing or withdrawing your consent
You can change or withdraw your consent at any time, as easily as you gave it:
- from the “Manage cookies” link at the bottom of every page of the site;
- from your browser settings, which let you delete cookies already placed and block future ones.
Withdrawal of consent takes effect immediately for future processing and deletes the PostHog trackers present on your device; it does not affect the lawfulness of earlier processing.
5. Retention period
Your choice (acceptance or refusal) is kept for 6 months, after which the banner is shown to you again. The maximum lifetime of an audience-measurement tracker is 12 months, within the 13-month limit recommended by the CNIL. Data collected through these trackers is kept for 25 months at most, then deleted or anonymised.
6. Third parties and transfers outside the EU
PostHog is hosted in the European Union. Cloudflare (United States) is involved in protecting the site, the contact form’s anti-bot check and delivering the demo videos. When a provider may transfer data outside the European Union, Blisterr relies on the European Commission’s standard contractual clauses or on the Data Privacy Framework where it applies, as detailed in the Privacy Policy.
Payments are made in Stripe’s secure interface, which may place its own cookies for security and fraud prevention, according to its policy.
7. Contact
For any question about this policy, contact privacy@blisterr.com. You can also exercise your rights with the CNIL (cnil.fr).