Cookie policy
This page lists the trackers Servor places on your device and how to control them. Our approach is minimal: no advertising cookies, no third‑party analytics, no sharing for commercial purposes. This is a courtesy translation; in the event of a discrepancy, the French version prevails.
1. Applicable framework
Article 82 of the French Data Protection Act subjects any reading or writing of information on your device to prior consent, except for trackers strictly necessary to deliver a service you expressly requested. As Servor only uses trackers falling within that exemption, no consent banner is required — and none is imposed on you.
2. Cookies placed
All cookies below are strictly necessary and exempt from consent.
| Name | Purpose | Duration | Issuer |
|---|---|---|---|
__session | Maintaining the authenticated session | 7 rolling days | Clerk |
__client_uat | Inactivity detection and security checks | Session | Clerk |
servor_locale | Remembering the display language | 1 year | Servor |
3. Browser local storage
In addition to cookies, the Service writes information to your browser's local storage, which is also covered by article 82:
servor.team— remembers the active team so it can be restored between visits. Persists until you clear the site's data.
Your vault decryption key, by contrast, is never written to disk: it stays in memory for the duration of the session and disappears on lock, sign‑out or tab closure.
4. Audience measurement
Servor uses Vercel Web Analytics to measure site traffic. According to its publisher, this tool places no cookie and writes nothing to your device: it therefore falls outside the prior consent requirement of article 82. It allows neither cross‑site tracking of a visitor nor the building of an advertising profile.
The data collected is limited to aggregate indicators: pages viewed, referrer, device type and country. The legal basis is our legitimate interest in measuring traffic to our own site. No other analytics tool — Google Analytics, Mixpanel or equivalent — is integrated, and no data is sold for advertising purposes.
5. Payment cookies
When you enter a payment method, Stripe places its own technical cookies within its secure frame, necessary for fraud prevention and PCI‑DSS obligations. See Stripe's cookie policy.
6. Controlling trackers
Strictly necessary trackers cannot be refused without degrading the Service: without them, authentication is impossible. You nevertheless remain in control:
- configure your browser to block some or all cookies, accepting the resulting loss of access to the Service;
- delete already stored data through your browser settings (Preferences → Privacy → Cookies and site data);
- use private browsing, which clears everything when the window is closed.
7. Maximum duration
In line with CNIL recommendations, the lifetime of trackers placed by Servor does not exceed 13 months. Session cookies expire when the browser is closed or after a period of inactivity.
8. Changes
This policy is updated whenever a tracker is added or removed. Material changes are flagged through the interface and on this page.
Questions: contact@benode.fr