Cookie policy
Version of 2026-07-16
This page describes the cookies set by the Graft website, and distinguishes them from the tracking script that merchants install on their own sites. This English version is provided for convenience only. In the event of any discrepancy, the French version prevails.
1. Cookies set by this site
This site sets no advertising cookies, no analytics cookies and no third-party trackers. It uses no analytics tooling. The only cookies set are:
| Cookie | Purpose | Duration | Consent |
|---|---|---|---|
| Authentication cookies (Supabase) | Keeping you signed in | Session | Exempt — strictly necessary for the requested service |
| gp_locale | Remembering your display language | 1 year | Exempt — user-expressed preference |
Both cookies fall under the consent exemptions in article 5(3) of the ePrivacy directive, as implemented in France by article 82 of the Data Protection Act and interpreted by the CNIL: they are strictly necessary to provide the service you requested. This is why no consent banner is shown on this site.
If analytics tooling or a third-party tracker were added, a compliant consent banner would be put in place and this page updated beforehand.
2. Attribution cookie on merchant sites
Separate from this site: merchants install the Graft tracking script (gp.js) on their own site. It sets a first-party cookie used to attribute a conversion to the affiliate who generated it.
That cookie is only set after the visitor's consent has been obtained: the script checks for consent before any write, and does nothing until consent is granted. Collecting that consent and informing visitors is the merchant's responsibility, as controller on its own site.
| Cookie | Purpose | Duration | Consent |
|---|---|---|---|
| First-party attribution cookie | Attributing a conversion to an affiliate | Configured by the merchant (max. 90 days) | Required — collected by the merchant |
3. Managing your cookies
You can delete cookies already set, or block them, at any time from your browser settings. Blocking authentication cookies will prevent you from signing in.