When you visit l21studios.com, your browser receives no cookies. A cookie is only set when you log in, to keep you logged in. The only exception: if you arrive through the link of an L21STUDIOS adviser (an address ending in ?code=…), a functional cookie remembers that code. And if you choose the language of the website yourself (FR · EN button), a cookie remembers that choice. None of these cookies is used to track you: that is why the website shows no consent banner.
1. Cookies set by the website
| Name | Purpose | Set when | Duration |
|---|---|---|---|
l21_client_session | Keeps your customer account open. Contains a random token and no personal data. Not accessible to scripts (httpOnly), sent over HTTPS only. | After your login code has been validated | 12 hours after your last visit, or until you log out |
l21_code_conseiller | Functional referral cookie: remembers the code of the adviser who sent you the link, to pre-fill the “Adviser code” field if you create an account. It contains only that code, is read only by our server (httpOnly), and does not link you to anyone without your consent (a box to tick when you sign up). | When you open a referral link (?code=…) | 30 days |
l21_langue | Remembers the language you chose (French or English), so that pages open directly in that language. It contains only fr or en. | When you click FR or EN at the top of the page | 1 year |
sb-…-auth-token | Session of the studio team in the administration area (Supabase Auth). | When a team member logs in, on the administration pages only | Session, renewed with use |
2. Local storage, without cookies
So that you do not lose what you have typed if the page closes, your browser keeps two drafts on your device, never sent to any third party: l21_reservation_draft (booking form) and l21_print_cart:<account> (print basket, one per customer account). They are deleted when the request or order is sent (the basket also when you switch accounts), and you can delete them by clearing the website's data in your browser.
3. Third-party services
No third-party script is loaded in the pages: no external measurement tool (no Google Analytics or similar), no advertising, no social media buttons, no remote fonts. Links to WhatsApp and Instagram load nothing until you click them.
3A. In-house audience measurement, without cookies
To know which pages are useful, our own server counts page views, without cookies and without storing anything in your browser: the page, the website you came from (its name only), the country, the type of device, the browser and the language. Your IP address is not kept. To count the visitors of a day without recognising them, we compute a fingerprint from the address and the browser, with a key drawn at random each day and never stored: the next day, nobody, not even us, can find out who is behind it. These figures remain anonymous and are only used to improve the website. If your browser is set to “Do Not Track” or Global Privacy Control, no page view is sent.
4. Server logs
Our hosting provider records requests (IP address, page requested, time) in technical logs kept for at most 12 months, for security and to diagnose faults. They are used for no other purpose.
5. Refusing cookies
You can block cookies in your browser: the website remains accessible, but you will no longer be able to log in to your customer account. For any question: contact@l21studios.com.