Legal information
Cookie Policy
Effective date: 16 September 2026 — v1.1
This document is legally binding in French only, as required by French law. This English translation is provided for information purposes. For questions, contact dpo@jefacturebien.fr.
1. What is a cookie?
A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit a website. It allows the site to remember information about your visit, such as your preferred language or other settings.
Cookies may be:
- Temporary (session cookies): automatically deleted when the browser is closed
- Persistent: kept for a defined period
2. Data controller
QR Communication SAS Publisher of the jefacturebien.fr platform Contact: dpo@jefacturebien.fr
3. Cookies used on jefacturebien.fr
3.1 Strictly necessary cookies
These cookies are essential to the operation of the Platform. They cannot be disabled.
| Cookie name | Purpose | Duration | Issuer |
|---|---|---|---|
jfb_session | Authentication session (app.jefacturebien.fr workspace) | Session | jefacturebien.fr |
XSRF-TOKEN | Protection against CSRF attacks | Session | jefacturebien.fr |
jfb_theme | Theme preference (light/dark) | 1 year | jefacturebien.fr |
jfb_locale | Language preference | 1 year | jefacturebien.fr |
consent_id | Anonymous identifier for your consent session. Allows your CMP choices to be retrieved on a later visit and avoids repeatedly displaying the banner. Contains no directly identifying personal data. | 1 year | jefacturebien.fr |
Legal basis: These cookies are exempt from consent as they are strictly necessary for the operation of the service (Art. 82 of the French Data Protection Act).
3.2 Performance and analytics cookies
This section distinguishes the two surfaces covered by this policy: the public site and the application workspace.
Public site jefacturebien.fr — no tracker. No audience measurement cookie is placed there. The site embeds no analytics tool, no session recording and no third-party tracker for that purpose.
app.jefacturebien.fr workspace — product audience measurement. The trackers below are only placed after your explicit consent via the CMP banner.
| Cookie name | Purpose | Duration | Issuer |
|---|---|---|---|
ph_<project_key>_posthog | Pseudonymous visitor identifier and PostHog session identifier (page views, navigation paths). The same value is also kept in your browser's localStorage (localStorage+cookie persistence). | 1 year | PostHog EU |
Characteristics of our analytics solution:
- PostHog Cloud EU (PostHog Inc.), hosted exclusively in the European Union (Frankfurt, Germany) — measurements are sent to the single
eu.i.posthog.comendpoint - No data transfer outside the EU
- No personal data transmitted: event properties containing an email, phone number, SIRET, VAT number, IBAN, name, address, identifier or token are stripped before sending; automatic capture of clicks and form fields is disabled
- Respect for the browser's "Do Not Track" signal: if this signal is enabled, no data is collected, even where consent was given
- No sharing with third parties and no advertising profile
- No PostHog session recording: replay is disabled on the application workspace
Sentry session replay: when a technical error occurs, our monitoring tool Sentry (Sentry EU, Frankfurt) records a replay of the navigation in order to reproduce the problem. No cookie is placed: an item is written to your device's session storage (sessionStorage, key sentryReplaySession), erased when the tab is closed. This replay falls under the same "Analytics" consent: it is only enabled after your acceptance, and it is stopped — the key deleted — if you withdraw it. All displayed or typed text is masked and media blocked before sending. Error tracking itself (technical traces, without replay) remains active unconditionally, as it is strictly necessary for the operation of the service.
Processors: PostHog Inc. — privacy policy · data processing agreement · Functional Software Inc. (Sentry) — data processing agreement.
Legal basis: Consent (Art. 6.1.a GDPR). You may withdraw your consent at any time via the "Manage my cookies" link in the footer.
3.3 Functional cookies
These cookies help improve your user experience.
| Cookie name | Purpose | Duration | Issuer |
|---|---|---|---|
jfb_sidebar | Sidebar menu state (open/closed) | 1 year | jefacturebien.fr |
jfb_dashboard_layout | Dashboard display preferences | 1 year | jefacturebien.fr |
Legal basis: Consent (Art. 6.1.a GDPR).
3.4 Third-party cookies
We use no advertising cookies and no social network cookies.
The only third-party cookies used are those of our payment provider:
| Cookie name | Purpose | Duration | Issuer |
|---|---|---|---|
__stripe_mid | Fraud prevention | 1 year | Stripe |
__stripe_sid | Payment session | 30 min | Stripe |
Note: Stripe cookies are only placed during the payment process (subscription checkout).
4. Cookies we do NOT use
For your information, here are the types of cookies we do not use:
- Advertising cookies
- Retargeting cookies
- Social network cookies (Facebook, Twitter, etc.)
- Cross-site tracking cookies
- Google Analytics, Google Tag Manager or any other advertising audience measurement tool (our only measurement tool is PostHog Cloud EU, limited to the app.jefacturebien.fr workspace and described in § 3.2)
5. Managing your preferences
5.1 Consent banner
On your first visit, a banner lets you accept or refuse non-essential cookies.
You can change your choices at any time by clicking the "Manage cookies" link in the footer.
5.2 Browser settings
You can also configure your browser to:
- Accept or refuse all cookies
- Accept or refuse cookies on a case-by-case basis
- Delete cookies already placed
Warning: Blocking all cookies may affect the operation of certain Platform features (in particular authentication).
Instructions by browser:
Google Chrome: Settings > Privacy and security > Cookies and other site data
Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
Safari: Preferences > Privacy > Cookies and website data
Microsoft Edge: Settings > Privacy, search and services > Cookies
5.3 "Do Not Track" signal
No analytics data is collected on the public site jefacturebien.fr (see § 3.2). On the app.jefacturebien.fr workspace, our analytics solution (PostHog Cloud EU) respects your browser's "Do Not Track" signal: if this signal is enabled, no analytics data is collected, even where consent was given.
6. Retention period
| Cookie type | Maximum duration |
|---|---|
| Session cookies | Browser closure |
| Preference cookies | 1 year |
| Analytics cookies | 13 months (app.jefacturebien.fr workspace; no analytics cookie on the public site) |
| Consent cookie | 1 year |
7. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding data collected via cookies:
- Right of access
- Right to rectification
- Right to erasure
- Right to object
To exercise these rights, contact our DPO: dpo@jefacturebien.fr
For more information, see our Privacy Policy.
8. Changes to this policy
We may amend this Cookie Policy to reflect changes in our practices or in regulations. In the event of a significant change, we will inform you via a banner on the site.
9. Learn more
To learn more about cookies and how to manage them:
- CNIL: https://www.cnil.fr/fr/cookies-et-autres-traceurs
- Your Online Choices: https://www.youronlinechoices.com/fr/
10. Contact
For any question regarding this Cookie Policy:
DPO email: dpo@jefacturebien.fr General email: contact@qrcommunication.com Website: https://jefacturebien.fr