Contents
Cookies and browser storage
A cookie is a small file a site places in your browser, which the browser sends back with every page. Local storage is a memory of the browser that only the pages of the site read, and that is never sent to the server.
The law treats both the same way, as trackers (article 82 of French law no. 78-17 of 6 January 1978, known as the loi Informatique et Libertés). This page lists all of them, with the names and the lifetimes the code applies.
The cookies of this site
Aperture sets at most the cookies below, and only those that concern your visit: the "Stay signed in" cookie exists only if you asked for it, the player space's only if you sign in there, the operator pass only for an operator of the platform.
| Name | Purpose | Lifetime | Set for |
|---|---|---|---|
|
Session
aperture-session
|
Keeps you signed in from one page to the next and holds the security token of the forms you send. Renewed on every page; without it no form works.
Strictly necessary
|
2 hours | Every visitor |
|
Form protection
XSRF-TOKEN
|
A copy of that security token, which proves a form was sent from this site and not by another site in your name.
Strictly necessary
|
2 hours | Every visitor |
|
Stay signed in
remember_web_*
|
Set only when you tick "Stay signed in": signs this browser back in once the session has ended. Signing out, or changing your password, makes it useless.
Strictly necessary
|
1 year | Signed-in people |
|
Player space sign-in
remember_player_*
|
Set on every sign-in to the player space, with no box to tick, because it is how the space keeps you signed in: it signs this browser back in to the space once the session has ended. Signing out of the space, or deleting it, makes it useless.
Strictly necessary
|
1 year | Players signed in to the player space |
|
Language
aperture_locale
|
The language you picked with the language switch, for the pages read before you sign in. Set only when you pick one.
Your choice
|
1 year | Every visitor |
|
Theme
aperture_theme
|
The light or dark theme you chose, so each page is drawn in it from the start. Set only when you choose one.
Your choice
|
1 year | Every visitor |
|
Operator pass
aperture_maintenance_pass
|
Lets a platform operator through a maintenance window to carry out the work. Signed, and worth nothing without an operator account.
Strictly necessary
|
12 hours | Platform operators only |
* The name goes on with a fingerprint of the sign-in mechanism, the same for everyone.
None of these cookies can be read by another site. The hosted files are served from a separate address, which sets no cookie at all.
Browser storage
A few choices stay in your browser, without ever being sent to the server:
| Name | Purpose | Lifetime | Set for |
|---|---|---|---|
|
Theme, in this browser
aperture_theme
|
The same choice, kept in this browser for the theme button to read. It never leaves the browser.
Your choice
|
Until you clear your browser data | Every visitor |
|
Bandwidth alert closed
aperture:bandwidth-alert:*
|
Remembers that you closed the alert about your organisation's monthly bandwidth, so it only comes back at the next level or the next month.
Your choice
|
Until you clear your browser data | Signed-in people |
|
Maintenance notice closed
aperture:maintenance-notice:*
|
Remembers that you closed the notice of an announced maintenance, so it does not show again for the same window.
Your choice
|
Until you clear your browser data | Every visitor |
* The key goes on with what was closed: the organisation, the month and the level for a bandwidth alert, the window for a maintenance notice.
Why no banner asks for your consent
Article 82 of the loi Informatique et Libertés requires your consent before a tracker is set, unless its sole purpose is to enable or facilitate communication by electronic means, or it is strictly necessary for a service you expressly asked for.
The guidelines of the CNIL, the French data protection authority (deliberation no. 2020-091 of 17 September 2020), place in this exception among others:
- authentication trackers, which keep you signed in, and those that protect this mechanism and the forms you send;
- trackers that keep a presentation choice you made, such as the language or the theme, when that choice is part of the service expected.
Every tracker of this site falls into one of these categories, is read by this site alone, and is only set for the service you are using or to keep a choice you made. Asking for your consent would therefore serve no purpose: that is why no banner is shown.
What this site does not use
- No audience measurement and no statistics tool, whether ours or a third party's.
- No advertising, and no advertising tracker.
- No social network button, and no content embedded from another site (video, map, post).
- No typeface loaded from a third-party service: they are served by the site itself.
- No script supplied by a third party, and no fingerprinting of your browser.
When a share link is pasted into Discord, Discord reads the page from its own servers to show a preview: nothing is placed in your browser when that happens.
Clearing or blocking these trackers
You can clear the cookies and the storage of this site at any time, or block them, from the settings of your browser:
- Firefox: Settings, then Privacy & Security;
- Chrome: Settings, then Privacy and security;
- Edge: Settings, then Cookies and site permissions;
- Safari: Settings, then Privacy.
Blocking the session cookie stops you from signing in and from sending a form. Blocking the others only means your choices are not kept from one visit to the next.
Signing out ends the session and clears the "Stay signed in" cookie. Changing your password makes the sign-in cookies of your other browsers useless.
In the player space, signing out clears its sign-in cookie and makes those of your other browsers useless; deleting the space makes them all useless.
If this were to change
The tables of this page are drawn from the list of trackers the code itself uses, which keeps them true to what the site actually sets.
If a tracker that needs consent were ever added, for instance to measure the audience or embed content from another site, your consent would be asked before it is set, with the option to refuse as easily as to accept, and to change your mind at any time. This policy would be updated the same day.
Learn more
The data a session holds, such as your IP address, is processed as the privacy policy explains. The CNIL sets out the rules that apply to cookies on its website (in French).