Cookie Policy

1. What is a Cookie?

A cookie is a small text file stored on your device when you visit a website. Cookies allow the site to recognize your device and remember certain information about your visit.

2. Types of Cookies We Use

We use the following categories of cookies:

• Essential Cookies — Necessary for the platform to function. They enable navigation, authentication and session security. These cookies cannot be disabled.
• Functional Cookies — Allow us to remember your preferences (language, display settings) to improve your experience.
• Product Telemetry and Session Recording (opt-in) — Help us understand how you use the platform and, for authenticated users, reproduce problems you report. Enabled only after you accept the banner that appears on your first visit, and can be disabled at any time. Sensitive fields and financial screens are masked automatically.
• Aggregate Web Analytics (cookieless) — We measure overall traffic on our public pages (visitor count, pages viewed, traffic sources, city and country) using a self-hosted Plausible installation. Plausible sets no cookies on your device, stores no persistent identifier, and captures no device fingerprint. The IP address is used momentarily to determine the city, then immediately discarded; it is never stored. This measurement runs for all visitors regardless of your banner choice, because no personal information is involved.

3. Third-Party and Self-Hosted Tools

A few services place or receive cookies / data from our pages:

• Stripe: secure processing of your subscription payment
• Supabase: authentication and session management
• OpenReplay (self-hosted on OVHcloud Montréal — o.condoaide.ca): product telemetry + session recording for technical support. Enabled only after you accept the banner. Pseudonymized user identifier; IP address not transmitted; automatic masking of form fields and sensitive screens (PAD, attestation, registry, financial statements, insurance proofs, compliance, syndicate members, payments).
• GlitchTip (self-hosted on OVHcloud Montréal — g.condoaide.ca): application error tracking. Remains active regardless of your choice (strictly necessary for service quality). Minimized configuration: no IP, no request bodies, pseudonymized user identifier.
• Plausible (self-hosted on OVHcloud Montréal — p.condoaide.ca): cookieless, aggregate web analytics on public pages (visitors, pages, sources, city and country). No cookies, no persistent identifier, no device fingerprint. The IP address is used momentarily to determine the city, then immediately discarded; it is never stored. Runs for all visitors regardless of your banner choice, because no personal information is involved.

4. Retention Period

Cookies and associated data have different lifespans:

• Session cookies: deleted when you close your browser
• Persistent cookies (preferences, banner choice): kept until they expire (usually 1 to 12 months) or until you delete them
• OpenReplay telemetry (events + session recordings): 30 days server-side
• GlitchTip errors and logs: 30 days for events; up to 90 days for resolved error groups, for regression detection
• Plausible statistics (visitors, pages, sources, city, country): 24 months of aggregates server-side. No IP address is retained — the IP is used only momentarily for city/country resolution, then discarded. Daily visitor fingerprints (a hash recomputed each day from a daily salt) are regenerated every 24 hours and never persist.

5. Managing Cookies

You can control cookies in several ways:

• Banner at the bottom of the screen: on your first visit, choose whether to accept or refuse telemetry. To reopen the banner later, click "Reset cookie preferences" at the bottom of every page.
• User profile (authenticated users): the "Session recording for support" card in Profile lets you disable OpenReplay session recording even if you accepted the banner. The "Support mode" / "Private mode" status is also visible in the user menu at the top of the sidebar.
• Browser settings: most browsers allow you to block or delete cookies
• Third-party tools: browser extensions allow advanced cookie management

Note: disabling certain essential cookies may affect the platform's functionality. Disabling telemetry does not affect your use of the service — strictly necessary cookies (session, security, language) remain active.

6. Similar Technologies

In addition to cookies, we may use:

• Local storage: to save preferences and session data
• Session storage: to maintain your login state

7. Changes

We may update this policy periodically. The last update date is indicated at the top of this page.

8. Contact Us

For any questions about our use of cookies, contact us at: