1. What this policy covers#
A cookie is a small file placed on your device when you visit a site. This policy covers cookies as well as the other local storage technologies we use (browser local storage, session storage), which are subject to the same consent rules.
It complements our Privacy Policy, which describes all our personal data processing.
3. Analytics#
With your agreement, we measure site usage with PostHog, to understand which pages are viewed, which channel and which region brought you here, how you actually use the pages (what you click, how far you read), where purchase journeys break down, what you ask our recommendation assistant and our documentation search, and whether pages render with good performance in your browser. Without your agreement nothing is loaded at all: the script itself is never downloaded.
| Item | Detail |
|---|---|
| Processor | PostHog — PostHog Cloud EU, hosted in Frankfurt, Germany |
| Purposes | Audience measurement and customer-journey analysis (pages viewed, cart additions and removals, checkout, sign-up, email verification, payment and payment failure, provisioning, installing a mod, a plugin or a modpack on a game server, renewal, renewal cancellation and resumption, service ending, refund, contact and support requests); measurement of where visits come from (acquisition channel, referring page, campaign labels) and of their approximate geographic origin; understanding how pages are actually used (elements clicked, repeated frustrated clicks, clicks with no effect, reading depth) in order to fix their usability; improving our catalogue, our documentation and our recommendation assistant from what you actually ask for; monitoring the cost, latency and answer quality of that assistant; measuring real rendering performance in your browser (Core Web Vitals); telling human visits apart from automated traffic |
| Data sent | Navigation — the page address for public pages (home, catalogue, documentation, legal pages, contact), and a normalised page name with no identifier and no URL parameter for every other page, including your customer area and the checkout flow; your language; the referring page you arrived from, stripped of its parameters; the campaign labels (utm) in the link you followed. Technical context — your browser, operating system, device type, screen and window size, time zone; your browser's technical identification string (user agent), used to tell human visits apart from automated traffic and never attached to your profile; rendering-performance measurements (LCP, INP, CLS, FCP). Approximate location — country, region and city derived from your IP address on arrival (see the "IP address" row below). Interactions — the elements you click, identified by their kind and by the label we display on them ("Add to cart"…), repeated frustrated clicks, clicks with no effect, scroll depth, and click coordinates used to build heatmaps. Values typed into form fields are never read, and the technical attributes of elements (links, internal identifiers, attached data) are removed before sending. Commerce — the product category and public product reference, the billing period, an amount bracket, the currency, the number of items. Use of your services — when a content install succeeds on a game server: what kind it was (mod, plugin or modpack) and which public catalogue it came from (Modrinth, CurseForge, Hangar, SpigotMC). Never the name of the installed project, nor the file, nor your server's identifier. Subscription lifecycle — when you stop a service's renewal: the reason you pick from the list we offer, whether or not you added a comment, and the comment itself — after automatic removal of any email address, phone number, postal address, domain name, IP address, bank details and order, invoice or ticket reference it may contain, exactly as for the recommendation assistant below. Recommendation assistant and documentation search — the text you write, and the assistant's answer, after automatic removal of any email address, phone number, postal address, domain name, IP address, bank details and order, invoice or ticket reference they might contain; whether your message was text you wrote or one of the four preset buttons offered under the field; the AI model used, the volume of text processed and the response time. Support and billing — the generic category of a step, never the content of your messages and never any order, invoice or ticket number. |
| IP address | Your IP address is sent to PostHog for the sole purpose of deriving a country, region and city from it, then immediately discarded: the "Discard client IP data" option is enabled on our project, so the address itself is kept neither on the event nor on your profile. Only the approximate location derived from it is stored |
| Identifier | A pseudonymous identifier computed by our servers, which cannot be linked back to your account without a secret key that never leaves them. Your email, your name and your order number are never sent |
| Storage on your device | Browser local storage only, written after you agree and deleted when you withdraw. No PostHog cookie is set |
| Routing | Measurements travel through a path on our own domain before reaching PostHog. This keeps a blocker from breaking the measurement and means the request leaves from our servers; PostHog nonetheless remains the recipient of the data described above |
| Retention | 12 months at most at PostHog |
| How long your choice lasts | Six months. After that we ask again; your choice is never silently extended |
We enable no session recording (video replay of your browsing), no survey, no advertising tracking and no A/B testing, and we do not copy text you select. Heatmaps are limited to click and scroll coordinates on our public pages: they do not reproduce what was on screen. The content of your checkout forms, your tickets and your support messages is never sent.
The text you send to the assistant or to the documentation search is the exception, and we say so explicitly because it is the only free text we keep: we keep it to learn what visitors actually look for, it goes through an automatic filter that removes the personal data listed above before anything is sent, it is capped in length, and it is erased along with the rest of your measurement data when you withdraw your agreement or ask us to.
You can withdraw your agreement at any time from the cookie management button at the bottom of every page: measurement stops immediately, including in other open tabs, and the data already stored on your device is erased. To request access to your measurement data or its deletion, write to [email protected].
4. What we do not use#
We set no advertising cookies, no retargeting cookies, no social network trackers and no session recorders. We neither sell nor share your browsing data for commercial purposes.
5. Third-party services#
Some pages call third-party services that are strictly necessary for the feature you are asking for. Those services may set their own cookies, governed by their respective policies:
| Service | Where | Why |
|---|---|---|
| PayPal | Payment and checkout pages | Payment processing, fraud prevention, strong customer authentication (3-D Secure) |
| Cloudflare Turnstile | Account and contact forms, recommendation assistant | Checking that you are not a bot, invisibly and without any action on your part — see section 5 of the privacy policy |
| PostHog (Cloud EU, Frankfurt) | The whole site, only after you agree | Audience measurement — see section 3 |
The address suggestion service used in the billing form sets no cookie, but receives the text you type in order to propose matching addresses.
These services are only loaded on the relevant pages and only when the feature is used.
6. Managing your preferences#
On your first visit, a banner lets you accept, refuse or customise the non-essential categories. Refusing does not affect your access to the site in any way.
You can change your choice at any time using the cookie management button at the bottom of every page.
You can also block or delete cookies from your browser settings. Blocking strictly necessary cookies will, however, prevent you from signing in to your client area.
7. Your rights and contact#
You have rights of access, rectification, erasure, objection and withdrawal of consent regarding the data collected through these technologies. To exercise them, or for any question, write to [email protected]. You may also contact the French data protection authority, cnil.fr.