Sign inSign up
Sign up

Cookies and trackers

Principle

This page describes the cookies and other trackers of the Ancrale application (app.ancrale.fr) and of the www.ancrale.fr website. The related personal data is described in the privacy policy.

A tracker is information read from or written to your device when you use an online service: a cookie, or data kept in your browser’s storage. Article 82 of the French Data Protection Act makes their use subject to your consent, unless their sole purpose is to enable communication or they are strictly necessary for the service you request.

Ancrale application (app.ancrale.fr)

The Ancrale application sets no third-party cookie: no audience measurement, advertising, social network or tracking tool. All its cookies are its own, HttpOnly (not readable by JavaScript) and Secure (sent over HTTPS only), without a Domain attribute: they are tied to the application’s address alone (app.ancrale.fr or any other address of the service), are never sent to the www.ancrale.fr website, and the website sends none to the application. The application loads no script from the payment provider.

They all serve the working of the service you request (authentication, security, showing the progress of a task). They are strictly necessary for the service you request and exempt from consent (Article 82 of the French Data Protection Act, CNIL guidelines): this is why no banner asks for your agreement, and this page informs you of them.

  • ancrale_refresh: keeps you signed in between visits. Duration: 7 days, extended while you stay active. Set when you sign in.
  • ancrale_session_hint: indicates that a session is open, to send you straight to your space or to the sign-in page; it holds no data (fixed value “1”). Duration: 7 days, extended while you stay active. Set when you sign in.
  • ancrale_session_id: identifies the open session, so that it is closed properly when you sign out; it is not a secret. Duration: 7 days, extended while you stay active. Set when you sign in.
  • ancrale_trusted_device: part of sign-in security: it recognises the browser from which you signed in by code, to adapt the protections against automated sign-in attempts: a recognised browser is partly exempt from them and has its own attempt limits. It does not sign you in by itself and holds a random token, not your e-mail address. Duration: 90 days, renewed at each sign-in by code. Set when you sign in by code.
  • ancrale_signin_nonce: ties a request for a sign-in code to the browser that made it, for the time of the sign-in. Duration: 10 minutes. Set when you ask for a code.
  • ancrale_signin_verified: shows that the code you entered was verified, for the time it takes to finish signing in. Duration: 2 minutes. Set when you enter a valid code.
  • ancrale_sse_ticket: shows the progress of a document task in real time. Duration: 10 minutes. Set when a task starts.
  • __Host-ancrale.useragent: an Ancrale authentication cookie, which secures the sign-in journey by tying your browser to its authentication session. Duration: 1 year. Set as soon as you reach the sign-in page, even if you do not sign in.

When you sign out, the ancrale_refresh, ancrale_session_hint, ancrale_session_id and ancrale_sse_ticket cookies are deleted; the ancrale_signin_nonce and ancrale_signin_verified cookies expire on their own; the ancrale_trusted_device cookie is kept until it expires; if you ask to be signed out of all your devices, it is no longer recognised on any of them and is deleted from the browser you make the request from; the __Host-ancrale.useragent cookie is kept until it expires (1 year).

The application also uses your browser’s storage. These are not cookies, but Article 82 applies to them as well; these two uses are features you ask for, exempt from consent:

  • Favourite tools (localStorage): a copy of the tools you mark as favourites, which are stored with your account, kept until you sign out or clear your browser data.
  • Signatures and watermarks (IndexedDB): the signatures and watermark images you save in the editor, kept on your device and not sent to the server before you confirm them, until you delete them or clear your browser data.

www.ancrale.fr website

The www.ancrale.fr website sets no cookie. Its audience measurement, provided by Plausible, a tool Ancrale hosts itself, works without cookies; it is described in the privacy policy. If you object to this measurement, your browser keeps this choice in its storage (plausible_ignore) until you withdraw it or clear the site's data, and the tool reads this information on every page viewed and before each measured action. As it is needed to respect your choice, this tracker is exempt from consent.

Stripe payment pages

Subscriptions are paid on pages hosted by Stripe, on its own domain, not on app.ancrale.fr. Stripe sets its own cookies there, in particular to prevent fraud; they are covered by Stripe’s cookie policy (opens in a new window).

E-mails of the service

The e-mails the service sends you contain no tracker: no pixel that tracks opens and no link that tracks clicks.

Deleting cookies

You can delete these cookies and this data at any time in your browser settings: you are then signed out of the application and must sign in again to use it, and your saved signatures and watermark images are erased; your favourite tools, stored with your account, are kept. Blocking cookies prevents you from signing in.

Updates

This page is updated whenever the trackers of the application or of the website change. Version 1, in force from 1 December 2026.