Cookie policy
Last updated: September 05, 2026.
A cookie is a small file placed on your device by a site you visit. Most sites use them to follow you from page to page, measure their audience or sell targeted advertising. Garatools sets only one, and it only keeps you signed in.
What you accept or refuse
The ePrivacy Directive (2002/58/EC), as transposed in each Member State, requires prior consent for any tracker that is not strictly necessary to provide a service you have expressly requested. Session cookies are exempt, as is remembering your display preferences: those work whatever you decide, otherwise you simply could not sign in.
The banner is therefore about one thing only: analytics, which would tell us which pages get read and which are useless. Refusing removes no feature, degrades nothing, and takes no longer than accepting — one click either way.
In full transparency: this analytics is not installed yet. Today, accepting therefore triggers nothing at all. Your choice is recorded in advance and will be honoured the day it is installed. We would rather tell you than let you believe you are consenting to something active.
Your choice
The login cookie, however, is not affected: without it, no connection is possible.
Your choice is kept for 6 months, both ways — a refusal is kept as long as an acceptance. After that, you will be asked again. It is stored in your browser (key garatools-cookie-consent), not in a cookie: remembering a refusal of cookies by setting a cookie would be hard to defend.
The cookie set by Garatools
| Name | Purpose | Duration | Consent |
|---|---|---|---|
atelier_session | Keeping you signed in to your workspace. It contains only a random identifier, with no personal data: not your name, not your email, not your garage's name. Our servers keep only a hashed fingerprint of it. | 30 days, extended on each use. Deleted immediately on sign-out. | Not required — strictly necessary |
This cookie is protected by the HttpOnly (unreachable from page scripts), Secure (sent over HTTPS only) and SameSite=Lax (not sent on a request triggered by another site) flags.
What is stored in your browser
These are not cookies and nothing is sent to our servers, but you are owed the information all the same:
garatools-theme— the display theme you chose (light, dark or your system's), so you do not have to set it on every visit. Kept until you clear the site's data. Exempt from consent in the same way as a display preference.garatools-cookie-consent— your answer to the banner above, with its date. Kept for 6 months. It is itself exempt from consent: it is what lets us avoid asking again on every page.
What Garatools does not do
- No advertising cookie, no retargeting, no resale of data.
- No analytics to date: no Google Analytics, no equivalent. No behavioural analysis tool is installed, whether you accepted or not.
- No social network button, no font or script loaded from another domain.
- The service is in fact configured to technically forbid loading an external script (content security policy). A third-party tracker could not run, even if added by mistake.
Third-party services
- Stripe — paying for a subscription happens on a page hosted by Stripe. The cookies needed for transaction security and fraud prevention are set there by Stripe, on its domain and under its responsibility, only during payment. See the Stripe cookie policy. No Stripe script is loaded on Garatools pages.
- Vercel (hosting), Neon (database) and Brevo (email delivery) operate server-side only. They set no cookie in your browser.
Refusing or deleting cookies
Your browser lets you review, block or delete a site's cookies from its privacy settings. You can do so at any time, without telling us.
One consequence to know: since the atelier_session cookie is what keeps you signed in, blocking or deleting it signs you out and prevents access to your workspace. Public pages remain perfectly readable.
To go further, the data protection authority competent for this service publishes a guide on cookies and other trackers — www.autoriteprotectiondonnees.be. If you live in another Member State, your own country's authority publishes the equivalent.
If this policy changes
The day analytics is actually installed, it will only run for people who accepted, and never before the choice has been made — no answer counts as a refusal.
Should new purposes appear, your current choice would cease to be valid and you would be asked again: consent given today does not cover what might be added tomorrow. This page would be updated beforehand.
Contact
For any question about this document, write to contact.garatools@gmail.com. The details of personal data processing are set out in our privacy policy.