Cookie policy
Version 1.0 — effective [to be completed: Effective date of the cookie policy (LEGAL_COOKIES_EFFECTIVE_DATE)]
This page is a translation of the French original, provided for information. In case of discrepancy, the French version prevails (« En cas de divergence, la version française prévaut »).
When you browse https://metabolis.chtara.com, information may be read or stored in your browser (“cookies” and “trackers”, article 22.2 of Spanish law no. 34/2002 (LSSI-CE), which transposes article 5.3 of Directive 2002/58/EC). Metabolis uses no advertising cookie, no audience measurement tool and no social network tracker. The only trackers used are strictly necessary for the Site to work or for features you request: they are exempt from consent under the Spanish Data Protection Agency (AEPD) guide on the use of cookies and the CNIL guidelines. This is why no consent banner is shown to you.
Trackers used
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
| metabolis-base-test-session | Metabolis | keep your session, your login and your current order | 120 minutes of inactivity |
| XSRF-TOKEN | Metabolis | secure form submissions (protection against request forgery) | duration of the session |
| remember_web_… | Metabolis | keep you logged in, only if you tick “Remember me” | 30 days |
| metabolis:preloaded (browser session storage) | Metabolis | avoid replaying the loading animation on every page | until the tab is closed |
| planner-active-day (browser session storage, client area) | Metabolis | remember the day shown in your menu planner | until the tab is closed |
The test mode used during development is never active on the production site and sets no tracker there.
Stripe payment page
Payment takes place on a secure page hosted by Stripe (checkout.stripe.com). Stripe sets its own cookies there, needed for payment and fraud prevention, under its own responsibility: see Stripe’s cookie policy.
Fonts and icons
To display the Site fonts, your browser contacts fonts.bunny.net (European Union): this service sets no cookie, but your IP address is technically sent to it. The client area icons are hosted by Metabolis and call no third party.
External links
Links to our social networks and to the video conferencing tool open the site concerned, which applies its own policy; no content from these services is loaded on our Site.
Browser settings
You can delete or block cookies from your browser settings. Blocking the trackers listed above prevents logging in to your client area and paying.
Changes
If we ever added a tracker requiring consent (non-exempt audience measurement, third-party video content…), we would ask for your prior agreement through a banner letting you accept or refuse just as easily, and this page would be updated. Contact: [to be completed: E-mail for GDPR requests (LEGAL_PRIVACY_EMAIL)].