Cookie policy
Read the French reference version
Prepared edition: 4 October 2026 Edition: 2026-10-04.3 English translation of the French reference version
French reference version. The English and Spanish versions are translations of the French document intended to make it easier to understand. In the event of a discrepancy, contradiction, ambiguity or difficulty of interpretation between the language versions, the French version shall prevail to the extent permitted by law. This priority does not restrict any mandatory right, including consumer protections, the requirement to provide clear and comprehensible information, and rules requiring doubts to be interpreted in the consumer's favour. It does not change the specific terms expressly accepted for an order.
1. Purpose and operator
SASU Alpha Inova, inovaspaces brand, share capital EUR 1,000, Rouen Trade and Companies Register number 914 975 735, 72 rue de la République, 76140 Le Petit-Quevilly, France, operates the website. Contact: contact@inovaspaces.com. This policy supplements privacy information and covers cookies, local storage, session storage and similar technologies on public pages, client accounts and administration.
2. Necessary storage
Authentication, security, continuity of a requested payment, abuse protection and expressly selected preferences are necessary and are not disabled by Reject optional cookies. Rejecting optional media blocks neither browsing, login, purchase nor an authorised download. Blocking all browser storage may prevent these functions. __session maintains the administrator session, with HTTP-only, Secure in production and SameSite; its configured lifetime is eight hours. inovaspaces_checkout is an HTTP-only browser token for payment/contact, lasting at most 30 days. Firebase Authentication uses IndexedDB in particular for login until logout or credential expiry, without studio audience measurement. inovaspaces-public-theme remembers the selected theme; inovahome-admin-theme and inovahome-admin-locale remember the operator's theme and language until changed or erased. Session storage values prevent duplicate automatic downloads and end with the session. inovaspaces-cookie-choice retains permission, version and dates for 180 days, then requests a new choice; this browser-specific value contains no account identifier.
3. Requested payment
Stripe is loaded when payment is launched, not on general marketing pages. Its payment and fraud-prevention storage necessary for the requested flow is essential. Names may include __stripe_mid, __stripe_sid and m depending on the environment. Provider purposes and periods: https://stripe.com/legal/privacy-center and https://stripe.com/cookie-settings. Our control cannot erase cookies on another domain or replace notices that provider must supply.
4. Optional external players
Vimeo and YouTube are not loaded on public or client pages without external video-player permission. The blocked placeholder sends no player request. Allowing this category sends the provider the IP address and browser information in particular, with possible storage under its policy. The choice applies to this browser's pages until expiry or withdrawal. Withdrawing permission removes currently embedded players and blocks future ones. Native videos hosted by the studio do not require this category. Cookies already placed on another domain cannot be erased by our website; use the browser or provider controls. Information: https://vimeo.com/privacy and https://policies.google.com/technologies/cookies.
5. Advertising and statistics
No advertising pixel, Google Analytics or optional audience measurement is installed in this edition. No fictitious advertising or statistics choice is shown. A future installation requires an appropriate inventory, notice and control, with prior consent where required. Security and accounting server logs fall under the privacy policy.
6. Choices and withdrawal
The first visit offers Reject optional cookies, Accept optional cookies and Customise. Without affirmative action, media remain blocked; continuing to browse is not acceptance. Accepting and rejecting involve the same number of actions and equivalent presentation. Customisation selects external media while essential functions remain active. Cookie settings remains accessible at the bottom left of the website, client account and administration. Recorded rejection immediately blocks players without an access, payment or account penalty. Acceptance and rejection last 180 days. A material policy change may request a new choice. If storage is unavailable, permission may last only for the session and default rejection returns on reload.
7. Administration and browser
Administration uses necessary login and preferences. An external video preview requires an express operator action and media permission; stored consent alone does not open it. The choice can always be withdrawn. Browser settings allow inspection, erasure and blocking of storage. Erasing the choice makes the control reappear; erasing login or the payment token may log you out or interrupt the guest flow. Keep your reference and use the verified account to retrieve an eligible order.
8. Legal basis and questions
The essential-storage exemption applies only within Article 82 of the French Data Protection Act and applicable ePrivacy rules. Optional media require a free, specific, informed and revocable choice. GDPR rights appear in the privacy policy. Information: https://www.cnil.fr/fr/cookies-et-autres-traceurs/que-dit-la-loi. Contact: contact@inovaspaces.com.
2026-10-04 · Version 4