This English translation is provided for convenience only. Only the French version, available at xaviers.photo/cookies/, is legally binding.
Last updated: 2 October 2026
1. What is a cookie?
A cookie is a small text file placed on your device when you visit a website. It stores information (preferences, session identifiers, statistics) between your visits.
2. Cookies used on xaviers.photo
a. Strictly necessary cookies (no consent required)
Essential to the operation of the site: cart, session, language, storage of your consent choice. Without these cookies, an order could not be completed. In accordance with article 82 of the French Data Protection Act, they do not require consent.
| Cookie | Purpose | Duration |
|---|---|---|
| woocommerce_cart_hash / woocommerce_items_in_cart / wp_woocommerce_session_* | Cart contents and purchase session | Session to a few days |
| xs_retour_commande | Tracks the transaction in progress, to bring you back to your order confirmation page | 2 hours |
| wp-wpml_current_language | Stores the chosen language | 1 year |
| cmplz_* (Complianz) | Stores your cookie consent choice | 1 year |
| wordpress_logged_in_* / wordpress_sec_* | Secure sign-in to your personal space | Session |
| __stripe_mid / __stripe_sid (Stripe) | Payment security and fraud prevention — set only on the cart and the payment page | 1 year / 30 minutes |
| _grecaptcha (Google reCAPTCHA) | Anti-bot protection of the forms (newsletter, contact) — loaded only when you interact with the form | 6 months |
| Cloudflare Turnstile (account creation) | Anti-bot protection of the sign-up form: technical browser signals, with no cookie in the configuration used | — |
b. Audience measurement (cookie-free)
We use Plausible Analytics, a privacy-respecting audience measurement solution hosted in the European Union. It places no cookies and collects no data that could identify you: counting (visitor numbers, pages viewed, traffic sources) is aggregated and anonymous, server-side. No consent is therefore required for this measurement.
c. Social media and advertising measurement cookies (with consent)
If you interact with embedded Instagram content (gallery or share button), third-party cookies may be set by Instagram / Meta. They are never activated without your explicit consent. A plain link to our profile, by contrast, sets no cookie.
We also use the Meta pixel (ID 1607227397618823). This script, supplied by Meta, measures how effective our advertising is on Facebook and Instagram: it tells us how many people who saw an advertisement then came to the site, looked at a work or placed an order, and it allows advertising audiences to be built. It is loaded only after you have accepted the “Marketing & social media” category: until you answer the banner, or if you decline, the script stays inert, no cookie is set and no data is sent to Meta.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Identifier assigned to your browser by Meta, linking your visit to an advertisement seen on Facebook or Instagram | 90 days |
| _fbc | Records the advertising click that brought you to the site; set only if you arrive from a Meta advertisement | 90 days |
The information sent is the page viewed, the work looked at and its price, the number of items and the amount of an order, together with your IP address and the browser identifier above. “Advanced matching” is not enabled: neither your name, nor your email address, nor your telephone number is sent to Meta.
The recipient is Meta Platforms Ireland Limited (Ireland). For the collection and transmission of this data, Meta and ourselves are joint controllers within the meaning of Article 26 GDPR and of the Court of Justice of the European Union judgment of 29 July 2019 (Fashion ID, C-40/17); Meta alone determines the processing it carries out thereafter. The data may be transferred to the United States to Meta Platforms, Inc., which is certified under the EU–U.S. Data Privacy Framework.
You may change your mind at any time through the “Manage cookies” link at the foot of every page. Withdrawal takes effect for the future: it stops the collection immediately, without erasing data already sent, which you may ask Meta to delete.
d. Preview of the works in your home (ArtPlacer) — loaded at your request
On the artwork pages, the “View the photo on my wall in augmented reality” button relies on the ArtPlacer service (ArtPlacer NA Inc., United States). Until you click this button, nothing from ArtPlacer is loaded and nothing is transmitted. When you click, the component is loaded from ArtPlacer’s servers, which then receive your technical connection data (IP address, browser, device) and usage events (widget opened, work viewed); the component also loads a font from Google Fonts, which transmits your IP address to Google. In our configuration, ArtPlacer writes no cookie or local storage on the xaviers.photo domain (checked in September 2026); the viewer is displayed in a frame served from ArtPlacer’s own domain, in which the provider has confirmed it injects neither Google Analytics nor advertising tools; the detailed inventory of any storage within that frame is being confirmed with the provider, and this page will be completed accordingly. Your camera feed is processed locally by your device and is never transmitted. See sections 4 and 5 of our Privacy Policy.
3. Managing your consent
On your first visit, a banner invites you to accept or refuse cookies that are not strictly necessary. You can change your choice at any time:
- by clicking the “Manage cookies” link in the footer;
- by clearing your browser’s cookies;
- by enabling your browser’s “Do Not Track” mode (respected by xaviers.photo).
4. Technical solution
The banner and consent management are provided by Complianz, compliant with CNIL recommendations and the GDPR. Complianz stores your choice in a cookie in your browser (1 year) and blocks non-essential cookies until you have consented.
5. Further information
To learn more about how data associated with your visits is handled, see our Privacy Policy.