Cookie Policy
Document published by Vitruhome, a French simplified joint-stock company (SAS) registered with the Salon-de-Provence Trade and Companies Register under number 994 224 715, operating the “Vitru’home” brand. See the legal notice.
This English translation is provided for convenience only. The French version is the legally binding one and prevails in case of discrepancy. French version
1. What is a cookie?
A cookie is a small text file stored temporarily on your device (computer, tablet, smartphone) when you access our website or our Vitru'home suite of applications. Cookies make it possible, in particular, to:
- distinguish you from other users of the service;
- remember your preferences (language, consent);
- secure your session and authenticate you;
- analyse anonymously how you use our services.
Cookies do not directly identify you as a natural person, but may contain technical identifiers that make it possible to recognise your browser from one visit to the next.
2. Which cookies do we place?
We classify the cookies we place into four categories. Only essential cookies (section 2.1) and the technical storage necessary to display the maps you request (section 2.4) are active without prior consent, in accordance with Article 82. Analytics cookies (2.2) are only placed with your explicit consent; performance measurement (2.3) is also subject to your consent but places no cookie.
2.1 Essential cookies (always active)
Essential for the operation of the website and the security of your session. Their placement is not subject to consent (Art. 82 of the French Data Protection Act, loi Informatique et Libertés).
| Cookie name | Issuer | Purpose | Duration |
|---|---|---|---|
| vitruhome_consent | Vitru'home | Remembering your cookie consent choices | 13 months (CNIL maximum period) |
| vitru_lang | Vitru'home | Remembering the language chosen for the home page (Secure, SameSite=Lax) | 12 months |
| sb-<project-ref>-auth-token (sometimes split into .0 / .1) | Supabase (EU, Paris eu-west-3) | Session authentication (HttpOnly, Secure, SameSite=Lax) | Session + 30 days for the refresh |
| __cf_bm / _cfuvid | Cloudflare (US / global network) | Anti-bot protection (Turnstile), rate limiting | Session (30 min to 1 day) |
2.2 Analytics cookies (subject to consent)
Audience measurement and usage analysis, to improve our services. PostHog cookies are only placed after your “analytics” consent. Until you have responded to the banner, the vitruhome.com website only carries out anonymous audience measurement, exempt from consent (Article 82 of the French Data Protection Act): no cookie or storage on your device, an identifier erased when the page is closed or reloaded, IP address not retained, no session recording or profile, and use limited to website traffic statistics. You can object to it by refusing analytics cookies in the banner or in “Manage cookies”, or by enabling your browser’s Global Privacy Control signal. With your consent, this purpose includes session recording (replay of your browsing): input fields are masked and recordings are kept for 30 days. The data is collected through our first-party subdomain m.vitruhome.com and hosted in the European Union (eu.posthog.com).
| Cookie name | Issuer | Purpose | Duration |
|---|---|---|---|
| ph_phc_* / ph_* | PostHog Inc. (EU hosting, eu.posthog.com, via m.vitruhome.com) | Audience measurement, journey analysis, heatmaps and session recording; cookies placed only after “analytics” consent (without this consent: cookieless anonymous measurement described above) | Cookies: 13 months. Session recordings: 30 days |
2.3 Performance measurement (subject to consent)
Measurement of application performance (Sentry traces) and of Core Web Vitals (Vercel Speed Insights). This processing is only activated with your “performance” consent and places no cookie on your device (one-off HTTP requests only).
| Cookie name | Issuer | Purpose | Duration |
|---|---|---|---|
| Sentry performance tracing (no cookie) | Functional Software Inc. (Sentry, company governed by US law, storage configured in the EU region) | Measurement of response times and application navigation traces, activated only after “performance” consent | No cookie placed; traces kept for 90 days by Sentry |
| @vercel/speed-insights (no cookie) | Vercel Inc. (company governed by US law, applications run in the EU Paris region cdg1, EU-US DPF + EU SCCs) | Measurement of Core Web Vitals (LCP, INP, CLS, TTFB) and aggregation of browsing performance, activated only after “performance” consent. No individual profiling. | No cookie placed |
2.4 Mapping (storage necessary for the service)
In the site analysis application, displaying maps is essential to the service you request. The corresponding technical storage is therefore exempt from consent (Art. 82). Mapbox usage telemetry is disabled by our security policy (CSP): no map usage data is sent to Mapbox. Google Street View is only loaded if you explicitly open the “Street View” view of an analysis.
| Cookie name | Issuer | Purpose | Duration |
|---|---|---|---|
| mapbox.eventData (localStorage) | Mapbox Inc. (US, EU-US DPF + EU SCCs) | Technical identifier for map display. Telemetry disabled (events.mapbox.com beacon blocked by the CSP), no transmission. | Local, not transmitted |
| NID / __Secure-* (Google Street View) | Google LLC (US, EU-US DPF + EU SCCs) | Display of the Street View view, loaded only upon an explicit action of the user (opening the view) | Session to 6 months |
3. Error tracking and security monitoring (legitimate interest)
Independently of the cookies listed above, Vitru'home uses the Sentry service (Functional Software Inc., a company governed by US law whose storage region configured on our organisation is the European Union, supplemented by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework) to track application errors and monitor the security of the platform.
What is collected. When an error occurs in your browser, a request is sent to the Sentry servers containing: the error message and stack trace, the URL concerned, your browser version and the application version. No form data, no content entered and no uploaded document is transmitted. Your IP address is not transmitted: it is removed from each event before sending, as is your email address, which is masked if present.
No cookie, no session recording. Error tracking relies on one-off HTTP requests (“beacons”) and places no cookie on your device. Vitru'home does not use Sentry's session recording feature (“Session Replay”). Sentry performance measurement (traces), described in section 2.3 above, is subject to your “performance” consent and does not place any cookie either.
Legal basis. This processing is based on the legitimate interest of Vitru'home within the meaning of Article 6(1)(f) of the GDPR. It is strictly necessary to meet our security obligation under Article 32 of the GDPR (detection of incidents, correction of anomalies, protection of your data).
Right to object. In accordance with Article 21 of the GDPR, you may object to this processing at any time on grounds relating to your particular situation by writing to team@vitruhome.com. Vitru'home will then stop the processing, unless there are compelling legitimate grounds which override your interests, rights and freedoms.
Retention period. Error events are kept by Sentry for 90 days, then automatically deleted.
4. How to manage your preferences?
Initial consent. A banner appears on your first visit. You can accept, refuse or customise your choice by category.
Changing your preferences. The button below reopens the banner and lets you change your choices at any time. It also appears at the bottom of the pages that have a footer.
Browser settings. You can also configure your browser to block all or some cookies:
Warning: disabling essential cookies may prevent the website from working properly (inability to sign in, loss of session).
5. Retention period of consent
Your consent is kept for a maximum period of 13 months, in accordance with the CNIL recommendation. At the end of this period, the consent banner will reappear to ask you to confirm or change your preferences.
6. Your rights
In accordance with Regulation (EU) 2016/679 (the “GDPR”) and the French Data Protection Act (loi Informatique et Libertés), you have rights over your personal data (access, rectification, erasure, objection, portability, withdrawal of consent). These rights are detailed in our Privacy Policy.
For any question about cookies or to exercise your rights, contact us at team@vitruhome.com.
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL, the French data protection authority).
Last updated: 12 August 2026