Château de Chazeuil
Cookie policy
Version of 2026-10-15 — pending legal review
Translation for information. The French version prevails. Read the French version
In brief
The chazeuil.com site sets no advertising or tracking cookies and uses no social-network pixel. It therefore shows no consent banner. Here is exactly what is used.
1. What the site uses
| Item | What it is for | Where | Duration | Consent? |
|---|---|---|---|---|
| Browser session storage (sessionStorage): your booking summary after payment; the chat transcript | Make the service you asked for work | Your device only | Until you close the tab | No (strictly necessary for a requested service) |
| Display preferences (localStorage: accessibility panel settings) | Remember your choice | Your device only | Until you clear them | No (user's choice) |
| Chat button cue flag (localStorage `chazeuil-chat-cue`) | Remember that the one-time cue on the chat button has been shown, or that you opened the chat, so it is not shown again | Your device only | Until you clear it | No (it only records that the cue was seen; nothing about you) |
| Cloudflare Web Analytics audience measurement | Aggregate visit statistics (pages, referrer, country, device type) | Cloudflare | No cookie or identifier stored on your device, according to Cloudflare [to be completed : verify on the live site] | No, under conditions (article 2) |
| Cloudflare Turnstile anti-bot check, only inside the chat assistant | Protect the assistant from bots | Cloudflare | See article 3 | Yes, through your click on “Start a conversation” (article 3) |
| Sign-in cookie `clefs_session`, only if you sign in to Clefs de Chazeuil, the guests' programme | Keep you signed in to your Clefs account | chazeuil.com (HttpOnly, Secure; we keep only a one-way code of it) | 30 days (8 hours when set by a My Chazeuil sign-in), or until you sign out | No (strictly necessary for a service you asked for; Privacy Policy, section 12) |
| Sign-in cookie `chz_account`, only if you sign in to My Chazeuil, your area on the site | Keep you signed in to My Chazeuil | chazeuil.com (HttpOnly, Secure, SameSite=Lax; we keep only a one-way code of it) | 8 hours, or until you sign out | No (strictly necessary for a service you asked for; Privacy Policy, section 14) |
Nothing else is loaded on chazeuil.com: no Google Analytics, no Meta Pixel, no advertising [to be completed : check on the live site with browser tools before publication].
2. Cookieless audience measurement: your rights
The CNIL accepts that some audience measurement is exempt from consent if it meets strict conditions: use limited to anonymous statistics on our behalf, no cross-site tracking, no combination with other data, clear information and a way to object. We use Cloudflare Web Analytics, which according to Cloudflare uses no cookie and collects no personal data from visitors.
You can object at any time: [to be completed : to be built: a “Refuse audience measurement” link that records the refusal on the device and stops the script from loading]
3. The assistant's anti-bot check (Turnstile)
The chat assistant is protected by Cloudflare Turnstile. According to Cloudflare's privacy addendum, Cloudflare acts as a processor to detect bots but also as a controller to improve that service with the signals collected (IP address, TLS fingerprint, user-agent header, site key and origin). The CNIL considers an anti-bot tool exempt from consent only if its sole purpose is security and the provider does not reuse the data for its own benefit. For that reason:
- the check loads only after your click on “Start a conversation”, after the notice shown in the window; you may decline and write to us by email or WhatsApp;
- no cookie from this check is used before that click.
4. Payment
Payment takes place on the page hosted by Stripe (checkout.stripe.com), which may set its own security and functional cookies under its own responsibility (see Stripe's policy). The chazeuil.com site does not load the Stripe.js script on its own pages [to be completed : confirm with the technical team; otherwise fraud-prevention cookies would be set on chazeuil.com].
5. Third-party links and content
Links to Booking.com, WhatsApp or Google Maps take you to third-party sites with their own rules. The interactive estate map loads its map tiles from the IGN: see the Privacy Policy.
6. Your browser
You can delete session and site storage at any time in your browser settings.
7. If we change
If we ever turn on advanced analytics, advertising or a social-network tool, we will first show a consent banner with a “Refuse” button as easy as “Accept”, and update this page.