Last updated: 2 July 2026
Cookie Policy
1. Introduction
This Cookie Policy explains what cookies and similar technologies Pompara uses, why we use them, and what choices you have. It supplements our Privacy Policy. By using https://pompara.com you accept the use of strictly necessary cookies; for any other category of cookies, we ask for your consent first.
2. What is a cookie?
A cookie is a small text file that a website places on your device when you visit it. Cookies allow the website to recognise your device and remember information about your visit, such as your login session or your language preference.
This Policy also covers similar technologies — including local storage, session storage, and HTTP-only authentication tokens — that perform the same kinds of function. For simplicity, we refer to all of these as “cookies” in this Policy.
3. Our position on cookies
French law (the ePrivacy framework as implemented in France, together with CNIL guidance on cookies and trackers) distinguishes between cookies that are strictly necessary to deliver the service you request, and cookies used for other purposes such as analytics, advertising or social-media tracking. Strictly necessary cookies do not require your consent. All other cookies require your free, specific, informed and unambiguous prior consent, with rejection as easy as acceptance.
Pompara uses only strictly necessary cookies. We do not currently set analytics cookies, marketing cookies, social-media tracking pixels, or advertising identifiers. If we ever add any of these, we will deploy a CNIL-compliant cookie consent banner and you will be asked to consent before any non-essential cookie is set.
4. The cookies we use
The cookies and similar technologies in use at the date of this Policy are:
| Cookie / token | Purpose | Provider | Duration | Category |
|---|---|---|---|---|
| Firebase Authentication session token | Keeps you signed in for the duration of your session and protects against session hijacking | Google Firebase | Session — cleared when you sign out or after up to 1 hour of inactivity; refresh token persists up to 30 days unless revoked | Strictly necessary |
| Firebase ID token (in-memory) | Authenticates requests to the Pompara backend | Google Firebase | Refreshed every hour while signed in | Strictly necessary |
| CSRF / anti-forgery token | Protects you against cross-site request forgery on actions you take in the product | Pompara | Session | Strictly necessary |
| Language preference | Remembers whether you have chosen the French or English version of the site | Pompara | Up to 12 months | Strictly necessary |
| Cookie consent preference (if applicable in future) | Records that you have been shown the cookie banner and your choices | Pompara | Up to 6 months (CNIL maximum) | Strictly necessary |
This table reflects our deployment at the date of this Policy. If we change our cookie use, we will update this table and, where consent is required, ask for your consent before deploying the change.
5. Cookies we do NOT use
For transparency, the following cookie categories are NOT currently in use on Pompara:
- Analytics cookies (Google Analytics, Plausible, Matomo, PostHog, Mixpanel, or similar)
- Advertising and remarketing cookies (Meta pixel, TikTok pixel, Google Ads, etc.)
- Social-media share cookies
- Third-party content embeds that set their own cookies
If we ever add any of these, we will first publish an updated Cookie Policy describing exactly what they do, who the provider is, and how long they last, and we will ask for your consent through a CNIL-compliant banner where rejecting is as easy as accepting.
6. How to control cookies
Strictly necessary cookies are required to operate the service. If you block them, parts of Pompara will not work — in particular, you will not be able to stay signed in. You can still control them via your browser:
- In Chrome: Settings → Privacy and security → Cookies and other site data
- In Firefox: Settings → Privacy & Security → Cookies and Site Data
- In Safari: Settings → Privacy → Manage Website Data
- In Edge: Settings → Cookies and site permissions
If we add non-essential cookies in future, you will be able to manage your consent at any time through a “Cookie preferences” link in the website footer.
7. Cookies on third-party services we link to
Pompara may link to third-party services (for example, the Telegram bot, our age-verification provider iverify.eye, our payment provider NOWPayments.io, or external resources such as crisis-support helplines). When you click through, those services set their own cookies under their own privacy and cookie policies. We do not control those cookies. Please read each provider's notice if you are concerned about their cookie practices.
8. Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our cookie use, in technology, or in applicable law. The latest version is always available at https://pompara.com/cookies. Material changes — particularly the addition of any non-essential cookie category — will be notified to users and, where consent is required, we will ask for your consent before deploying the change.
9. Contact
For any question about this Cookie Policy, contact privacy@pompara.com. You can also exercise your data-protection rights as set out in our Privacy Policy, and lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) if you are dissatisfied with our handling of your request.