Bonmoniq legal
Cookie Policy
- Last updated
- 2026-10-13
This English version is provided for information as a free translation. The French version is the official legal version. If there is any conflict, the French version prevails.
What is a cookie
A cookie or tracker is information stored on or read from the user's device when visiting a website or using an online service: HTTP cookie, browser local storage, pixel, identifier or similar technology.
In France, Article 82 of the Loi Informatique et Libertés, which implements Article 5(3) of Directive 2002/58/EC (ePrivacy), requires clear and complete information and, unless an exception applies, prior consent before placing or reading non-essential trackers. Equivalent national implementations apply to users in other member states.
This policy covers the bonmoniq.fr and bonmoniq.com websites and the Bonmoniq application.
Strictly necessary trackers
These trackers do not require consent: they are strictly necessary for the service requested by the user or for the security of the communication.
| Tracker | Purpose | Duration | Issuer |
|---|---|---|---|
bm_session | Keep the application sign-in session | 30 days or until sign-out | Bonmoniq |
bm_authed | Tell the website that a session is open, to show access to the application; contains no identifier | Same duration as the session | Bonmoniq |
bm_oauth_state, bm_oauth_invite, bm_email_oauth | Secure a sign-in with a Google or Apple account, an invitation, or the connection of a mailbox | For the duration of the operation | Bonmoniq |
NEXT_LOCALE | Remember the language of the website or application being viewed | Browser session | Bonmoniq |
bm_lang | Remember the language chosen in the application | 12 months at most | Bonmoniq |
bm_analytics_consent | Remember the user's choice about audience measurement; used only once audience measurement is enabled | 6 months | Bonmoniq |
| Application local storage | Interface preferences (theme, views, filters, audio devices, recent items) and, under bm_last_login, a sign-in suggestion with the last email address, name and sign-in method used on the device (30 days) | Until deleted by the user, unless a duration is stated | Bonmoniq |
Cloudflare security cookies (for example __cf_bm) | Protect the website against bots and attacks | Short duration set by Cloudflare | Cloudflare |
| Cloudflare Turnstile, on forms that use it (for example the contact form) | Anti-bot check that reads technical signals from the browser when the form is displayed | Duration of the check | Cloudflare |
Payment provider trackers, on payment pages only (for example __stripe_mid, 1 year, and __stripe_sid, 30 minutes) | Secure payment and prevent fraud | Duration set by Stripe | Stripe |
The Web Chat widget that a Customer installs on its own website stores in the visitor's local storage a bm.webchat.v1.<site> key (visitor token and conversation reference), so that the conversation can be resumed, and a bm.webchat.v1.theme key for the display theme. These items are strictly necessary for the chat requested by the visitor. The Customer, as publisher of that website, informs its visitors.
Optional audience measurement
PostHog is active on the Bonmoniq website (bonmoniq.com and bonmoniq.fr) and application only after consent. Cloudflare Web Analytics is not active. PostHog is optional and Bonmoniq claims no consent exemption for it.
| Tool | Purpose | Data processed | Duration |
|---|---|---|---|
| Cloudflare Web Analytics (Cloudflare, Inc.) | Website audience and performance (page views, referrer, country, device type, performance metrics) | No cookie is placed. Cloudflare nevertheless processes the request's network metadata, including the IP address | According to the Cloudflare Web Analytics FAQ, unsampled measurement data is stored for seven days, then sampled and aggregated for longer storage; reports cover the previous six months. That reporting window is not a guaranteed deletion period |
| PostHog (PostHog Inc., EU hosting in Frankfurt) | Audience measurement of the website and application: pages viewed, visit source, clicks to sign up, features used | Pseudonymous identifier, page address without parameters or fragment, referring domain, campaign parameters, browser and device type, language, time zone; for a signed-in user, internal account and Workspace identifiers | ph_<key>_posthog cookie: 12 months at most. Events: 1 year, the retention period of the PostHog free plan; the 90-day analysis window is not deletion |
In the application, business usage measurement covers Workspace owners and administrators. Anonymous registration steps may also be measured after consent. Technical error reports may be collected for all roles after consent to diagnose application failures. Error reports contain a redacted message, error type, application code-file reference, line and column numbers, build identifiers and pseudonymous browser or account identifiers. They exclude customer content, raw error messages, names, email addresses, phone numbers, query strings, source context and local variables. Source maps are uploaded privately for debugging and are not published with the application.
Rules applied to PostHog: no session recording, no automatic click capture, no content of messages, contacts, notes or searches, and no name, email or phone number. In Bonmoniq's PostHog EU project, the "Discard client IP data" setting was enabled when checked on 11 October 2026: the IP address is not stored with events, but PostHog may use it for geolocation enrichment and bot detection before discarding it. This setting concerns the data stored with events; it does not describe the technical logs of networks or providers. EU hosting does not exclude access from the United States, in particular for support; see the Privacy Policy.
Consent and withdrawal
Bonmoniq enables audience measurement only under the following conditions:
- no audience measurement tool is loaded and no event is sent before consent;
- the banner offers "Decline" and "Accept" in an equally simple and visible way; no box is pre-ticked and continued browsing is not consent;
- the choice is kept for 6 months, then asked again;
- the choice can be changed or withdrawn at any time through "Cookie settings" in the website footer, on the sign-in and sign-up pages, or in the application settings; withdrawal stops measurement and deletes the audience measurement identifiers from the browser.
Bonmoniq does not use any advertising cookie.
Browser settings
The user may also configure the browser. Blocking strictly necessary trackers may prevent sign-in or degrade the Service.
| Browser | Indicative path |
|---|---|
| Chrome | Settings, Privacy and security, Third-party cookies |
| Firefox | Settings, Privacy and Security, Cookies and Site Data |
| Safari | Settings, Privacy, Cookies and website data |
| Edge | Settings, Cookies and site permissions, Manage and delete cookies |
Personal data
When trackers involve personal data processing, that processing is described in the Privacy Policy. Requests relating to personal data must be sent to privacy@bonmoniq.com.
Governing law
This policy is governed by French law, the Loi Informatique et Libertés, the ePrivacy Directive and the GDPR.
Last updated: 13 October 2026 For any question regarding this document, contact us at legal@bonmoniq.com.