Cookie policy
Table of contents
Last updated: 22 July 2026
Fictional student project AtypikHouse is a demonstration platform built as part of a training programme. No real booking, payment, or transaction is ever made. Some technical features are nonetheless active, in particular local data storage, conditional loading of maps, and sending a mock booking confirmation email with EmailJS.
1. What is a cookie or a tracker?
A cookie is a small file that may be stored on a user's device when they visit a site.
The term "tracker" refers more broadly to any technology that can access or store information on a
device, including HTTP cookies, the browser's local storage (localStorage), and session
storage (sessionStorage).
AtypikHouse itself sets no HTTP cookie via document.cookie. The site does, however, use
localStorage and sessionStorage to support certain demo features.
2. Trackers used by AtypikHouse
The tracker management banner currently offers two categories.
Necessary trackers
This category covers only the storage essential to features the user requests, in particular:
- remembering the consent choice;
- keeping the session active;
- demo accounts;
- mock bookings;
- favourites;
- reviews;
- notifications;
- the host account area;
- other data needed for local features.
This category is always active: it has no toggle, as disabling it would prevent the platform's core features from working.
External features
This category covers:
- Google Maps;
- Leaflet, loaded from unpkg.com;
- CARTO tiles, loaded from basemaps.cartocdn.com.
It can be accepted, declined, and later changed. None of these resources is loaded before the user's consent.
3. External features
Google Maps
Provider: Google Ireland Ltd.
Purpose: to show a stay's location or contact details on a map.
Data that may be transmitted after consent: IP address, browser information, date and time of the request, and the page viewed.
Trackers: Google may set or read trackers when the map loads. Their exact name and duration are determined by Google and are not invented in this policy.
Consent: required before the iframe loads. Without consent, the iframe does not exist in the DOM and no request is made to google.com; a placeholder offers an "Allow and show the map" button, which only activates external features after this explicit action.
Interactive stays map
Library: Leaflet, loaded from unpkg.com
Basemap: CARTO, tiles loaded from basemaps.cartocdn.com
Purpose: to show the interactive map on the "Our stays" page.
Technical data that may be transmitted: IP address, browser information, date and time of the request, and the page viewed.
Cookies observed: no cookie specific to CARTO or unpkg.com was observed during the audit, subject to changes in these services.
Consent: required before the Leaflet script, its stylesheet, and the CARTO tiles are downloaded.
Local fonts
The typefaces used by the site, in particular Fauna One and Marcellus, are hosted locally. Loading them triggers no request to Google Fonts or any other external provider.
4. Detailed table of trackers
Only items actually present in the code are listed below.
Some local storage entries are only created after a deliberate user action, for example submitting a form, adding a favourite, creating a mock booking, or subscribing to the newsletter.
They are used only to enable the feature explicitly requested and are not created by simply browsing the site.
| Name or key | Type | Provider | Purpose | Category | Data involved | Duration | Consent required | Deletion | Pages / components |
|---|---|---|---|---|---|---|---|---|---|
atypikhouse_cookie_consent | localStorage | AtypikHouse (1st party) | Remember the choice about external features | Necessary | Choice made, date of the choice | 6 months (calculated from the date of the choice) | No | "Cookie settings" page, or clearing browser data | All pages |
atypikhouse:session | localStorage ("Stay signed in") or sessionStorage | AtypikHouse (1st party) | Keep the account session active | Necessary | Account ID, email, first name, last name, role (never the password) | Until sign-out (localStorage) or the tab is closed (sessionStorage) | No | Sign-out, or "Delete my local data" | Sign-in, account, host/admin area, booking flow |
atypikhouse:utilisateurs | localStorage | AtypikHouse (1st party) | Simulate account creation and management | Necessary | First name, last name, email, role, account dates, Terms of Use version accepted, demo password hashed with SHA-256 | 12 months after the last sign-in, unless deleted earlier | No | Personal account area ("Delete my account"), or "Delete my local data" | Sign-up, sign-in, account, host area, admin |
atypikhouse:favoris | localStorage | AtypikHouse (1st party) | Remember stays saved as favourites, per signed-in account or per guest bucket | Necessary for the requested feature | Stay IDs, linked to the signed-in account or to a timestamped "guest" bucket (date of last change) | Signed-in user: as long as the linked account exists, deleted when the account is deleted or expires. Signed-out user (guest): until manually removed, until "Delete my local data" is used, or after twelve months without any change. | No for local storage; it is only created when the user requests the feature. | Account deletion (signed-in), manually removing a favourite, "Delete my local data", or automatic purge after twelve months without change (guest) | Listing pages, results, site header |
atypikhouse:reservations | localStorage | AtypikHouse (1st party) | Simulate the booking flow, including cancellation | Necessary for the requested feature | Dates, travellers, stay, mock price, cancellation policy, status, Terms of Sale acceptance, EmailJS sending status, any cancellation data | 12 months after creation or after the stay's departure date (whichever is later) | No for local storage; it is only created when the user requests the feature. | Automatic purge, or "Delete my local data" | Booking flow, account, host area, admin |
atypikhouse:logements_hebergeur | localStorage | AtypikHouse (1st party) | Simulate creating and approving a listing | Necessary for the requested feature | Stay information, photos encoded in Base64 | As long as the host account exists and the listing is not deleted | No for local storage; it is only created when the user requests the feature. | Deleting the listing, or deleting the host account | Host area, admin, listing pages |
atypikhouse:avis | localStorage | AtypikHouse (1st party) | Simulate publishing and moderating reviews | Necessary for the requested feature | Rating, title, comment, displayed name | 12 months after publication | No for local storage; it is only created when the user requests the feature. | Automatic purge, admin moderation, or anonymisation when an account is deleted | Listing pages, account, admin |
atypikhouse:notifications | localStorage | AtypikHouse (1st party) | Show internal notifications (account, host, admin) | Necessary | Message, recipient, date, read/unread status | 12 months | No | Automatic purge, or deletion linked to an account deletion | Account, host area, admin |
atypikhouse:newsletter_subscribers | localStorage | AtypikHouse (1st party) | Simulate a newsletter sign-up | Necessary for the requested feature | Email address, consent, status | 12 months after sign-up, or immediate removal via unsubscribe | Not for the technical storage itself; explicit consent is required for the newsletter sign-up. | "Unsubscribe from the newsletter" button, automatic purge | Newsletter banner (home, stays, contact…) |
atypikhouse:messages_contact | localStorage | AtypikHouse (1st party) | Demonstration of the contact form | Necessary for the requested feature | First name, last name, email, phone (optional), message | 12 months | Not as a tracker; consent to processing the information is collected in the form. | Automatic purge | Contact page |
atypikhouse:candidatures_partenaires | localStorage | AtypikHouse (1st party) | Demonstration of a "become a host" application | Necessary for the requested feature | First name, last name, email, phone, type of partnership, planned location and type of stay, number of stays, website, social media, description, environmental approach | 12 months | Not as a tracker; consent to processing the information is collected in the form. | Automatic purge | Become a host page |
atypikhouse:demandes_partenariat | localStorage | AtypikHouse (1st party) | Demonstration of a partnership request | Necessary for the requested feature | First name, last name, company, email, phone (optional), partner type, message | 12 months | Not as a tracker; consent to processing the information is collected in the form. | Automatic purge | Become a partner page |
atypikhouse:rendezvous_partenaires | localStorage | AtypikHouse (1st party) | Demonstration of an appointment request | Necessary for the requested feature | Reason, requested date and time slot, first name, last name, company, email, message (optional) | 12 months | Not as a tracker; consent to processing the information is collected in the form. | Automatic purge | Become a partner page |
atypikhouse:cartes_cadeaux | localStorage | AtypikHouse (1st party) | Demonstration of a gift card purchase | Necessary for the requested feature | Recipient's name and email, buyer's name, amount, message, send date | 12 months | Not as a tracker; consent to processing the information is collected in the form. | Automatic purge | Gift cards page |
atypikhouse:journal_administration | localStorage | AtypikHouse (1st party) | Log an administrator's moderation actions | Necessary | Date, action, target, reason, administrator ID | 12 months | No | Automatic purge | Admin |
atypikhouse:demandes_rgpd | localStorage | AtypikHouse (1st party) | Track requests to exercise rights (access, export, rectification) | Necessary | User ID, request type, date | 12 months | No | Automatic purge | Account, host area |
atypikhouse:reinitialisations_mdp | sessionStorage | AtypikHouse (1st party) | Simulated password reset | Necessary for the requested feature | Single-use random token, associated email address or account ID, creation date and expiry date | One hour at most, until used or until the tab is closed | No for local storage; it is only created when the user requests the feature. | Automatically after use, after expiry, when the tab is closed, or via "Delete my local data" | Forgot password, password reset |
| Google Maps | Third-party resource (iframe); third-party trackers not catalogued by AtypikHouse | Google Ireland Ltd. | Show a stay's location or contact details | External features | IP address, browser information, date and time of the request, page viewed | Not determined by AtypikHouse | Yes, before loading | Declining in the banner, removing via "Cookie settings", or browser settings | Contact page, listing pages |
| Leaflet and CARTO | Requests to third-party services (script and tiles); no cookie observed | unpkg.com (Leaflet), CARTO | Show the interactive stays map | External features | IP address, browser information, date and time of the request, page viewed | Not determined by AtypikHouse | Yes, before loading | Declining in the banner, removing via "Cookie settings", or browser settings | "Our stays" page |
The demo password is hashed with SHA-256 before being stored locally. This mechanism avoids storing it in plain text, but is not an authentication method suited to a production environment.
The password reset mechanism is a local simulation intended for the student project. A real application would require server-side processing and a secure token sent through a controlled channel.
5. Services not present in this version
No analytics, advertising, or marketing tool is currently installed on this version of the site.
The banner therefore offers no corresponding category.
If such a tool is added later, this policy and the privacy policy will be updated. New consent will be requested before the service is activated where required.
6. How to manage your preferences
On your first visit, you can accept or decline external features from the tracker management banner ("Accept all", "Reject all", "Customise").
You can change your choice at any time from the Cookie settings page (French page), available in the site's footer, which genuinely reopens the preferences panel.
Withdrawing your consent prevents external maps from loading again in future. It does not undo loads that already happened before you withdrew it.
In the customisation panel, the "Necessary" category stays active and cannot be turned off; the "External features" category has a clear toggle; declining is just as simple as accepting.
7. How long your choice is kept
Your choice to accept or decline is kept for six months.
Once this period expires, the banner may be shown again.
A new choice may also be requested before expiry if the purposes or services used change significantly.
8. Consequences of declining
Declining external features does not prevent you from browsing stays, creating an account, using favourites, or making a mock booking.
The Google Maps and CARTO maps are simply not loaded. They are replaced with a message letting you change your choice or allow them to be shown.
Features strictly necessary for the platform to work locally remain active.
9. Contact and related documents
Data controller
Quentin Seynaeve
AtypikHouse student project
Email address: contact@atypikhouse.fr