Cookie Policy
Sanctumel ASBL - Last updated: 22 July 2026
Translation for information only - only the French version is legally binding.
This policy explains the use of cookies and similar technologies on sanctumel.com and all its subdomains.
1. What is a cookie?
A cookie is a small text file stored by your browser to remember information about your visit.
2. Cookies used by Sanctumel
Sanctumel uses strictly necessary cookies, anonymous cookie-less audience measurement (Umami, self-hosted in the EU) and, only if you accept via the banner, product analytics (PostHog, hosted in the EU). No advertising or marketing tracking cookies are used.
| Cookie | Type | Durée | Finalité |
|---|---|---|---|
| access_token | Authentication | 4 hours | Keeps your session logged in. HttpOnly, Secure, SameSite=Lax. |
| refresh_token | Authentication | 7 days | Auto-renews your session. HttpOnly. |
| csrf_token | Security | Session | Protection against CSRF attacks. |
| consent | Preferences | 12 months | Remembers your cookie banner choice. |
| lang | Preferences | 12 months | Remembers your interface language. |
| theme | Preferences | 12 months | Remembers your display theme. |
| _ph (PostHog) | Product analytics (opt-in) | 12 months | Product usage analytics, EU-hosted. Set ONLY after you accept the banner. |
| Umami | Audience (cookie-less) | - | Self-hosted anonymous audience measurement: sets NO cookie or identifier. |
3. Third-party cookies
When you make a payment via Sanctumel Pay, providers (Stripe, M-Pesa, etc.) may set technical cookies on the payment page. These cookies are subject to the provider's policy. No marketing tracking cookies are used.
4. Analytics cookies
Two measurement tools are used. (1) Umami (self-hosted on our EU servers): anonymous audience measurement, without cookies or persistent identifiers - exempt from consent. (2) PostHog (hosted in the EU): product analytics using cookies/localStorage - enabled ONLY after you accept via the banner, and can be disabled at any time. No data is sold or shared for advertising purposes.
5. Your choices
Strictly necessary cookies cannot be disabled.
You can delete all cookies via your browser settings. You will then be logged out.
To manage the consent banner, click reset my cookie preferences.
6. Retention
Cookies are kept for the duration shown above and then automatically deleted by your browser.
7. Contact
Questions: dpo@sanctumel.com.