1. What is a cookie?
Cookies are small text files stored on your device when you visit a website. Orfolio uses them to provide a smooth, secure and personalized experience, while respecting your privacy rights.
2. Types of cookies used
Necessary cookies (no consent required)
Essential for basic functionality — cannot be disabled:
- Secure authentication (JWT).
- CSRF attack protection.
- Session cookies (deleted when the browser is closed).
Retention: session or up to 7 days.
Analytics cookies (consent required)
Anonymous usage statistics via Azure Application Insights:
- Pages visited, features used, session duration.
- Traffic sources, device type, browser version.
Data stored in Canada. No personally identifiable information without consent.
Retention: up to 13 months.
Preference cookies (consent required)
Remember your settings:
- Language (French, English, Spanish).
- Theme (light, dark).
- Dashboard layout.
Retention: up to 24 hours.
Third-party cookies
- Microsoft Azure: hosting and infrastructure monitoring.
- Stripe: secure payment processing (PCI-DSS compliance, fraud prevention).
- Google reCAPTCHA: bot protection on public forms (contact, login, registration, newsletter).
Retention: varies according to provider policies.
3. Consent
A banner is displayed on your first visit with the following options:
- Accept all.
- Reject non-essential cookies.
- Customize by category.
Your choice is securely stored and can be changed at any time via the site footer or by contacting rgpd@orfolio.ca.
4. What we don't do
Orfolio does not engage in cross-site behavioral tracking, does not participate in any third-party advertising network, and does not sell or share your browsing data.
5. Security
All cookies are transmitted via HTTPS. JWT authentication cookies are protected by the HttpOnly and Secure attributes.
6. Contact
Data Protection Officer — Studio Orfolio
Montreal, QC, Canada
Email: rgpd@orfolio.ca