Cookie policy
Last updated: 14 September 2026
In short
JustASession uses no advertising, analytics or tracking cookies. There are no social pixels, no Google Analytics, and no commercial profiling. That is why you will not see a consent banner: the only cookies we set are strictly necessary for the site to work, and those are exempt from the consent requirement (Article 22.2 LSSI-CE).
Cookies JustASession sets
| Cookie | Purpose | Lifetime |
|---|---|---|
justasession-session |
Keeping you signed in and remembering your chosen language | Until the browser closes, or 2 hours of inactivity |
XSRF-TOKEN |
Stopping another site from submitting forms as you | The session |
remember_web_* |
Keeping you signed in if you tick "remember me" | 5 years, or until you sign out |
All are sent with Secure, HttpOnly (except XSRF-TOKEN, which the browser has to
read) and SameSite=Lax, and their contents are encrypted.
The video player
Classes play in an embedded Bunny.net player (player.mediadelivery.net). That player
may use browser storage to remember volume, quality and playback position. It is a third
party with its own policy: https://bunny.net/privacy
The player only loads when you open a class, never on public pages, and the link is signed and expires within minutes.
The payment page
When you pay, your browser goes to Stripe's domain, which sets its own cookies to process the payment and prevent fraud. They are governed by its policy: https://stripe.com/privacy
Managing cookies
You can block or delete cookies in your browser settings. If you block session cookies you will not be able to sign in or hold a subscription, because the site would have no way to recognise you from one page to the next.
Changes
If we ever add a cookie that is not strictly necessary, we will update this page and ask for your consent before setting it.