Oikeudellinen asiakirja
Evästeet
Mitä sivusto tallentaa selaimeesi ja miksi.
1. In short
infuse.earth keeps small pieces of information in your browser: cookies, and a few lines in local storage. Almost all of them make the site work: keeping you signed in, keeping your cart, speaking your language. Two measurements wait for your “Accept” on the banner: the page you arrive on (infuse_arrivee) and your path through the site (PostHog). Before you agree, neither of them stores anything.
No advertising cookies, no Meta pixel, no social buttons that follow you. Without your consent, site traffic is counted without cookies (§ 4).
Article 82 of the French Data Protection Act exempts cookies that are needed for the service you ask for from consent. We list them anyway, one by one: what they hold, who sets them, how long they stay.
2. The cookies, one by one
2.1 Your account
sb-<ref>-auth-token: your session when you sign in to your account. It carries the sign-in tokens from Supabase, our database, including your account ID and your email. When it gets long, it splits into parts (.0,.1…). The site's script reads it to recognise you; it stays restricted to infuse.earth (SameSite=Lax). Lifetime: until you sign out, 400 days at most.sb-<ref>-auth-token-code-verifier: set when you ask for a sign-in code or link by email. It checks that the link opens in the browser that asked for it, then disappears once you use it.
2.2 Your cart and your order
infuse_cart_v2: your cart. For each line, the product, the variant and the quantity, plus a mark when the line is a gifted seed. No name, no price, no address: the server looks up the rest in the catalogue. Set by the server as HttpOnly, so the page's script cannot read it. Lifetime: 30 days.infuse_cart_n: the number of items in your cart, so the counter at the top of the page shows as soon as you arrive. Lifetime: 30 days.infuse_checkout_id: set when you type your email at the Delivery step. A random number links this checkout to your payment: once you have paid, no cart reminder is sent to you, even if you switched email address along the way. HttpOnly. Lifetime: 7 days.infuse_ally: set only if you arrive through an ally's link (?ally=…). It keeps their code, which fills in by itself at checkout and gives you their discount. A newer link replaces the previous one. Lifetime: 90 days.
2.3 Your language, your country, your currency
NEXT_LOCALE: your language, among the site's eleven. Set when you land on an address without a language (plain infuse.earth): the site takes your browser's language if it speaks it; otherwise it looks at your country, French for a French-speaking country, English elsewhere. It changes when you pick a language in a selector. Lifetime: 1 year.infuse_locale_choice: remembers that you picked a language, or kept the one on screen, so the language window does not ask again. A copy sits in local storage (§ 3), in case your browser clears the cookie. Lifetime: 1 year.infuse_geo: your country code (FR, DE, JP…), as our host reads it from your connection. It is used to suggest your country's language and to prefill the delivery country. Never set for a bot. Lifetime: 30 days.infuse_currency: the currency of the indicative amount shown next to the price; prices stay in euros. Set from your country, or by your choice in the selector. Lifetime: 30 days from your country, 1 year when you choose it.infuse_currency_manual: notes that the currency is your choice, so your country does not override it. Lifetime: 1 year.
2.4 The world you explore
INFUSE_CLUSTER: the world you explore, Dream, Ritual or Daily. It is set when you open a page that belongs to a world (the Dream, Ritual or Daily page, a product page, a blend, a “For” page) or when you switch worlds on a product page. The site then keeps its colours while you go through the cart or your account. It is cleared when you return to the home page. With no world in progress, the colours follow the time of day: Dream from 10 pm to 6 am, Ritual from 6 pm to 10 pm, Daily during the day. Lifetime: 1 year.
2.5 Your answer to the banner
infuse-cookies-ack: remembers that you answered the banner. Lifetime: 1 year.infuse_mesure: your answer, 1 if you accept both measurements of § 2.6, 0 if you decline them. Lifetime: 6 months, then the banner asks again.
2.6 Measurement, with your consent
Two measurements, set only after your “Accept” on the banner.
infuse_arrivee keeps the page you arrived on and where you came from: the path of that page, the domain of the previous site (google.com, for example), the utm parameters of a campaign link, and the date. Nothing else: no name, no address, no identifier. If you order within 30 days, these lines are copied onto your order; they show us which pages lead to the plants. Set by infuse.earth alone, never passed to a third party. Lifetime: 30 days.
ph_<key>_posthog: the cookie of PostHog, our tool for measuring how people move through the site (PostHog Inc., data hosted in the European Union, in Frankfurt). It holds a random anonymous identifier that links together the pages of one visit and of later visits. PostHog records page views, time spent on each page, clicks, and session recordings: how the page moves on your screen, with every input field masked, so nothing you type. This data goes through infuse.earth (the /ingest address) before reaching PostHog. It shows us where the site helps you and where it loses you. Lifetime: 1 year. PostHog also keeps a copy of this identifier in the browser's local storage (ph_… keys), deleted along with the cookie when you decline.
Your browser's Global Privacy Control signal turns both off. You can withdraw your consent at any time, in one click that also deletes these cookies: decline the measurement.
2.7 Stripe's cookies, in the cart and at checkout
The cart and the checkout page load Stripe.js, Stripe's payment module. According to Stripe's documentation, it sets two anti-fraud cookies on our domain: __stripe_mid (1 year) and __stripe_sid (30 minutes). The card form lives in a Stripe frame, which may set its own cookies on its domain, under its cookies policy.
3. What the site keeps in your browser, besides cookies
The law treats browser storage (localStorage, sessionStorage) the same way as cookies. These lines stay on your device.
3.1 Until you clear the site's data
infuse_checkout_draft_v1: what you typed at checkout, first name, last name, email, phone, address, country, promo code and current step. Nothing to retype after a reload or going back. Deleted as soon as the order is paid.infuse_locale_choice: the copy of your language choice (§ 2.3).infuse:geo_toast_seen_v2: you have already read the note about prices in euros.infuse_cart_crosssell_hidden: you folded away the cart suggestions.infuse:news:last_read_at: when you last read the news, to mark what you have not seen yet.oracle-savoir-mode: the mode, day or dream, you chose for the Forest oracle.infuse_ally_onboarded_<code>: you have already seen the welcome of your ally space.comptoir-view: the view you chose in the pro space.
3.2 For your visit (cleared when you close the tab)
infuse_cluster: the world in progress (§ 2.4).infuse_concierge_threadandinfuse_concierge_fullpage_history: your conversation with the Concierge, so you find it again from page to page.infuse_nudge_…: the Concierge has already offered its suggestion on this kind of page.infuse:lastProductandinfuse:restoreScrollY: the last product page you opened and your place on the page, for the back button.
4. What is counted without cookies
Three tools observe the site without storing anything on your device, whether or not you accept the measurement.
- Vercel Web Analytics and Speed Insights (Vercel Inc., United States, our host): page views, where visitors come from, country, device and browser type, page load times, and a few gestures with no name attached: a search (its length, never its text), an add to cart, opening the Concierge.
- Ahrefs Web Analytics (Ahrefs Pte. Ltd., Singapore): page views, visit duration, where visitors come from (referring site, utm parameters), country, device and browser type, in aggregate. What Ahrefs keeps, and for how long, is governed by its privacy policy.
- Sentry (Functional Software, Inc., data hosted in Germany): when a page breaks, the error report reaches us, with the message, the page and the browser; for one visit in ten, it also measures load times. Your session is never recorded.
No advertising, no resale, no tracking of anyone from one site to another, here as with PostHog. Since these three tools store nothing on your device, the banner asks nothing for them. What they receive is detailed in the privacy policy.
5. Decline or delete
The measurement of § 2.6 is declined in one click: the “Decline” button on the banner, or this link, decline the measurement. It deletes infuse_arrivee and PostHog's ph_… cookies.
The others make the site work. You can delete them in your browser settings: the site then forgets your cart, your session and your settings, and the banner comes back. Clearing “site data” also empties the local storage of § 3.
6. Going further
What we do with your personal data (collection, retention, providers, transfers, rights) is described in the privacy policy. Any question: gestion@infuse.earth.
7. When this page changes
It changes when a tool arrives on the site or leaves it. The update date, at the bottom of the page, shows when.
Päivitetty viimeksi: 2026-10-27