Cookie policy

This policy explains how BESTA uses cookies and similar trackers on the besta-app.fr website and its professional areas (Besta Pro), in accordance with Article 82 of the French Data Protection Act (loi Informatique et Libertés), the GDPR and the recommendations of the CNIL (the French data protection authority).

It supplements our privacy policy.

A cookie is a small text file stored on your device (computer, smartphone, tablet) when you visit a website. It allows your browser to be recognised for a limited period of time.

Some cookies are essential for the website to work and do not require your consent. The others, in particular audience measurement cookies set by third parties, are only set with your prior consent.

These cookies are exempt from consent because they are essential to the service you request. They cannot be disabled from our banner, but you can block them in your browser settings; some features (sign-in, professional areas) will then no longer work.

3.1 better-auth.session_token

Purpose: keeps you signed in to your account.

Duration: up to 90 days, renewed when you use the website.

3.2 better-auth.session_data

Purpose: caches your session information, in signed form, to speed up page loading.

Duration: up to 90 days.

3.3 better-auth.dont_remember

Purpose: limits your session to your browsing session when you choose not to stay signed in (where applicable).

Duration: browsing session.

3.4 NEXT_LOCALE

Purpose: remembers the display language you selected for the website.

Duration: browsing session.

3.5 besta_consent (prefixed with __Host- over HTTPS)

Purpose: stores your choice (acceptance or refusal) regarding audience measurement cookies, so that you are not asked again on every visit.

Duration: 6 months.

3.6 better-auth.state (__Secure-better-auth.state over HTTPS)

Purpose: secures sign-in with Google or Apple by protecting against request forgery during OAuth authentication.

Duration: deleted as soon as sign-in is complete; its value is no longer valid after 10 minutes and, if sign-in is abandoned, the cookie expires after 4 days at most.

3.7 auth_type

Purpose: remembers the type of area selected (user, establishment or artist) during sign-in with Google or Apple.

Duration: 10 minutes.

On the production website, session cookies may carry the "__Secure-" prefix, which ensures they are only sent over an encrypted connection (HTTPS).

With your consent, we use Google Analytics (Google Ireland Limited) to measure website traffic and improve our content: pages viewed, visit duration, device type, approximate geographic origin.

The Google Analytics script is only loaded, and its cookies only set, after you click "Accept all" in the banner. If you refuse, no Google Analytics cookie is set.

4.1 _ga

Purpose: distinguishes visitors for statistical purposes.

Duration: up to 13 months.

4.2 _ga_XXXXXXXXXX (identifier of our Google Analytics property)

Purpose: keeps the state of the audience measurement session.

Duration: up to 13 months.

This duration runs from when the cookie is set and is not extended on each visit.

Data collected by Google Analytics may be transferred to the United States. These transfers are governed by the EU–US Data Privacy Framework, under which Google LLC is certified, and by the European Commission's standard contractual clauses.

Your choice is kept for 6 months; you will then be asked again.

Our hosting provider Vercel Inc. provides us with an audience measurement tool (Vercel Web Analytics) that does not set any cookie on your device and cannot identify you or track you across websites.

It only produces aggregated statistics (number of visits, pages viewed, country, browser and device type). As it does not rely on cookies, it works independently of the choice made in the banner.

Payments (ticketing, Besta Pro subscriptions) are made on the secure payment page hosted by Stripe, to which you are redirected. The Besta website does not load any Stripe script and does not set any Stripe cookie.

Cookies that Stripe may set on its own payment page, in particular for fraud prevention, are governed by Stripe's privacy policy: https://stripe.com/privacy

The website also uses your browser's local storage (localStorage) to remember, on your device, that you have accepted the current version of the terms of use and privacy policy, so that they are not shown to you again.

This strictly necessary information stays on your device until you clear your browser data.

The website also uses your browser's session storage (sessionStorage) to keep the identifier of your pending payment session when buying tickets, as well as the filters you applied to the event feed. This strictly necessary information is erased when you close the tab.

On your first visit, a banner lets you accept or refuse audience measurement cookies. Refusing has no impact on your access to the website.

You can change your choice at any time by clicking the "Manage cookies" link at the bottom of every page: the banner is displayed again and your new choice replaces the previous one.

When you refuse or withdraw your consent, the banner itself deletes any Google Analytics cookies already set (_ga, _ga_XXXXXXXXXX, _gid, _gat) on the website's domain and its parent domains. If you had previously accepted, the page reloads automatically to immediately stop the Google Analytics script already loaded; it is no longer loaded on your subsequent visits.

You can also configure your browser to block or delete cookies:

- Chrome: Settings, "Privacy and security" section

- Firefox: Settings, "Privacy & Security" section

- Safari: Settings, "Privacy" section

- Edge: Settings, "Cookies and site permissions" section

Blocking all cookies may prevent you from signing in to your account and accessing the professional areas.

Data collected through cookies is processed in accordance with our privacy policy, which details your rights (access, rectification, erasure, objection, restriction, portability) and how to exercise them.

To find out more about cookies and how to control them, you can visit the CNIL website: https://www.cnil.fr/fr/cookies-et-autres-traceurs

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

We may update this policy, in particular when a cookie is added or removed. The date of the last update is shown at the top of this page. If a change requires new consent, the banner will be shown to you again.

For any question about cookies: contact@besta-app.fr

Address: BESTA, 60 Rue François Ier, 75008 Paris – France