Cookie policy
This page explains how Rivoult and selected partners use cookies and similar technologies when you use the marketplace.
How we classify cookies
Essential (strictly necessary)
These cookies are required for the service to work. They include: authentication cookies set by NextAuth (so you can stay signed in and your session is protected); anti-forgery tokens where needed for secure sign-in; the `site_locale` cookie that remembers your language choice (up to about one year); the `checkout_res_token` HttpOnly cookie used to reconcile your cart and checkout reservation (up to about seven days); the optional `checkout_coupon_code` cookie if a discount code is applied in checkout (up to about 30 days); and the `affiliate_ref` HttpOnly cookie after you click an affiliate link so conversions can be attributed (up to about 30 days). Without essential cookies, sign-in, cart, checkout, and language selection may not work reliably.
Analytics (Google Analytics 4 and Google Tag Manager)
If you choose “Accept all”, **Google Tag Manager (GTM)** — which manages measurement tags — and **Google Analytics 4 (GA4)** may load. GA4 collects information about site usage: pages viewed, sessions, approximate location, device/browser type, traffic sources, and (where applicable) purchase events. Google may use its own cookies or similar technologies (e.g. `_ga`, `_ga_*`) and processes data under Google’s privacy policy. GTM stores minimal technical data needed to run tags. These tools do not load if you choose “Essential only”.
Marketing / advertising measurement (Meta Pixel)
If you choose “Accept all”, the **Meta Pixel** (Facebook / Instagram), managed via GTM, may load. It records site activity (e.g. PageView) and conversions (e.g. purchases on the thank-you page) to measure ad performance and build audiences for Meta advertising. Meta may use cookies and similar identifiers (e.g. domains `facebook.com`, `connect.facebook.net`). Processing is governed by Meta’s privacy policy. The Meta Pixel does not load if you choose “Essential only”.
Payments & fraud prevention (Stripe)
When you pay by card, Stripe’s scripts, hosted fields, or redirects (on stripe.com and related domains) may set cookies or use device identifiers for fraud prevention, risk analysis, Strong Customer Authentication (3D Secure), and compliance. Stripe acts as a separate controller or processor for that processing; see Stripe’s cookie and privacy documentation.
How long cookies stay in your browser
Some cookies are session cookies: they are deleted when you close the browser (or when the session ends). Others are tied to a fixed lifetime and remain until they expire or you delete them.
Examples of persistent durations used by Rivoult today: language preference (`site_locale`) — up to about one year; checkout reservation (`checkout_res_token`) — up to about seven days; optional coupon reminder (`checkout_coupon_code`) — up to about 30 days; affiliate attribution (`affiliate_ref`) — up to about 30 days. Exact names and lifetimes may evolve with product updates; material changes will be reflected here.
Third-party services
**Stripe** — card payments and Stripe Connect; Stripe domains may set cookies as described above. **Google** (Google Tag Manager, Google Analytics) — analytics after consent; domains include e.g. `googletagmanager.com`, `google-analytics.com`. **Meta** (Facebook Pixel) — advertising measurement after consent; domains include e.g. `connect.facebook.net`, `facebook.com`. The default storefront layout does not load Google Fonts or Google Maps from Google’s servers; if maps or widgets are added later, we will update this policy. Separately, we may count storefront visits using sessionStorage and a same-origin request — that is not a cookie.
Managing cookies
You can block or delete most cookies through your browser settings. Blocking all cookies may prevent sign-in, checkout, or the cart from working reliably.
How to withdraw or change your choice
If you previously chose “Accept all” or “Essential only”, you can change your choice at any time: use **“Cookie settings”** in the footer — this clears the saved preference and reopens the banner. Choosing “Essential only” stops **Google Analytics**, **Google Tag Manager**, and the **Meta Pixel** from loading in new sessions. You can also clear this site’s cookies and local storage in your browser. Cookies already set by Google or Meta may remain until they expire. Essential cookies (sign-in, checkout) may be set again when you use the service.