Cookie policy
Last updated: 15 June 2026
1. What is a cookie?
A cookie is a small text file placed on your device (computer, phone, tablet) by a website during your visit. It allows the site to remember information about you — such as your preferred language or the fact that you are signed in — between pages or between visits.
This policy also covers the equivalent trackers used by Bobibets: browser local storage (localStorage, sessionStorage), invisible pixels and any similar technology that reads or writes information on your device.
2. Why do we use cookies?
We use cookies and equivalent trackers to:
- Run the service — keep you signed in while you play in your leagues, protect sensitive forms, balance load.
- Remember your preferences — your language (French or English) and your theme (dark or light).
- Secure your sign-in — detect automated sign-ups and protect against abuse.
We use no advertising cookies and never sell this information to third parties.
3. Categories of cookies used
3.1 Strictly necessary cookies
Required for the service to work. They keep your session alive, protect forms against automated attacks and remember your interface language. Legal basis: performance of the contract and legitimate interest. No prior consent is required.
3.2 Functional cookies
Improve your experience by remembering display preferences (dark/light theme, view mode). Strictly limited to user comfort, they are not used to analyse your behaviour or track you. Legal basis: legitimate interest.
3.3 Analytics cookies
None at this time. We currently use no audience-measurement tool (no Google Analytics, no Matomo, no Plausible). If we add one in the future, it will comply with applicable rules — prior consent, unless it is an audience-measurement solution exempted by the CNIL (anonymous statistics, no cross-referencing or third-party transfer) — and this policy will be updated.
3.4 Advertising and third-party cookies
No advertising cookies are set by Bobibets. When you make a payment, the checkout flow is hosted by Stripe and may set its own cookies on its own domain to secure the transaction; those cookies are governed by Stripe’s cookie policy.
4. Detailed list of cookies and trackers
| Name | Issuer | Purpose | Duration | Category |
|---|---|---|---|---|
| authjs.session-token __Secure-authjs.session-token | Bobibets (Auth.js) | Keep you signed in and identify your account. | 30 days | Necessary |
| authjs.csrf-token __Host-authjs.csrf-token | Bobibets (Auth.js) | Protect authentication forms against CSRF attacks. | Session | Necessary |
| authjs.callback-url __Secure-authjs.callback-url | Bobibets (Auth.js) | Remember the redirect target after sign-in. | Session | Necessary |
| cf_clearance __cf_bm | Cloudflare Turnstile | Verify you are not a bot during sign-up. | 30 minutes to 30 days | Necessary |
| v2-mode | Bobibets (localStorage) | Remember your theme choice (dark/light). | Persistent | Functional |
| bobibets:viewMode | Bobibets (localStorage) | Remember your view mode (compact or detailed). | Persistent | Functional |
Names and durations may change with updates to our technical dependencies (Auth.js, next-intl, Cloudflare). This policy is kept up to date with the main trackers in use.
5. How to manage your preferences
No consent banner. Bobibets only sets strictly necessary trackers (session, anti-bot security) and functional ones (display preferences), and uses no audience-measurement or advertising tool. As none of these trackers requires prior consent, no cookie banner is shown — in line with regulations. Should we add a non-essential tracker in the future, a consent mechanism would be put in place beforehand.
Browser settings. You can also block or delete cookies directly from your browser. Blocking strictly necessary cookies will prevent you from signing in.
For further information, see the CNIL guidance: cnil.fr (English).
6. Third-party cookies
Some of our providers may set their own cookies, on their own domain and under their own policy:
- Stripe — only on the payment flow (transaction security and fraud detection). Stripe cookie policy
- Cloudflare — Turnstile anti-bot challenge on the sign-up form. Cloudflare cookie policy
- Google — only if you choose to sign in with Google. Google cookie policy
7. Changes
This policy may evolve to reflect new usage, new features or legal changes. Material changes will be signalled on the site and the update date above will be revised.
8. Contact
For any question relating to this cookie policy or to the exercise of your rights, please write to dpo@bobibets.com. You may also read our Privacy policy and our Legal notice.