Cookie Notice

Name

cw_session

Purpose

Secure authentication and session continuity

Lifetime

30 days

Classification

Strictly necessary

Party

First-party, host-only

Path

/

The cookie is HttpOnly, Secure in production, SameSite=Lax, and Priority High. The raw random token exists only in the browser cookie; BullMeteo stores a SHA-256 hash server-side. It is needed to keep a user signed in and to protect access to private account features.

Production traffic passes through Cloudflare. No Cloudflare cookie was observed during normal anonymous production requests. If a security or challenge feature is triggered, Cloudflare may conditionally set strictly necessary security cookies.

Cloudflare also supplies Network Error Logging (NEL) and Report-To response headers. Supported browsers may use those headers for network reliability reporting; the headers are not advertising cookies. Cloudflare retention and transfer details have not yet been confirmed for this notice.

BullMeteo currently does not use analytics, advertising, or marketing cookies. It also does not use a consent SDK, fingerprinting, tracking pixels, embedded third-party media, or external fonts.

Because there are no non-essential cookie categories to choose from, BullMeteo does not show consent or preference controls. The absence of a cookie banner does not change the strictly necessary session cookie described above.

BullMeteo will reassess this implementation and update this notice before introducing analytics, advertising, marketing, or other non-essential technologies. Where choices or consent become required, the user interface will be added at that time rather than before such technologies exist.

• No analytics cookie is currently set.
• No advertising or marketing cookie is currently set.
• No cookie preference is stored because no optional choice exists.