Legal information
Cookie policy
This page explains which cookies and trackers may be used on Envy, why they exist and how to manage them.
Last updated: September 27, 2026
This English version is provided for convenience. In case of discrepancy, the French version prevails.
What is a cookie?
A cookie is a small file stored on a device when visiting a website. Similar technologies, such as the browser's local storage or technical identifiers, may also be used to run a service or measure its use.
Strictly necessary cookies
These trackers let the website and the app work properly, in particular for security, authentication, session persistence and access to the features you request. They do not require consent when they are essential to the service.
Anonymous audience measurement, exempt from consent
Envy measures its audience with PostHog in a so-called "cookieless" mode: no cookie is set, nothing is stored on or read from your device, and you are not identified. The technical identifier that groups the pages of a single visit is computed by PostHog on its servers, changes every day and cannot be reversed. Your IP address is not kept.
Because it neither writes nor reads anything on your device, this measurement falls outside article 82 of the French Data Protection Act: it does not require your consent, in line with the exemption provided for audience measurement (CNIL decision no. 2020-091). It is only used to produce anonymous statistics for Envy, is never combined with other processing, allows no cross-site tracking and is shared with no third party.
It relies on our legitimate interest in understanding how the service is used, which gives you a right to object: the "Anonymous audience measurement" section of the preferences panel turns it off immediately.
Detailed audience measurement, subject to consent
If you consent, PostHog also sets a cookie and links your browsing to your account, which allows a much finer analysis (journeys between the website and the app, conversion funnels). Autocapture stays off and no session is recorded. This mode, and only this one, depends on your consent: without it, only the anonymous measurement described above runs.
Usage statistics measured by our servers
Some key actions (account creation, list creation, adding a wish, booking) are counted directly by our servers, without cookies or reading your device. No identifying data is sent to PostHog in the process (no name, no email address, no list content) and your IP address is not kept. This processing relies on our legitimate interest in measuring use of the service; if you have an account, you can object to it from your privacy preferences in the app.
Chat support
The Crisp support chat is available on every page of the website and the app, from the first visit. It is a feature of the service (the way to reach us) and not a measurement or advertising tracker: its script is therefore loaded without waiting for your answer to the banner, and the banner does not ask for your consent for it.
Crisp sets its own cookies (crisp-client-*) for this, which are used to find your conversation from one page and visit to the next, and for nothing else. You can decline them from your browser settings: the chat stays usable, but the conversation history no longer follows you.
Affiliate tracking
Impact may be used to measure affiliate links or impressions when its script is enabled. The Impact script is only loaded after consent to affiliate tracking.
Cookies and trackers used
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| envy_cookie_consent_v1 | Envy | Remembers your consent choice so you aren't asked again on every page. Necessary. | 6 months |
| envy_lang | Envy | Remembers the language you chose (French or English), on the website and in the app. Only set when you choose a language. Necessary for the service you requested. | 12 months |
| sb-*-auth-token | Envy (Supabase) | Keeps your session when you're signed in to the app. Necessary. | Session |
| ph_*_posthog | PostHog | Detailed audience measurement: a visit identifier linking your browsing to your account. Only set if you consent to this purpose; anonymous audience measurement sets no cookie. | 12 months |
| crisp-client-* | Crisp | Support: keeps the support chat conversation going. Set from the first visit, as the chat is part of the service; can be declined from your browser settings. | 6 months |
Impact affiliate trackers are set by that provider when its script loads, only after consent to affiliate tracking; their names and durations are covered by its own documentation.
Hosting of audience measurement
Audience measurement data is processed by PostHog on its European infrastructure, as Envy's processor and on its behalf only. It goes through the subdomain io.envynest.fr, a technical relay pointing to PostHog: this relay limits measurement loss caused by blockers, but changes neither the recipient, nor the purpose, nor the rules that apply to each of the two measurements described above.
Retention period
Cookie lifetimes depend on their purpose and on the provider. Necessary cookies are kept for as long as needed to run the service. Audience measurement, support chat and affiliate trackers follow the periods set by their providers. Your Envy consent choice is kept in the browser's local storage for about 6 months so you aren't asked again on every visit.
Managing your preferences
You can accept, decline or customize non-essential trackers from the cookie banner. The same panel lets you object to anonymous audience measurement, which does not depend on consent but can still be declined. You can change these choices at any time with the button below or from the website footer.
Link with privacy
When cookies or trackers allow personal data to be processed, that processing is also described in Envy's privacy policy.