Privacy & Legal
Privacy Policy & Data Principles
At Lacande, we treat privacy as a core design constraint rather than a legal compliance exercise. Our website and digital services are built to respect visitor autonomy and data minimisation.
1. No Tracking Cookies for Normal Visits
For standard browsing, this website sets zero tracking, analytics, or advertising cookies. You will never see a cookie consent banner during normal visits, because no cookies are required to measure our website audience.
2. Anonymous Audience Measurement
We conduct aggregate, first-party audience measurement using transient sessionStorage session keys.
- Session Duration: Session keys exist strictly in your browser memory and are deleted automatically when you close the tab.
- Data Minimisation: We never collect or store IP addresses, persistent device identifiers, or browser fingerprints in our database. Device type is classified as mobile or desktop based on viewport width only.
- Exemption: Our analytics model complies with CNIL audience-measurement guidelines.
3. Affiliate & Partner Attribution
If you arrive at our website via an affiliate partner link carrying a ?ref= parameter:
- Same-Session Attribution: Your visit is attributed to the partner during your immediate session without setting any cookies.
- 30-Day Optional Cookie: A minimal consent banner will appear offering a 30-day first-party cookie (
lacande_affiliate_ref). If accepted, this cookie enables delayed attribution if you return to complete a purchase within 30 days. - Refusal: If refused, no cookie is stored and the banner will not reappear.
4. NFC Candle Streaming Preference (nfc_pref)
Our physical candles feature embedded NFC microchips that link to curated music playlists.
- Functional Cookie: When you select a preferred music streaming provider (such as Spotify, Apple Music, or Deezer) on the
/choicepage, a functional cookie (nfc_pref) is set on our audio redirect domain (HttpOnly,Secure,SameSite=Lax, 1-year lifetime). - Purpose: This cookie allows subsequent physical candle taps to bypass the selection screen and launch your chosen player instantly.
- Reset Option: You may clear this preference at any time by visiting the
/resetpage on the NFC application.
5. Essential Cart & Session Cookies
- Lazy Session Cookie (
lacande_session): Set strictly upon your first active cart action (e.g. adding a candle to your cart). Has a 7-day expiration and contains only an encrypted session reference to manage your cart line items and delivery country. - Zero Third-Party Cookies: No third-party tracking cookies or external scripts are loaded during normal site visits.
6. Payment Processing via Stripe
Payment processing is handled securely by Stripe Payments Europe Ltd.
- Stripe.js Script Loading: To preserve complete privacy, Stripe's payment script is loaded strictly on the
/checkoutpage when you initiate payment. - Data Protection: Your payment card details are transmitted directly to Stripe's PCI-DSS Level 1 certified servers and are never seen or stored on our servers.
7. Customer Data & Statutory Rights
When placing an order, your contact, billing, and shipping details are processed solely to fulfill your order and fulfill French accounting and tax obligations. Under European law, you hold a 14-day right of withdrawal for unlit candles.