01Introduction
The OFFBET websites (OFFBET.app and my.OFFBET.app) use a short list of cookies to make the site work, to keep you signed in on the authenticated subdomain, and to power our live-chat support. We do not use cookies for advertising, cross-site tracking, or behavioural retargeting — there is no Meta Pixel, no Facebook SDK, and no AdTech vendor anywhere on this site.
Google Analytics 4 measures OFFBET’s audience (pages viewed, country, device type, anonymised IP address), with no advertising and no cross-site profile. On the offbet.app website, only if you accept it in the banner, and you can change your mind with the “Manage cookies” link at the bottom of every page. In your my.offbet.app space and in the app, it measures the screens you view without asking for your consent. Everywhere, the addresses sent to Google are stripped of any identifier or personal parameter.
The table below shows what we set, why, and when we ask for your consent.
02What Is a Cookie?
A cookie is a small text file a website stores on your browser. The next time you visit, the browser sends the cookie back to the site, which is how the site can “remember” you (your login, your language preference, etc.) without asking again.
Cookies can be set by the site you’re visiting (“first-party”) or by services the site embeds (“third-party” — e.g. a chat widget, a payment processor). We label each cookie below with its provider so you can tell which is which.
03Cookies We Use
The full list of cookies that may be set when you visit OFFBET, what each one is for, and how long it stays.
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
__cf_bm | Cloudflare | CDN bot management at the edge | Strictly necessary | 30 minutes |
cf_clearance | Cloudflare | Anti-bot challenge result | Strictly necessary | Up to 1 year |
NEXT_LOCALE | OFFBET (next-intl) | Remembers your language preference across visits | Functional | 1 year |
offbet_admin | OFFBET | Admin-area gate — present only on staff accounts | Strictly necessary | Session |
Firebase Auth session | Google Firebase | Keeps you signed in on my.OFFBET.app (auth subdomain only) | Strictly necessary | Session |
ob_hd | OFFBET (first-party) | Support chat — links your messages to your conversation. Set only when you write to us, never on a plain visit. | Strictly necessary | 1 year |
offbet_ref | OFFBET (first-party) | Promote OFFBET programme: remembers the coupon of the person whose link you followed, so your sign-up is credited to them. Set only when you open an affiliate link, never on a simple visit. Holds nothing but that coupon: no identity, no history. | Functional | 60 days |
__stripe_mid | Stripe | Payment-fraud prevention — set only when you start a checkout (your licence, or a licence given to a loved one). | Strictly necessary | 1 year |
_ga, _ga_* | Google Analytics 4 (linked to our Firebase project) | Audience measurement: pages viewed, country, device type. Anonymised IP, no cross-site profile, no advertising, addresses without identifiers. On offbet.app, only if you accept in the banner; in your space and in the app, without asking for consent. | Audience measurement | 13 months |
Browser local storage. Besides cookies, the app keeps a few items in your browser’s storage: the coupon you just opened (offbet_coupon, erased as soon as it is applied and after 7 days at most), the chat draft and the last message you read, and a copy of your dashboard so it shows faster. They only serve the app, never advertising, and you can erase them by clearing this site’s data in your browser.
Cookies marked Strictly necessary are set without consent because the site cannot function without them (CDN protection, authentication, fraud prevention on checkout). Cookies marked Functional (consent) are non-essential and you can opt out at any time via the steps in section 04 below.
04Managing Cookies
The “Manage cookies” link at the bottom of every page of the site reopens the audience-measurement banner, where you can change your choice at any time. You also have these direct means:
- Browser-level controls. Every modern browser lets you block third-party cookies entirely, clear cookies for a specific site, or set a clear-on- exit policy. See your browser’s privacy/security settings.
- The support chat. The
ob_hdcookie is set only when you send a message — opening the bubble and reading sets nothing. It is first-party and HttpOnly, so no third-party script can read it and there is no external domain left to block. If you have written to us and want it gone, clear this site's data in your browser; your conversation stays in our records, but this browser will no longer be linked to it. - Use the OFFBET marketing site without signing in. The marketing pages (OFFBET.app) set no authentication cookies — those are only on my.OFFBET.app once you create an account.
The support chat is built and hosted by OFFBET — there is no third-party chat provider such as Crisp or Tidio. Your messages stay with us: they are never sold, shared or used for advertising.
For details on the broader data we collect once you have an account, see our Privacy Policy. To request deletion of all your data, use /delete-your-data/.
05Retention Period
The exact duration of each cookie is shown in the table in section 03. In summary:
- Session cookies expire when you close the browser tab.
- Functional cookies (language preference, chat state) expire after up to 1 year and are refreshed on each visit.
- Strictly-necessary CDN cookies (Cloudflare bot management) expire automatically — typically 30 minutes for
__cf_bmand up to 1 year forcf_clearance.
Your choice in the banner is kept for 6 months, as the CNIL recommends, then the banner is shown to you again. It is stored in your browser’s storage, not in a cookie. Google Analytics cookies last 13 months at most and are not extended on each visit.
06Your Rights
Under the GDPR, you have the following rights over the personal data we process via cookies and otherwise:
- Access to your data.
- Rectification in case of error.
- Deletion of your data.
- Restriction of processing.
- Objection to non-essential cookies.
- Data portability.
- Withdrawal of any consent previously given.
Full detail on how to exercise each right is in our Privacy Policy. You can also contact us directly at [email protected].
If you believe we’ve mishandled your data, you may file a complaint with the French data-protection authority (CNIL): www.cnil.fr.