Cookie policy

1. Purpose

This page explains how MB360 handles cookies and similar trackers on the public site and in the application.

2. Strictly necessary cookies

• next-auth.session-token, next-auth.csrf-token, and next-auth.callback-url support authentication and security.
• The next-intl locale cookie stores your display language.
• The mb360_consent cookie stores your consent choice for 180 days.

These cookies remain active because they are required for the service to work.

3. Optional categories

The Audience measurement and Advertising and conversions categories remain disabled until an explicit choice is made.

Google Ads is currently the only client-side marketing tag implemented. It loads only on public marketing pages after explicit consent to the Advertising and conversions category. It does not load on /cookies, on /signup, or inside the private app boundary.

The Audience measurement category remains inactive in this release. If you withdraw consent, MB360 blocks new marketing reads and writes and attempts to clear first-party Google Ads cookies that were already set whenever that is technically possible.

4. Technical monitoring

Sentry error monitoring remains classified as necessary. Session Replay is disabled in this release.

5. Change your choice

Use the Cookie settings link in the footer to reopen the preference panel.

Changing your choice blocks new deposits and reads by our tools. You can also remove cookies already present through your browser settings.

6. Third-party services

During authentication, Google may place its own cookies on accounts.google.com. Those cookies are governed by Google's own policy, not directly by MB360.

7. International transfers

Strictly necessary cookies are processed inside the European Union: the MB360 backend is hosted in France (Google Cloud, europe-west9 region, Paris).

Cookies in the Advertising and conversions category (Google Ads), set only after your explicit consent, may involve a transfer of personal data to Google LLC (United States). This transfer is governed by the European Commission's Standard Contractual Clauses (SCC); you can request a copy at contact@monbureau360.fr.

If you refuse or withdraw your consent, no advertising cookie is set and no such transfer takes place.

8. Contact

For any question about this policy: contact@monbureau360.fr.