Cookie policy — EduTools

Last updated: 21 October 2026

In short: EduTools uses no tracking cookie, no advertising service and no third-party analytics tool (no Google Analytics, no Facebook Pixel, etc.). The only cookies we set are strictly necessary for the site to work, and are therefore exempt from consent under the guidance of the CNIL, the French data protection authority (recommendation of 17 September 2020).

1. Cookies set by EduTools

Name	Purpose	Duration	Type
`PHPSESSID`	Unique session identifier generated by PHP. Keeps you logged in, protects forms (CSRF token), handles your plan selection, and so on.	Browser session (deleted when you close it)	Strictly necessary
`edutools_student`	Remembers your last name, first name and group to pre-fill the form when joining a classroom. Set only if you tick “Remember me”, and removable with the “Not you?” button.	1 year	Functional — opt-in

Technical note: both cookies are set with the HttpOnly, SameSite=Lax and Secure attributes (over HTTPS) to limit the risk of session theft.

2. Third-party cookies

Source	When	Why
Stripe (stripe.com)	Only during a payment	Fraud detection and payment protection. These cookies are required for the payment to work. Stripe is PCI-DSS Level 1. More information: Stripe privacy policy.
PayPal (where applicable)	Only if you choose to pay via PayPal	Identification and security of the payment. PayPal cookie policy.

3. Audience measurement (analytics)

To follow site traffic (most visited pages, country of origin of visitors), we use a self-hosted, anonymous and cookie-free analytics system. Specifically:

No cookie is set.
Your IP address is hashed immediately with a daily salt (SHA-256), then stored in truncated form for 12 months at most. The hash changes every day, which makes any correlation between days cryptographically impossible.
Only the country code is kept (e.g. FR, BE, CH), never the city nor the precise address. To determine that country, a truncated and anonymised version of the IP address (last block zeroed, e.g. 82.65.123.0) is sent to the ip-api.com geolocation service; the full address never leaves our servers.
No third-party tracking tool is used (no Google Analytics, Matomo Cloud, advertising pixel, etc.).

This way of working matches the exemption for anonymised analytics recognised by the CNIL for self-hosted tools (the functional equivalent of Matomo in “no-cookie” mode, or Plausible).

4. How do I delete or block cookies?

If you want to delete the cookies already set, or prevent them being set in future, you can do so directly from your browser settings:

Careful: blocking the PHPSESSID cookie will make the site unusable (you will not be able to log in or submit forms).

5. Your rights

Under the General Data Protection Regulation (GDPR), you have a right of access, correction, erasure and objection regarding your personal data. To exercise those rights, write to us at rgpd@edu-tools.fr or use the contact form on the home page.

You may also lodge a complaint with the CNIL.

6. Changes to this policy

If our cookie policy changes (for example if a third-party tool is added), this page will be updated and a new information banner will be shown to visitors to tell them about it.

← Back to home