1. What Are Cookies?
Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. They allow the site to remember your preferences, improve your user experience, and collect anonymous usage statistics.
Orfolio uses cookies to provide a seamless, personalized, and secure experience while respecting your privacy rights under Quebec's Law 25 and the Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Types of Cookies We Use
Orfolio categorizes cookies into the following types:
2.1 Necessary Cookies
These cookies are essential for the basic functionality of Orfolio and cannot be disabled. They include:
- Authentication Cookies: Used to maintain your login session securely using JWT (JSON Web Tokens).
- Security Cookies: Protect against cross-site request forgery (CSRF) and other security threats.
- Session Cookies: Temporary cookies deleted when you close your browser, used for navigation and form submissions.
These cookies do not require consent as they are strictly necessary for service operation.
2.2 Analytical Cookies
These cookies help us understand how visitors interact with Orfolio by collecting anonymous usage statistics such as:
- Pages visited, features used, and time spent on the platform.
- Traffic sources (direct, search engines, referrals).
- Device type, browser version, and screen resolution.
Analytical data is collected using tools like Azure Application Insights and is stored securely in Canada. No personally identifiable information (PII) is collected without explicit consent.
2.3 Preference Cookies
These cookies remember your settings and preferences to enhance your experience, including:
- Language selection (French, English).
- Theme preference (light mode, dark mode).
- Dashboard layout and customization options.
Preference cookies do not track your browsing behavior outside of Orfolio and are stored locally or server-side based on your account settings.
3. Third-Party Services and Cookies
Orfolio integrates with trusted third-party services that may set their own cookies to provide essential functionality:
- Microsoft Azure: Hosting, infrastructure monitoring, and Application Insights (analytics).
- Stripe: Secure payment processing and billing management. Stripe uses cookies to prevent fraud and ensure PCI-DSS compliance.
These third-party services are bound by strict contractual agreements ensuring compliance with Law 25 and PIPEDA. Data processed by these services remains under the jurisdiction of Canadian privacy laws.
4. Purpose and Retention Period
Each cookie type has a specific purpose and retention period:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Necessary | Authentication, security, session management | Session or up to 7 days |
| Analytical | Usage statistics, performance monitoring | Up to 13 months |
| Preference | Language, theme, user settings | Up to 12 months |
| Third-Party (Stripe) | Payment processing, fraud prevention | Varies (see Stripe Privacy Policy) |
5. Consent and Cookie Banner
In accordance with Law 25, Orfolio obtains explicit consent before placing non-essential cookies on your device.
When you first visit Orfolio, a cookie consent banner will be displayed allowing you to:
- Accept All: Consent to all cookie types, including analytical and preference cookies.
- Reject Non-Essential: Only allow necessary cookies required for basic functionality.
- Customize: Choose specific cookie categories to enable or disable based on your preferences.
Your consent choice is stored securely and can be modified at any time through the cookie settings link available in the website footer or by contacting rdpd@orfolio.com.
6. Managing and Disabling Cookies
You have the right to control and manage cookies on your device. Most modern browsers allow you to:
- View, block, or delete cookies through browser settings.
- Set preferences to accept or reject cookies on a per-site basis.
- Enable "Do Not Track" (DNT) signals, which Orfolio respects where applicable.
For browser-specific instructions on managing cookies, consult the following resources:
Note: Disabling necessary cookies may impact core functionality and prevent you from accessing certain features of Orfolio.
7. No Tracking Without Consent
Orfolio does not engage in behavioral tracking, cross-site tracking, or third-party advertising networks. We do not sell or share your browsing data with external advertisers or data brokers.
All analytical data collected is used exclusively for improving platform performance, user experience, and service reliability. Data is anonymized and aggregated wherever possible to protect your privacy.
8. Data Security and Privacy
Cookies used by Orfolio do not contain sensitive personal information such as:
- Passwords (stored securely using bcrypt hashing).
- Payment details (handled exclusively by Stripe using PCI-DSS compliant tokenization).
- Social security numbers, health data, or other protected information.
All cookies are transmitted over HTTPS to ensure encryption in transit. Cookies containing authentication tokens (JWT) are protected using HttpOnly and Secure flags to prevent client-side access and man-in-the-middle attacks.
9. Updates to Cookie Policy
Orfolio reserves the right to update this Cookie Policy in response to:
- Changes in applicable privacy legislation (Law 25, PIPEDA, etc.).
- Introduction of new features, services, or third-party integrations.
- Updates to cookie management tools or consent mechanisms.
Users will be notified of significant changes via email or in-platform notifications. The "Last updated" date at the bottom of this page reflects the most recent revision.
10. Privacy Policy and Contact Information
For more information about how Orfolio collects, uses, and protects personal data, please review our Privacy Policy.
If you have questions, concerns, or wish to exercise your rights regarding cookies and data processing, please contact:
Data Protection Officer – Studio Orfolio
Montréal, QC, Canada
Email: rdpd@orfolio.com