This English translation is provided for convenience. The French version is the only legally binding one. Read the French version.
Last revised: Nov 11, 2026
On the website
The website sets no cookies for visitors who are not signed in and includes no audience measurement tool. The only cookies it can read are the sign-in session cookies, for people signed in to the application.
In the application
These cookies exist only for signed-in users. The demo, open without an account, sets none of them.
probant.session_tokenCookie
- Set by
- Probant application (HttpOnly, SameSite=Lax; “__Secure-probant.session_token” over HTTPS)
- Purpose
- Sign-in session: keeps the person signed in from one page to the next. It contains only a random token.
- Duration
- 30 days at most without activity
- When
- At sign-in, extended at most once per day of activity; deleted at sign-out.
probant.two_factorCookie
- Set by
- Probant application (HttpOnly, SameSite=Lax)
- Purpose
- Sign-in to an account protected by two-factor authentication: links the password already verified to the code still to be entered.
- Duration
- 10 minutes at most
- When
- After the password of a protected account is entered; deleted as soon as the code is accepted.
probant_reinitialisationCookie
- Set by
- Probant application (HttpOnly, SameSite=Lax, sent only to the new-password page)
- Purpose
- Forgotten password: keeps the token from the emailed link out of the visible address while the new password is chosen.
- Duration
- 60 minutes at most
- When
- When the “forgot password” link is opened; deleted once the new password is saved.
probant_espaceCookie
- Set by
- Probant application (HttpOnly, SameSite=Lax)
- Purpose
- Workspace being displayed (demo or workspace).
- Duration
- 365 days at most
- When
- When a signed-in person switches workspace; deleted at sign-out.
On customer sites
The Probant script, installed by a store on its own site, sets a first-party cookie on that site and keeps a few entries in the browser’s storage, detailed below. When the store requires consent, which is the default setting, nothing is set before the visitor agrees. The opt-out link, which the store places in its privacy policy, sets a cookie that records the visitor’s refusal.
probant_idCookie
- Set by
- Probant script, on the customer site’s domain (shared by its subdomains), or the customer’s server with the server helper, on the page’s host (first-party cookie, SameSite=Lax)
- Purpose
- Random visitor identifier, so the visitor always sees the same variant and their conversions are attributed to the tests they saw.
- Duration
- 390 days at most after the first visit, never extended (the script and the server helper set it again with the same expiry)
- When
- After the visitor’s consent when the workspace requires it; deleted by probant.consent(false) and by the opt-out link.
probant_dCookie
- Set by
- Probant script, on the customer’s site
- Purpose
- Empty test cookie, used to find the site domain on which to set probant_id.
- Duration
- Deleted immediately after being set
- When
- Together with probant_id, after the visitor’s consent; and on refusal, to delete probant_id on the site’s domain.
probant_expLocal storage
- Set by
- Probant script, on the customer’s site
- Purpose
- Tests the visitor has seen and their variant, to attribute their conversions.
- Duration
- Until consent is withdrawn or the browser clears it
- When
- After the visitor’s consent; deleted by probant.consent(false).
probant_seenSession storage
- Set by
- Probant script, on the customer’s site
- Purpose
- Exposures already sent during the session, so only one is counted per test, and the visit’s entry point (source, campaign, path).
- Duration
- The browsing session
- When
- After the visitor’s consent; deleted by probant.consent(false).
probant_fileSession storage
- Set by
- Probant script, on the customer’s site
- Purpose
- Events from a visitor who consented on a previous visit, held until the site’s consent tool responds.
- Duration
- The browsing session, until the consent tool responds
- When
- Before that response, for a visitor who has already consented; sent once consent is confirmed, deleted by probant.consent(false).
probant_oppositionCookie
- Set by
- Probant opt-out link, placed by the store in its privacy policy, on the site’s domain (shared by its subdomains; first-party cookie, SameSite=Lax)
- Purpose
- Records the visitor’s objection to measurement: while it exists, the script, the journey module, and the server helper assign, apply, and send nothing. It contains only “1”, nothing that distinguishes one visitor from another.
- Duration
- 390 days at most, until the objection is withdrawn through the same link
- When
- When the visitor clicks the link’s objection button.
Managing your choices
On a store’s site, consent is collected by the store’s consent tool, which passes the choice to the script on every page. A refusal or withdrawal deletes the script’s cookie and local storage.
The technical details are described in the documentation and on the Security and GDPR page.