Cookie Management Policy

Version 2.4 – Last updated: July 8 2026

This Cookie Management Policy (the “Cookie Policy”) informs users of the website www.eureka-fripe.com (the “Site”) about how Les Chiffonniers d’Eureka Fripe, a simplified joint-stock company (SAS) with share capital of €1,000,000, registered office: 159 route de Paris, 76920 Amfreville-la-Mi-Voie, France, uses cookies and other tracking technologies during browsing.

This Cookie Policy complements the Site’s Privacy Policy and Terms of Use.

1. What is a cookie?

A cookie is a small text file placed on the user’s device (computer, tablet, smartphone) when visiting a website. It stores certain information relating to the user’s browsing activity or preferences.

Some cookies are essential for the proper functioning of the Site (“necessary” cookies), while others are used to measure traffic or improve the browsing experience.

2. Applicable legal framework

This Cookie Policy complies with:

• Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR);


• the French Data Protection Act of 6 January 1978 as amended; and


• the European ePrivacy Directive.

Local rules may apply in certain countries of access (e.g., the United Kingdom, Germany). These are specified in Section 10, “Territorial scope and local specificities”.

3. Cookies used on this Site

This Site uses:

• essential technical cookies required for its operation (e.g., language preference, consent banner and choices via Borlabs);


• first-party audience measurement cookies via Matomo (self-hosted in France), configured for anonymised analytics; and


• Google Ads marketing cookies, subject to your consent, used to measure the performance of our advertising campaigns and optimise media spend.

The Site also relies on Cloudflare Turnstile to secure the contact form. This solution does not use a cookie, but may write a technical value (the cf.turnstile.u key) to the browser’s local storage (localStorage), within the context of the third-party domain challenges.cloudflare.com, solely for anti-bot security and abuse-detection purposes. This processing, strictly necessary for the security of the form, does not fall into the same category as the cookies listed below and is not within the scope of the consent banner. For further details, see our Privacy Policy, Article 13.

The Site uses three categories of cookies:

• Necessary – essential for the Site to function properly (language selection, consent management);


• Statistics / Analytics – anonymised first-party audience measurement (Matomo on-premise; see the table below for details);


• Marketing (optional) – used to measure the effectiveness of Google Ads campaigns and, if you consent, to support our advertising actions.

If you refuse the “Marketing” category, these cookies are not set.

Except for the Google Ads marketing cookie (_gcl_au), set in first-party by the domain .eureka-fripe.com and only after your explicit consent, all other cookies used on this Website are set by the domain www.eureka-fripe.com.

4. Consent management

When visiting the Website for the first time, an information banner managed by Borlabs Cookie allows you to review this Cookie Policy and set your preferences.

Statistics Cookies (consent-exempt)

Matomo audience measurement cookies are configured to be strictly anonymised and are hosted in France. In France and within the EEA, when these anonymisation conditions are fully met, such cookies may be exempt from consent under CNIL guidance.

Marketing Cookies (subject to consent)

The use of marketing cookies, in particular for the Google Ads service, is subject to your prior, explicit consent.

No cookies, tags or tracking signals are sent to Google before you have made your choice in the Borlabs Cookie banner.

If you accept the “Marketing” category, the global Google Ads tag (gtag.js) is loaded and conversions can be measured in full (using cookies). If you refuse, no cookies or signals — even anonymised — are sent to Google.

The Website uses Google Consent Mode v2 (basic), managed by Borlabs Cookie, ensuring that no data are shared with Google before consent is given and that no modelling is performed.

Changing your choice

You may modify or withdraw your consent at any time by clicking the cookie management icon, permanently displayed at the bottom left of the screen.

This icon opens the Borlabs Cookie Console, where you can review and adjust your preferences.

Borlabs Cookie stores your choices locally in your browser and does not transmit any personal data to third parties.

Future updates

If, in the future, third-party cookies requiring prior consent are added, the Borlabs Cookie banner and this Cookie Policy will be updated so you can accept or refuse them individually, in full transparency.

5. Browser settings

You can configure your browser to accept, refuse or delete all or some cookies. The links below explain how to adjust settings:

• Google Chrome


• Mozilla Firefox


• Safari


• Microsoft Edge

6. Retention of preferences

Your choices (consent or refusal) are stored for a maximum of 2 months, corresponding to the validity of the borlabs-cookie. After this period, a new consent banner will be displayed.

7. Right of withdrawal and complaints

You may withdraw or modify your cookie consent at any time via the Borlabs Cookie Console, accessible permanently through the icon at the bottom left of the screen, as described in Section 4 of this Policy.

For any question or complaint regarding cookie management, you may contact the Data Protection Officer (DPO) at: contact@eureka-fripe.com.

If a disagreement persists, you have the right to lodge a complaint with the French Commission Nationale de l’Informatique et des Libertés (CNIL).

8. Security and confidentiality of collected data

Information collected via audience measurement cookies is fully anonymised. No full IP address or personal data are retained.

Data are hosted in France by our managed service provider and are not transferred outside the European Economic Area.

9. Updating this Policy

This Cookie Policy may be updated to reflect:

• changes in applicable laws and regulations;


• new guidance from the CNIL, the ICO or other data protection authorities;


• technical updates to our measurement and consent management tools.

Any substantial change will be clearly indicated on this Website (e.g., the update date shown at the top of this page). We encourage users to review this page regularly.

10. Territorial scope and local specificities

• European Union / EEA: we apply the ePrivacy framework and the GDPR. No non-essential cookies are set without prior consent. Where analytics tools are configured to be strictly anonymous, a consent exemption may apply depending on local authorities.


• United Kingdom: under UK GDPR / PECR, consent is generally required for analytics cookies. Our banner blocks these cookies until a choice is made.


• Germany: under the TTDSG, prior consent is required for non-essential trackers; our banner prevents any placement before your choice.


• United States: we do not “sell” or “share” your information for cross-context advertising purposes. If this changes, a “Do Not Sell or Share” link and recognised opt-out signals will be implemented.


• Other countries (e.g., India, Australia): where local laws require prior consent for non-essential trackers or specific disclosures, our banner and this Policy are adjusted accordingly.