File DA-034 View as Markdown
Safehouse (privacy)
| We do | We don't |
|---|---|
| Detect in the browser, sending at most one beacon per session | Set cookies |
| Count every session once, with no sampling | Store keystrokes or input contents |
Keep the session id in sessionStorage | Keep raw fingerprints |
| Delete session detail after 90 days (30 for unclaimed sites) | Block anyone on our own |
Safehouse (PCI-lite) switches on when it sees card fields, Stripe Elements, autocomplete="cc-*" or checkout paths. No listeners go on payment fields, and there's no key timing on the page.
mode | Purpose | Consent |
|---|---|---|
analytics (default) | Label marketing data | Follows your banner |
security | Fraud and abuse prevention only | May be strictly necessary |
The CNIL consent exemption covers security only. Forwarding labels to marketing tools needs consent. This isn't legal advice.