Cookie Policy
What Billora stores in your browser, why, for how long, and how you stay in control. Only essential cookies are set without your consent; audience measurement is enabled only with your explicit consent.
Audience measurement
With your consent
Essential cookies
Session, language, preferences
Targeted advertising
None
Your choices
"Manage cookies"
Contents
1 / 7
Cookies and local storage: what are we talking about?
A cookie is a small file saved in your browser when you visit a website. Billora also uses your browser's local storage (localStorage and sessionStorage), which plays a similar role: it keeps a few preferences on your device. On this page, the word "cookies" covers both.
General rule: only strictly necessary cookies are set without your consent. Audience measurement on the public website is enabled only after your explicit consent, given in the cookie banner.
Essential cookies (no consent required)
They are indispensable for the website to work, for the security of your account, or to remember your choices. They are used for neither advertising nor tracking, and they cannot be turned off from the banner.
| Name | What it is for | Duration |
|---|---|---|
| authjs.session-token (prefixed __Secure- over HTTPS) | Keeps you signed in to your Billora area after login. Secure cookie, not readable by the page's scripts (HttpOnly). | Up to 30 days, or until you sign out |
| authjs.csrf-token, authjs.callback-url | Technical cookies of the authentication library, set when needed: protecting the login form against forged requests and returning you to the right page after login. | Browser session |
| NEXT_LOCALE | Remembers the website language (French, English or Arabic). Set only if the language you choose differs from your browser's language. | Browser session |
| billora_cookie_consent (local storage) | Remembers your choice in the cookie banner (accepted or refused), so you are not asked on every page. | On your device, until you clear it |
| theme, sidebar-collapsed, products-view-mode (local storage) | Interface preferences for the signed-in area: light or dark theme, collapsed or expanded side menu, products shown as a table or as cards. | On your device, until you clear them |
| dismissed_banners, dismissed_modals, dismissed_popups (local storage) | Remembers the information messages you have closed, so they are not shown again. | On your device, until you clear them |
| tenantSelected (session storage) | Avoids asking you again which company is selected while you browse, if your account is linked to several companies. | As long as the tab stays open |
You can block these cookies in your browser, but you will no longer be able to sign in to your area.
Audience measurement: Google Analytics (with your consent)
On the public website billora.ma only, Billora may use Google Analytics to find out which pages are viewed and to improve the site. No custom event is sent: only the pages viewed are measured, with no link to your Billora account or to the content of your documents.
- Before you choose: no measurement cookie is set. Google Analytics runs in "consent denied" mode (analytics storage, advertising storage and personalisation disabled). In this mode, Google may receive technical information that does not rely on any cookie, such as the address of the page viewed.
- If you accept: Google Analytics sets the measurement cookies listed below and records the pages you view as audience statistics.
- If you refuse: no measurement cookie is set and you use the website normally.
- If you change your mind: the "Manage cookies" link at the bottom of every page reopens your preferences. Withdrawing your consent stops the measurement. You can also delete the _ga cookies from your browser settings.
| Name | What it is for | Duration |
|---|---|---|
| _ga | Tells visitors apart statistically, using a random identifier. | Up to 2 years (Google's standard duration) |
| _ga_<measurement ID> | Keeps the state of the measurement session. | Up to 2 years (Google's standard duration) |
Google's advertising signals (advertising storage, user data, personalisation) are disabled in all circumstances, whatever your choice. Service providers and data transfers are detailed in the privacy policy.
Anti-bot: Cloudflare Turnstile
Forms open to the public (contact, sign-up, login, forgotten password, application to the accountants directory) are protected by Cloudflare Turnstile. This anti-bot check verifies that the request comes from a human, based on technical information from your browser.
It is necessary for the security of these forms, so it does not depend on the cookie banner. Billora does not use it for any advertising purpose. Cloudflare acts as a technical service provider, as stated in the privacy policy.
What Billora does not use
To remove any doubt:
- Targeted advertising: no advertising cookie, no social network pixel and no cross-site tracking.
- Signed-in area: no third-party audience measurement tool is loaded in the dashboard, the administration area or the portals. Google Analytics is not used there.
- Data resale: no data from cookies is sold or rented.
Managing your choices
You stay in control at all times:
- From the website: the "Manage cookies" link at the bottom of every page of the public website reopens your preferences. You can accept, refuse or customise audience measurement. Your choice is saved on your device; if you clear your browser data, the banner appears again.
- From your browser: you can block or delete cookies and local storage in its settings, site by site or for all sites.
Refusing audience measurement has no effect on how you use the website or the application.
Contact and updates
For any question about cookies or to exercise your rights (access, rectification, deletion):
- Email : contact@billora.ma
To learn more about how your personal data is processed, see our privacy policy. In the event of an unresolved complaint, you may refer the matter to Morocco's National Commission for the Control of Personal Data Protection (CNDP).
This page is updated when the tools we use change; the date of the last update appears at the top of the page.