Cookies
Last updated: 29.09.2026
Translation. In the event of any discrepancy, the French version prevails.
Seven cookies, all necessary for the site to work. No advertising trackers, no audience measurement. One exception to "no third parties": on the payment page, and on the page where a seller enters their bank details, the form is served by Stripe, which sets its own cookies to recognise a browser from one payment to the next and to counter fraud; that is neither advertising nor audience measurement, and it happens only there. That is why the banner shown on your first visit asks for nothing: there is nothing to accept or refuse, only to know. Once closed, it does not come back; that closure is kept in your browser (localStorage), never sent to our servers, and not in yet another cookie.
occa_session
Keeps you signed in. It contains a random token, never your email address or your password, which we do not have. It expires after 30 days without a visit — each visit extends it by that much again, up to 365 days — and disappears when you sign out. If you untick "stay signed in on this device", it lasts only the session and is deleted when you close the browser.
merka_langue
Remembers whether you read the site in French, German, Italian or English, so the question is not asked again on every visit. It is only set if you choose a language yourself, and lasts one year.
apres_connexion
Set when you go to sign in from a specific page, most often a listing, so that you land back there once signed in instead of being left on the home page. It lives ten minutes at most and is deleted as soon as you return.
oauth_etat_…
Set for the few seconds of a sign-in through Google, Facebook or Apple, and deleted immediately afterwards. It serves only to check that it really is you coming back from the provider, and not someone who forged the return link. It lives ten minutes at most.
reprendre_photo
Set for the few seconds of a fresh sign-in through Google started from your profile to take over your Google photo, and deleted immediately afterwards. It holds only a flag, and lives ten minutes at most.
merka_dernier_email
Remembers the last email address used to sign in on this device, and only pre-fills the field on your next visit. It opens no session and does not replace the code, which still goes to that address. It is set only if you leave the "stay signed in on this device" box ticked; unticking it deletes the cookie. It lasts one year.
merka_acces
Before the public opening, it remembers that you are allowed in — through an invitation or an early-access link — so the question is not asked on every page. It will go away at opening.
If this were to change
The day we were to add audience measurement, this page would be rewritten first and your consent would be asked, because a cookie that is not necessary for the service you request cannot be set without your agreement.