Cookie Policy.
Effective: 20 September 2026
This Cookie Policy describes the cookies and similar technologies (such as browser local storage) we use on confir.eu and within the Confir platform, the legal basis for using them, and how you can control them. It supplements our Privacy Policy. The responsible operator is identified in our Imprint.
1. What is a cookie?
A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to remember your actions and preferences (such as login state or language) for a period of time, so you don't have to keep re-entering them. We also use related technologies — in particular browser local storage — that store information on your device in the same way. This Policy covers all of them.
2. Legal basis
Under § 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), storing information on your device, or reading information already stored there, requires your consent — unless the storage is strictly necessary to provide a service you have expressly requested (§ 25 (2) no. 2 TDDDG). Any subsequent processing of personal data is governed by the GDPR as described in our Privacy Policy.
3. Categories of storage we use
3.1 Strictly necessary (no consent required)
These items are essential for the website and the Service to function and cannot be switched off. They include authentication, session management, security and remembering your cookie choice. Authentication tokens issued by Supabase are stored in your browser's local storage rather than as cookies.
| Name | Type | Where | Purpose | Duration |
|---|---|---|---|---|
confir_cookie_consent_v1 | Local storage | confir.eu | Remembers whether you accepted or declined non-essential storage | Until you clear site data |
sb-*-auth-token | Local storage | Platform | Session authentication and token refresh (Supabase Auth) | Session; refresh token up to 30 days |
confir_lang | Local storage | Platform | Stores your interface language | Until you clear site data |
confir_cookie_notice_dismissed | Local storage | Platform | Remembers that you dismissed the cookie notice | Until you clear site data |
confir.lastActivityAt | Local storage | Platform | Automatic sign-out after inactivity (security) | Session |
confir_audit_retry_queue | Local storage | Platform | Temporarily queues audit-log entries if the connection drops | Until delivered |
3.2 Analytics (consent required)
We use Google Analytics 4 on confir.eu to measure how visitors reach and read this website — which pages are opened, which marketing campaigns bring people here, and which calls to action are followed. It runs on this marketing website only. No analytics of any kind runs inside the Confir platform.
Nothing is loaded until you press Accept. If you decline, close the banner without choosing, or your browser sends a Global Privacy Control or Do Not Track signal, the Google Analytics script is never requested, no analytics cookies are set, and your browser makes no connection to Google at all. This is stricter than a consent banner that loads the tag first and asks afterwards.
Where it is enabled, we run it with Google Signals, advertising features and ad personalisation switched off, so the data cannot be used for remarketing or audience building. Google Analytics 4 does not log or store IP addresses. Google Ireland Limited acts as our processor; Section 7 of our Privacy Policy sets out the transfer safeguards that apply.
| Name | Type | Where | Purpose | Duration |
|---|---|---|---|---|
_ga | Cookie | confir.eu | Distinguishes one visitor from another | 13 months |
_ga_<measurement id> | Cookie | confir.eu | Holds the analytics session state | 13 months |
We use no third-party advertising cookies, no remarketing tags, no social-media pixels, no session recording and no fingerprinting, on confir.eu or in the Service.
4. Your choices
When you first visit confir.eu, our cookie banner asks you to accept or decline non-essential storage, with both options given equal prominence. You can change your choice at any time:
- By pressing Cookie settings in the footer of any page, which re-opens the banner. Withdrawing is one press, exactly as giving consent was: declining there stops analytics immediately and deletes the
_gacookies from your device - By clearing your browser's site data for
confir.eu— our cookie banner will then ask you again on your next visit - By configuring your browser to refuse or delete cookies and site data — see the help pages for Chrome, Firefox, Safari and Edge
Note that blocking strictly-necessary storage will prevent you from signing in to the Service.
5. Do Not Track and Global Privacy Control
We honour the Global Privacy Control (GPC) signal where supported and treat “Do Not Track” browser signals as a decision to decline non-essential storage.
6. Changes to this Policy
We may update this Cookie Policy as our use of cookies and similar technologies evolves. The current version is always available on this page. For material changes, we will update the “Effective” date and may notify you in the product.
7. Contact
For questions about our use of cookies, write to privacy@confir.eu.