We use technologies such as cookies and web beacons to operate the site, measure reach and show relevant ads. You can “Accept all”, “Accept essential only” or make your own choice.
These technologies are required to enable the core functionality of the website. They are used on the legal basis of § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (b), (c) and (f) GDPR based on an overriding legitimate interest.
Cloudflare
Session-Cookie
Functional
These technologies let us analyse how the website is used to measure and improve performance. All services in this category are only set after your consent (§ 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR).
Google Analytics 4
Marketing
These technologies are used by advertisers to display ads that are relevant to your interests. All services in this category are only set after your consent (§ 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR).
MCANISM
Awin
Google Ad Manager
CloudflareEssential
Service description
Content delivery network and security service. Protects the site from attacks and speeds up content delivery.
Processing company
Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA
Purpose of data
Provision of the websiteDDoS protectionperformance
Technologies used
CookiesLocal Storage
Data collected
IP addressuser agentrequest data
Cookies & local storage
__cf_bmHTTP-Cookie
Distinguishes humans from automated requests (bot management) and protects the site from abuse.
Duration: 30 minutes
cf_clearanceHTTP-Cookie
Stores the result of a security check to avoid repeated challenges.
Technical cookies needed to run the website: session (sign-in and form state), form protection and storing your consent decision.
Processing company
Thomas Harnisch Königskinderweg 74f, 22457 Hamburg, Deutschland
Purpose of data
Session managementsign-in statusform protection
Technologies used
CookiesLocal Storage
Data collected
Session ID
Cookies & local storage
bricoria_sessionHTTP-Cookie
Session management: keeps your sign-in and form state during your visit.
Duration: 2 hours
XSRF-TOKENHTTP-Cookie
Protects form submissions against cross-site request forgery (CSRF).
Duration: 2 hours
bricoria_oauthHTTP-Cookie
Only when signing in with Google or Apple: protects the sign-in against abuse (state, language).
Duration: 10 minutes
bricoria_deviceHTTP-Cookie
Only after signing in: recognises this browser for the device list in your account, “stay signed in” per device and the notice email for a new device.
Duration: 400 days
td_consentLocal Storage
Stores your consent decision so the consent banner does not reappear.
Duration: until revoked
Legal basis
Art. 6 (1) (f) GDPR
Processing location
• Germany
Retention period
• Session duration
Google Analytics 4Functional
Service description
Google web analytics service. With your consent we load Google Analytics 4 and measure which pages are used and how (e.g. page views, time on page, origin) to improve Bricoria. Google signals and ad personalisation are switched off; we do not send user IDs or account data.
Processing company
Google Ireland Limited Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Purpose of data
Statistics: audience measurement and usage analysis to improve content and features
Technologies used
JavaScript (gtag.js)cookiesbeacon requests
Data collected
Pseudonymous cookie IDIP address (only for approximate locationnot stored by Google)pages viewedreferrertime on pageinteractions (e.g. scrollingclicks on external linkssearch)device typebrowseroperating systemscreen resolutionlanguageapproximate location (country/region/city)
Cookies & local storage
_gaHTTP-Cookie
Distinguishes visitors using a random, pseudonymous ID.
Duration: 2 years
_ga_<Container-ID>HTTP-Cookie
Stores the session state for audience measurement.
Duration: 2 years
Legal basis
Art. 6 (1) (a) GDPR
Processing location
• European Union, USA
Retention period
• Cookies up to 2 years; event data in Google Analytics 14 months
Transfer to third countries
USA (Google LLC; EU-US Data Privacy Framework adequacy decision)
Affiliate marketing network. Uses tracking links and cookies to attribute clicks and completed orders (conversions) to the referring partners and to enable commission accounting.
Processing company
MCANISM Technology GmbH Cremon 11, 20457 Hamburg, Deutschland
Affiliate marketing network. With your consent we load the Awin script (MasterTag). It detects clicks on affiliate links and reports them to Awin in the background (“bounceless tracking”): you go straight to the retailer, and a later purchase can be attributed to the click so that we receive a commission.
Processing company
AWIN AG Otto-Ostrowski-Straße 1A, 10249 Berlin, Deutschland
Data protection officer
global-privacy@awin.com
Purpose of data
Attributing purchases after clicks on affiliate links (bounceless tracking)commission accountingfraud prevention
Google’s ad server, which we use to deliver ads on Bricoria. With your consent Google may set cookies and show personalised ads. Without consent we only show limited, non-personalised ads that store nothing on your device.
Processing company
Google Ireland Limited Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Purpose of data
Delivering and personalising adsfrequency cappingad measurementfraud detection
