Cookie policy
Find out which cookies and similar storage technologies our website and separate AI advisor use and how to change your choices.
Last updated: 9 October 2026
Your choice
Google Analytics, Google Ads and YouTube are optional and off by default. You can allow them separately, accept all available optional services or reject them with “Necessary only”. Consent under Article 6(1)(a) GDPR and section 25(1) TDDDG can be withdrawn prospectively at any time through “Cookie settings” in the footer. Closing the banner does not grant consent. AI advice, email delivery and voice are started separately by you. The separate AI advisor does not itself embed Analytics or Ads measurement tags.
Necessary storage of your choice is based on section 25(2)(2) TDDDG. Optional device access requires consent under section 25(1) TDDDG; related personal-data processing is based on Article 6(1)(a) GDPR. Withdrawal applies to future processing.
Website: stored choices
pp-consent-v2 · Local Storage on this website. Contains separate choices for Google Analytics, Google Ads and YouTube, a timestamp and notice version, so your choices are respected. Choices are valid for 180 days; a material change prompts a new choice. Previous YouTube permission does not authorise new analytics or advertising purposes. Change your choices through Cookie settings or delete website data to remove them. Form entries and chat histories are not stored there. With Analytics permission, pp-visit-attribution-v1 stores the first recorded entry page and source in session storage, without form fields. Attribution expires after 30 minutes without navigation or when the tab ends. Enquiries include the submission page and, where recorded with permission, entry page and source in the email to our office.
Google Analytics and Google Ads
No Analytics tag loads without Analytics permission. With permission, _ga and _ga_<identifier> may be stored on pink-panta.de for at most 180 days without renewal. No additional Ads tag is loaded; ad attribution uses the Analytics link and separate advertising permission. Cookie lifetime and server retention are different periods.
On withdrawal, the relevant accessible first-party cookies are removed. If a measurement tag was already loaded, the page reloads to stop active measurement. This does not retroactively delete data already received by Google. The privacy policy explains details and data-subject rights.
The Analytics account retains other event data for two months and user data, including associated key-event data, for 14 months; new user activity resets the user-identifier period. Aggregated reports are excluded from these limits. Ads attribution windows for the enquiry conversion are 90 days after an ad click and three days after an engaged video view. These are not cookie lifetimes. Automatic form, search, outbound-link and download measurement, personalised advertising and enhanced conversions are disabled for the website measurement described here.
YouTube: only after you allow it
Preview images load without a YouTube connection. Once you allow it, the embedded player connects to Google/YouTube, which may use cookies or other browser storage. Names and lifetimes depend on the player actually loaded and your Google settings. The youtube-nocookie.com domain does not guarantee that no device access occurs.
Withdrawing permission stops embedded videos currently running on this page. You can also delete storage already created by the third party through your browser. Your new choice applies to future visits.
AI advisor: session and security check
__Host-panta-session and __Host-panta-session-embed only associate the current advice session securely. They contain a random access key, not readable conversation content. The session expires after 20 minutes without active input, and in all cases 30 minutes after it begins. Active input renews it only within that maximum duration. The cookie lifetime is limited to the remaining session period. Both cookies use Secure and HttpOnly; direct access uses SameSite=Strict, while embedding uses SameSite=None and Partitioned. The partitioned variant supports embedding and is not an advertising cookie. Grounds are section 25(2)(2) TDDDG and the advice purposes in the privacy notice.
__Host-panta-access and, where applicable, __Host-panta-access-embed last 24 hours for PIN-protected test access. The public advisor currently requires no PIN. Access cookies do not authorise advertising or Analytics. Deleting a cookie alone does not delete server-side data; use the delete-details action. Already sent emails and separate security counters are unaffected.
Cloudflare Turnstile processes browser and security signals to prevent automated access. IP-related daily and time quotas are stored on the server as pseudonymous values; they are not marketing cookies and are not reset by deleting advice. The privacy notice explains purposes, retention and provider roles.
The lifetime of a session cookie is separate from deletion of the associated server data. If a browser deletion request does not arrive, expired sessions are currently cleaned up on the next API request. An independently scheduled cleanup service is not yet active. Deleting cookies does not remove delivered emails, Resend contacts or provider logs.
Other services and your rights
OpenAI, website email delivery and location checks involve data processing even when they do not set their own browser cookies. This cookie policy therefore does not replace the privacy policy, which explains purposes, recipients, retention periods, international transfers and your rights.
Google Search Console is used to analyse Google Search. Website verification alone sets no visitor cookies and therefore has no separate cookie switch. WordPress login cookies, Elementor storage and Google reCAPTCHA are not part of the new website build. Other processing is described in the privacy notice.
The AI advisor reads our approved service prices and pricing rules server-side through the Google Sheets API. A Google Cloud service account has read-only access to the private price spreadsheet. The browser does not load a Google Sheets widget and does not set additional Google cookies for this function.