This Cookie Policy describes the cookies and comparable client-side storage technologies (collectively, "Cookies") that the operator of this Pluma instance (the "Service") uses, the legal bases on which they are placed, and the means by which you can manage your choices. It supplements the Privacy Policy, which governs the processing of any personal data collected through such Cookies.
1. Definitions and legal framework
A Cookie is a small text file stored on your terminal equipment when you access a website. "Comparable technologies" include local storage, session storage, and similar browser-based mechanisms. The storage of, and access to, information on your terminal equipment is governed by § 25 of the German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz, TTDSG), which implements Article 5(3) of Directive 2002/58/EC. Any subsequent processing of personal data collected by such means is governed by Regulation (EU) 2016/679 ("GDPR").
2. Strictly necessary Cookies (TTDSG § 25 (2) Nr. 2)
The Cookies listed below are strictly necessary to provide the Service requested by you. They are placed on the legal basis of § 25 (2) Nr. 2 TTDSG and do not require your consent. Any further processing of personal data they enable is based on Article 6 (1) (b) GDPR (performance of contract or pre-contractual measures) or Article 6 (1) (f) GDPR (legitimate interests in maintaining a functional, secure Service).
| Identifier | Purpose | Type | Retention |
|---|---|---|---|
connect.sid | Authenticates a logged-in session. | HTTP cookie (HttpOnly, Secure, SameSite=Lax) | 7 days of inactivity |
pluma_lang | Stores the language preference selected by the user. | HTTP cookie | 12 months |
pluma_consent_v1 | Records your response to the consent banner so it is not displayed repeatedly. | localStorage entry | 12 months or until cleared by you |
pluma_theme | Stores the light/dark theme preference selected by the user. | localStorage entry | Until cleared by you |
3. Optional Cookies (TTDSG § 25 (1))
The Service does not currently place any analytics, marketing, or third-party tracking Cookies. Should the operator introduce such Cookies in the future, they will be listed in this section with provider, purpose, retention, and any onward data transfer, and they will be placed only after your prior, freely given, specific, informed, and unambiguous consent within the meaning of Article 4 (11) GDPR.
4. Managing and withdrawing consent
You may manage Cookie choices at any time using the controls provided in the consent banner. Withdrawing consent is as straightforward as granting it and does not affect the lawfulness of any processing carried out on the basis of your prior consent.
Most web browsers also permit you to block, delete, or be notified about Cookies through their settings menu. Disabling strictly necessary Cookies will impair core functions of the Service (for example, signing out the current session).
Where your browser transmits a Global Privacy Control or Do-Not-Track signal, the Service interprets that signal as a refusal of consent for any optional Cookies. Strictly necessary Cookies remain placed as permitted by TTDSG § 25 (2) Nr. 2.
5. International transfers
All Cookies listed in section 2 are placed by, and read only by, the Service infrastructure operated within the European Union. No personal data collected through them is transferred to a third country.
6. Your rights
Your statutory rights under Articles 15 to 22 GDPR, including the right to lodge a complaint with a supervisory authority under Article 77 GDPR, are described in detail in the Privacy Policy.
7. Changes to this Policy
This Policy may be updated to reflect changes to the Cookies used or to applicable law. The current version, identified by the version number and effective date stated at the top of this page, supersedes all earlier versions.
8. Contact
For questions relating to this Cookie Policy, please contact the data protection contact of the operator: [email protected]. The operator's full legal identification is set out in the Impressum.