Cookie Policy
Version v1.0.3 | Last updated: 2026-10-11
This cookie policy explains what cookies and similar storage technologies Werkzeu.ge uses, why we use them, and how you can manage your preferences.
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They serve various purposes, from technical functionality to usage analysis. In addition, we use your browser's localStorage and sessionStorage - client-side storage mechanisms that, unlike cookies, are never sent to the server automatically.
2. Cookie Categories
2.1 Necessary (always active)
These cookies are essential for the basic functionality of the website. Without them, login and session management would not work. They cannot be deactivated.
| Name | Purpose | Type | Duration |
|---|---|---|---|
__Host-werkzeuge.session_token | Authentication & session management | Cookie (HTTPOnly, Secure, SameSite=Lax) | 14 days |
__Host-werkzeuge.signup-recovery, werkzeuge_oauth_signup_consent, and short-lived auth state | Secure continuation of registration and OAuth sign-in | Cookie (HTTPOnly, Secure, SameSite=Lax) | 10 minutes to no more than 24 hours |
wz_ref | Signed attribution of an explicitly opened referral, including its fixed product destination, language and campaign, when registration occurs | Cookie (HTTPOnly, Secure, SameSite=Lax) | 30 days |
wz_aff | Attributes an explicitly opened affiliate link when registration occurs | Cookie (HTTPOnly, Secure, SameSite=Lax) | 30 days |
werkzeuge-produkt-hinweis | Remembers on werkzeu.ge when the “Zur App” hints on our product sites were last set or removed after you signed in (only a point in time, no identifier) | Cookie (HTTPOnly, Secure, SameSite=Lax) | 14 days; deleted on logout |
wz_angemeldet | On our product sites fakturen.de, personarium.de, projektspiegel.de, formularamt.de, werktafel.de, and amtsprofil.de: shows “Zur App” instead of “Kostenlos starten” when you are signed in on werkzeu.ge. Holds only the value 1, no identifier | Cookie (Secure, SameSite=Lax, readable by the page) | 14 days; deleted on logout |
werkzeuge:cookie-consent | Your cookie preferences | Cookie and localStorage | 1 year |
Legal basis: § 25(2) No. 2 TDDDG (technical necessity); Art. 6(1)(f) GDPR (legitimate interest).
2.2 Requested Local Functions
When you use a tool, draft, note, or personal workspace and expect it to be remembered, that function stores data in your browser's localStorage or sessionStorage. These entries are necessary for the local function you expressly requested. Your browser does not automatically send localStorage content to us. When you are signed in, some tools keep their content in step with your account (Section 4.6 of the Privacy Policy); as a guest, it stays in your browser. Individual tools may also send data to the server when you expressly start a server function; our Privacy Policy describes that processing.
| Name | Purpose | Type | Duration |
|---|---|---|---|
werkzeuge:draft:* | Auto-saved form drafts | localStorage | 30 minutes |
werkzeuge:org-tool:v1:<account>:<organisation>:<tool>:* | Account- and organisation-separated local drafts for selected HR tools, including employee, time, shift, absence, onboarding, contract, and pay-comparison data | localStorage | Tool-specific: 30 minutes for Equal Pay Radar, otherwise until deletion; deleted immediately on logout. The Cancellation Deadline Monitor and the HR tools now part of Personarium write no new entries; existing ones can be exported and deleted |
werkzeuge:preferences | Theme, wallpaper, desktop layout | localStorage | No expiry |
werkzeuge:workspace | Window positions and sizes | localStorage | No expiry |
werkzeuge:satellite-notice-dismissed:* | Remembers that you closed a product page's privacy and cookie notice for the current browser tab | sessionStorage | Until the browser tab is closed |
werkzeuge:amtsprofil:enc | Local cache of the Amtsprofil envelope already encrypted in the browser | localStorage | Until you delete the Amtsprofil or browser data |
werkzeuge:vault:passwort-tresor:<account> | Local copy of the Passwort-Tresor encrypted in your browser; the copy in your account is encrypted the same way | localStorage | Until you delete the vault or browser data; kept on logout |
werkzeuge:account-store:meta:* | Sync state of the tool data in your account (version and checksum), so nothing is uploaded twice or overwritten | localStorage | Until logout |
| Browser storage of the address nbg1.your-objectstorage.com | Save games and settings of some games (Section 3.2 of the Privacy Policy) | IndexedDB | Until you delete your browser data |
werkzeuge:shell-mode, werkzeuge:visual-mode-chosen, werkzeuge:onboarding-done | Your interface choice and completed onboarding | Cookie | 1 year |
Device access: Section 25(2) No. 2 TDDDG where storage is necessary for the function you expressly requested. Depending on the function, subsequent processing is based in particular on Art. 6(1)(b) or (f) GDPR. You can delete local content in the relevant function or through your browser settings at any time.
2.3 Analytics
We use internally developed, self-hosted audience measurement on our servers in Germany. It has two parts.
Count without cookies (no consent): Every page view is counted without storing anything in your browser. The only thing read is the cookie choice you already saved, so we can honour “Only necessary”. From the IP address and user agent we derive, in memory, the country, device category, and operating system plus a pseudonym that changes monthly. The IP address is not stored, the pseudonym stays in our cache for no more than 40 days after the end of the month, and only numbers reach the database. Because your device is not accessed, no consent under Section 25 TDDDG is needed; the legal basis is Art. 6(1)(f) GDPR. If you choose “Necessary only” in the cookie banner, or switch analytics off later, we no longer count your page views. You can also object through the “Global Privacy Control” (GPC) browser signal: we do not count page views that carry it. Details are in Section 6 of the Privacy Policy.
Optional analytics (consent only): Only with your analytics consent does a small script confirm that a page view comes from a human, and product-funnel measurement may set the random wz_aid cookie for up to 180 days. It contains neither your IP address nor your name and is not used for advertising or cross-site tracking.
Legal basis of the optional analytics: Section 25(1) TDDDG and Art. 6(1)(a) GDPR (consent). Without consent this optional analytics does not run and wz_aid is not set.
3. Managing Your Preferences
You can change your analytics consent at any time using the permanently available “Cookie settings” control at the bottom of the page. Withdrawing consent deletes the optional wz_aid cookie and prevents future optional analytics. This also ends the cookieless count from Section 2.3; you can also object to it through your browser's GPC signal. We ask for your consent decision again after one year.
4. Third-Party Cookies
We do not use third-party advertising or social-media cookies. Payment providers (PayPal, Mollie, Stripe) may set their own cookies on their domains during the payment process - these are governed by their respective privacy policies.
5. Data Retention
| Storage | Duration |
|---|---|
| Session cookie | 14 days |
“Zur App” hints (werkzeuge-produkt-hinweis, wz_angemeldet) | 14 days; deleted on logout |
| Cookie consent | 1 year |
Referral attribution (wz_ref) | 30 days |
Affiliate attribution (wz_aff) | 30 days |
Optional analytics identifier (wz_aid) | 180 days or until withdrawal |
| Drafts | 30 minutes (automatic) |
| Preferences | No expiry (until you clear them) |
| Dismissed product-page notice | Until the browser tab is closed |
6. Contact
For questions about cookies or this policy, contact us at: info@werkzeu.ge