DE
ENCookie Policy
Version v1.0.1 | Last updated: 2026-08-30
This cookie policy explains what cookies and similar storage technologies Werkzeu.ge uses, why we use them, and how you can manage your preferences.
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They serve various purposes, from technical functionality to usage analysis. In addition, we use your browser's localStorage and sessionStorage - client-side storage mechanisms that, unlike cookies, are never sent to the server automatically.
2. Cookie Categories
2.1 Necessary (always active)
These cookies are essential for the basic functionality of the website. Without them, login and session management would not work. They cannot be deactivated.
| Name | Purpose | Type | Duration |
|---|---|---|---|
__Host-werkzeuge.session_token | Authentication & session management | Cookie (HTTPOnly, Secure, SameSite=Lax) | 14 days |
__Host-werkzeuge.signup-recovery, werkzeuge_oauth_signup_consent, and short-lived auth state | Secure continuation of registration and OAuth sign-in | Cookie (HTTPOnly, Secure, SameSite=Lax) | 10 minutes to no more than 24 hours |
wz_ref | Attributes an explicitly opened referral when registration occurs | Cookie (HTTPOnly, Secure, SameSite=Lax) | 30 days |
wz_aff | Attributes an explicitly opened affiliate link when registration occurs | Cookie (HTTPOnly, Secure, SameSite=Lax) | 30 days |
werkzeuge:cookie-consent | Your cookie preferences | Cookie and localStorage | 1 year |
Legal basis: § 25(2) No. 2 TDDDG (technical necessity); Art. 6(1)(f) GDPR (legitimate interest).
2.2 Requested Local Functions
When you use a tool, draft, note, or personal workspace and expect it to be remembered, that function stores data in your browser's localStorage or sessionStorage. These entries are necessary for the local function you expressly requested. Your browser does not automatically send localStorage content to us. Individual tools may also send data to the server when you expressly start a server function; our Privacy Policy describes that processing.
| Name | Purpose | Type | Duration |
|---|---|---|---|
werkzeuge:draft:* | Auto-saved form drafts | localStorage | 30 minutes |
werkzeuge:org-tool:v1:<account>:<organisation>:<tool>:* | Account- and organisation-separated local drafts for selected HR tools, including employee, time, shift, absence, onboarding, contract, and pay-comparison data | localStorage | Tool-specific: 30 minutes for Equal Pay Radar, up to 365 days for Cancellation Deadline Monitor, otherwise until deletion; deleted immediately on logout |
werkzeuge:preferences | Theme, wallpaper, desktop layout | localStorage | No expiry |
werkzeuge:workspace | Window positions and sizes | localStorage | No expiry |
werkzeuge:satellite-notice-dismissed:* | Remembers that you closed a product page's privacy and cookie notice for the current browser tab | sessionStorage | Until the browser tab is closed |
werkzeuge:amtsprofil:enc | Local cache of the Amtsprofil envelope already encrypted in the browser | localStorage | Until you delete the Amtsprofil or browser data |
werkzeuge:draft:passwort-tresor | Browser-local encrypted password vault | localStorage | Until you delete the vault or browser data |
werkzeuge:shell-mode, werkzeuge:visual-mode-chosen, werkzeuge:onboarding-done | Your interface choice and completed onboarding | Cookie | 1 year |
Device access: Section 25(2) No. 2 TDDDG where storage is necessary for the function you expressly requested. Depending on the function, subsequent processing is based in particular on Art. 6(1)(b) or (f) GDPR. You can delete local content in the relevant function or through your browser settings at any time.
2.3 Analytics
We use internally developed, self-hosted audience analytics on our servers in Germany. Only after analytics consent do we process page views, coarse device and country data, and daily-pseudonymized visitor counts. Product-funnel measurement may set the random wz_aid cookie for up to 180 days. It contains neither your IP address nor your name and is not used for advertising or cross-site tracking.
Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR (consent). Without consent this analytics processing does not take place and wz_aid is not set.
3. Managing Your Preferences
You can change your analytics consent at any time using the permanently available “Cookie settings” control at the bottom of the page. Withdrawing consent deletes the optional wz_aid cookie and prevents future analytics. We ask for your consent decision again after one year.
4. Third-Party Cookies
We do not use third-party advertising or social-media cookies. Payment providers (PayPal, Mollie, Stripe) may set their own cookies on their domains during the payment process - these are governed by their respective privacy policies.
5. Data Retention
| Storage | Duration |
|---|---|
| Session cookie | 14 days |
| Locale cookie | 1 year |
| Cookie consent | 1 year |
Referral attribution (wz_ref) | 30 days |
Affiliate attribution (wz_aff) | 30 days |
Optional analytics identifier (wz_aid) | 180 days or until withdrawal |
| Drafts | 30 minutes (automatic) |
| Preferences | No expiry (until you clear them) |
| Dismissed product-page notice | Until the browser tab is closed |
6. Contact
For questions about cookies or this policy, contact us at: info@werkzeu.ge