# Cookie Policy – Zcratch

Quelle / Source: https://zcratch.com/en/pages/cookie-policy

---

Last updated: August 2026

This cookie policy explains which cookies and comparable storage technologies we use. Further details are in our [privacy policy](/en/pages/data-protection). In case of doubt, the German version prevails.

## What are cookies?

Cookies are small text files a website stores in your browser. `localStorage` and `sessionStorage` work similarly. Under Sec. 25(1) TDDDG we may only store or read such information with your consent – except for technologies that are strictly necessary for the service you requested (Sec. 25(2) no. 2 TDDDG).

## Your choice

On your first visit you can choose **Accept all**, **Reject all** or select individual categories. You can change or withdraw your decision at any time via **Cookie settings** in the footer. Consent expires automatically after six months.

## Category 1: Necessary (always active)

| Name | Provider | Purpose | Type / lifetime |
| --- | --- | --- | --- |
| `zc_consent_v2` | Zcratch | Stores your privacy choice incl. timestamp as evidence | localStorage / 6 months |
| `zc_sid` | Zcratch | Random session ID for anonymous reach measurement | sessionStorage / until tab closes |
| `zc_attr` | Zcratch | First-touch attribution (referrer, UTM) within the session | sessionStorage / until tab closes |
| `shopify-cart` | Zcratch | Contents of your cart, checkout reference and applied discount code | localStorage / until cleared |
| `zcratch_voter_id` | Zcratch | Random identifier so a review can only be marked helpful once | localStorage / persistent until you delete it |
| `cart`, `_secure_session_id`, `_shopify_*` | Shopify | Cart, checkout, fraud prevention | Cookie / session up to 2 years |
| `__cf_bm`, `cf_clearance` | Cloudflare | Bot detection and delivery security | Cookie / 30 minutes to 1 year |

Legal basis: Sec. 25(2) no. 2 TDDDG and Art. 6(1)(b) and (f) GDPR.

## Category 2: Statistics (consent only)

| Name | Provider | Purpose | Type / lifetime |
| --- | --- | --- | --- |
| `_ga` | Google Ireland Ltd. | Distinguishes users in Google Analytics 4 | Cookie / 2 years |
| `_ga_<ID>` | Google Ireland Ltd. | Session state in GA4 | Cookie / 2 years |

Retention of GA4 reporting data: up to 14 months. Legal basis: Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG.

## Category 3: Marketing (consent only)

| Name | Provider | Purpose | Type / lifetime |
| --- | --- | --- | --- |
| `_gcl_au` | Google Ireland Ltd. | Conversion measurement for Google Ads | Cookie / 90 days |
| `IDE`, `test_cookie` | Google Ireland Ltd. | Ad delivery and remarketing | Cookie / up to 13 months |

Legal basis: Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG.

## Embedded content and fonts

The fonts "Montserrat" and "Poppins" are served exclusively from our own server (self-hosted). No connection to Google servers is made, no cookies are set and your IP address is not transmitted to third parties.

We embed video guides from YouTube in privacy-enhanced mode (`youtube-nocookie.com`). Playing a video may cause Google to set cookies or comparable identifiers. See section 11 of the [privacy policy](/en/pages/data-protection).

## Third-country transfer

With Google services, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework and EU standard contractual clauses apply in addition. Access by US authorities cannot be fully excluded.

## Deleting cookies in your browser

Independently of our banner you can inspect, block or delete cookies in your browser settings at any time. If necessary cookies are blocked, the cart and checkout may stop working.