Cookie Policy
Cookies and browser storage
Last updated: 26 October 2026
This policy explains browser storage and analytics on the Bandpey GmbH marketing website. Read it together with our Privacy policy. Product websites have their own notices and consent choices.
Your choice comes first
Both “Accept Essentials” and “Accept All” enable Google Analytics 4 and Microsoft Clarity, including heatmaps and session replays. The Essentials preset includes analytics. To continue with necessary storage without analytics, open Manage Preferences, leave Analytics off and select Confirm my Choices. Neither analytics service loads before a choice enabling it. Continuing to browse does not give consent. Advertising consent remains denied in every preset.
The notice blocks browser interaction until you save a choice using either acceptance button or Manage Preferences. Confirming a necessary-only choice also unlocks the website. Privacy, cookie and imprint pages remain accessible without a choice. Choose “Cookie settings” in the footer to reopen Manage Preferences. Turning Analytics off and confirming unloads the trackers and removes accessible first-party Google Analytics and Clarity cookies. This cannot erase data already collected or cookies on another provider’s domain; you can remove third-party cookies using your browser controls.
Your choice is stored for 365 days. After that, the website asks again. Earlier choices saved under ep_essential_consent_v1 do not count as consent to this analytics setup. Clearing browser storage also resets your choice.
Cookies and storage used by this website
| Name / storage | Provider | Purpose | Lifetime | Category |
|---|---|---|---|---|
| analytics_consent_v1 · local storage | Bandpey website | Remembers your analytics choice and its date | 365 days; removed/reset through browser controls | Necessary preference |
| _ga · first-party cookie | Google Analytics | Distinguishes visitors | Default 2 years; browser limits can shorten it | Analytics; opt-in only |
| _ga_CNJ00DGR5D · first-party cookie | Google Analytics | Persists session state | Default 2 years; browser limits can shorten it | Analytics; opt-in only |
| _clck · first-party cookie | Microsoft Clarity | Site-specific visitor ID and preferences | Normally 1 year | Analytics; opt-in only |
| _clsk · first-party cookie | Microsoft Clarity | Groups page views into a session replay | Normally 1 day | Analytics; opt-in only |
| CLID, MUID, MR, SM, ANONCHK · third-party cookies | Microsoft · clarity.ms / bing.com | Browser recognition, identifier synchronization and preferences; use depends on consent, provider settings and browser restrictions | Provider-dependent: session cookies through persistent lifetimes of up to 13 months | May accompany consent-based Clarity; advertising permission remains denied |
| theme-mode, mui-color-scheme-light, mui-color-scheme-dark, sass-able-react-mui-next-ts · local storage | Bandpey website | Display mode and interface preferences | Until changed or removed from browser storage | Interface preference |
| bandpey:shirdal:messages:v1:shirdal-local-v1, bandpey:shirdal:greeting:v1 · local storage | Bandpey assistant | Keeps the conversation and greeting on this browser for the assistant feature; not analytics | Until reset or removed from browser storage; stored conversation is capped | Requested assistant functionality |
| _cltk · session storage (where used) | Microsoft Clarity | Associates page activity within a browser tab | Browser tab/session | Analytics; opt-in only |
The table describes expected/default storage, not a promise that every listed cookie will appear. Browser restrictions can shorten retention or block cookies. The Microsoft cookies listed are provider-controlled and may not be set with advertising permission denied. We do not install Facebook, X, Instagram or LinkedIn advertising/analytics pixels; ordinary social links are external links.
What the analytics services do
GA4 measures website use. Clarity creates heatmaps and session replays. We record successful contact enquiries, contact/booking CTA clicks and opening Ask Bandpey using fixed event names and categories. Contact details and messages are not event parameters. Inputs, contact forms and the assistant are masked in replays. The services can process usage data in the USA. Purposes, retention, providers, the GA4–Clarity reporting connection and transfer information are explained in section 6 and section 11 of our Privacy policy.
Requested features and security
Microsoft Bookings is a separate service for calendar reservations. Opening its calendar or using an embedded calendar connects your browser to Microsoft and may use Microsoft storage under that service’s notice. Analytics consent does not book an appointment or change booking confirmations. Contact enquiries and the assistant use Cloudflare Turnstile to protect against abuse; the verification service processes technical/browser information separately from analytics. Our hosting and security services may use necessary cookies or tokens when protecting the site.
Legal basis and controls
Optional analytics relies on consent under Article 6(1)(a) GDPR and section 25(1) TDDDG for device storage/access. Strictly necessary storage for a service you request may rely on section 25(2) TDDDG; personal-data processing still requires an appropriate GDPR basis. You may withdraw analytics consent at any time using Cookie settings, without affecting processing before withdrawal.
For questions or to exercise your rights, contact direct@bandpey.com. Further provider information: Google Analytics cookies, Clarity cookies and the Microsoft Privacy Statement.