Cookie Policy
Version 2026-09-10. Valid from 10 September 2026.
Information on the use of cookies under Directive 2002/58/EC (ePrivacy), Sec. 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Regulation (EU) 2016/679 (GDPR).
1. Controller
Orbita Media GmbH
Ericusspitze 4
20457 Hamburg
Germany
E-mail: datenschutz@orbita-media.de
The full provider information is in the Legal Notice. How we process personal data in general is described in the Privacy Policy.
2. What cookies are
Cookies are small text files that a website stores on your device. They let the site recognise the device again and remember settings or previous actions. Session cookies are deleted when the browser is closed; persistent cookies stay for a defined period. First party cookies are set by the site you are visiting, third party cookies by another domain.
This policy also covers comparable techniques that store or read information on your device, such as local storage.
3. The cookies we use
3.1 Strictly necessary
These are needed for the platform to work at all and are set without consent under Sec. 25(2) no. 2 TDDDG.
| Purpose | What it does | Duration | Party |
|---|---|---|---|
| Session | Keeps you logged in after you sign in | up to 30 days | first |
| CSRF protection | Prevents a third party site from submitting a form in your name | session | first |
| Cookie banner choice | Remembers the choice you made in the banner, so we do not ask again | 12 months | first |
| Bot protection | Cloudflare Turnstile, tells humans from automated login attempts | session | third |
Turning these off breaks the login and the ordering process.
3.2 Affiliate tracking, consent required
| Purpose | What it does | Duration | Party |
|---|---|---|---|
| Referral attribution | Records which affiliate link you arrived through, so a registration can be attributed to that affiliate | 90 days | first |
This cookie is only set if you agree in the cookie banner. If you do not agree, the attribution only happens when you enter a referral code yourself during registration. Legal basis: Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG.
3.3 Analytics, advertising and profiling
We do not currently use analytics cookies, advertising cookies or tracking pixels, and we do not use retargeting. If that changes, this policy will be updated and your consent will be collected in the banner before any such cookie is set.
The names of the individual cookies can change with the technical configuration of the platform. The purposes listed above are what matters and are what we keep up to date.
4. Legal basis
- Strictly necessary cookies: Sec. 25(2) no. 2 TDDDG, and Art. 6(1)(f) GDPR for any personal data processed with them.
- All other cookies: your consent, Sec. 25(1) TDDDG and Art. 6(1)(a) GDPR.
5. How to control cookies
5.1 In the banner
The banner tells you what is set; it does not ask you to choose, because the platform sets only cookies that are strictly necessary to run it, and those need no consent. There is therefore no settings page for them, and none is missing.
The one exception is the referral cookie of section 3.2. You set it yourself by following a referral link, and you remove it by deleting it in your browser as described below. Withdrawing it does not affect what happened before.
5.2 In the browser
You can also delete cookies or refuse them in your browser settings:
- Google Chrome: `chrome://settings/cookies`
- Mozilla Firefox: `about:preferences#privacy`
- Safari: Settings, then Privacy
- Microsoft Edge: `edge://settings/privacy`
If you block the strictly necessary cookies, the platform will not work properly, in particular the login and the session.
6. Third countries
Cloudflare Turnstile is provided by a company with servers in the United States. The transfer takes place under the adequacy decision for the EU-US Data Privacy Framework or under the standard contractual clauses of the European Commission. See clause 7 of the Privacy Policy.
7. Your rights
You have the rights set out in clause 9 of the Privacy Policy, in particular access, erasure, restriction, objection and the withdrawal of consent.
8. Changes
We update this policy whenever we add or remove a cookie category. The current version is always available at /legal/cookie-policy.