Note. English translation; the German version at
/de/legal/cookie-richtlinieprevails if texts differ.
1. Cookies and similar technologies
Cookies are small text files stored in your browser. Local storage is treated similarly under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act).
This policy covers all storage Storewy uses on storewy.com and brand shops (*.storewy.com).
2. How to change settings
- On first visit you see our cookie banner.
- At any time use Cookie settings in the footer to change or withdraw your choice.
- You may also delete cookies in your browser.
Withdrawal must be as easy as giving consent (Art. 7(3) GDPR).
3. Strictly necessary storage (no consent)
| Name / key | Type | Purpose | Duration |
|---|---|---|---|
storewy.consent | Cookie | Stores your choice (necessary only / accept analytics) | 180 days |
storewy.locale | Cookie (.storewy.com) | Remembers language | 1 year |
storewy:cart:{brand} | Local storage | Shopping cart | until you clear it |
storewy:wishlist:{brand} | Local storage | Wishlist | until you clear it |
storewy.support.threadId | Local storage | Resume support chat | until you clear it |
sw_preview | Cookie | Admin draft preview only (?preview=draft) | 30 minutes |
Processing legal basis: Art. 6(1)(f) GDPR (shop operation).
3a. Anonymous reach measurement (server-side, no cookies)
Even if you choose “Necessary only”, we continue to count anonymous visits per brand shop — exclusively server-side on our own infrastructure (Google Cloud Run, EU). This lets us measure how many people actually reach our shops. The count runs independently of your decision on § 4 (analytics).
Nothing is stored on or read from your device (§ 25 TDDDG not triggered). We use only data your browser transmits with every request (IP address, user agent):
- Our server derives a cryptographic hash from IP + user agent using a daily-rotating key and discards the raw IP immediately — it is never stored or shared. The hash only supports counting unique visits within a single day; recognition across days, or identifying a person, is not possible.
- The user agent is reduced to a non-personal bot flag (yes/no) and likewise discarded.
- Only the hash, the page type and the shop are sent to our analytics provider PostHog (EU) — no IP, no user agent, no person profile.
Legal basis: Art. 6(1)(f) GDPR (aggregated reach measurement). § 25 TDDDG is not triggered, as no information is stored on or read from your device.
3a.1 Objection (Art. 21 GDPR)
You can object to this reach measurement two ways:
- Self-service in the cookie banner via the “Disable anonymous reach measurement” button (or in Cookie settings). We then set the cookie
storewy.reach_optout=1and stop the server-side count immediately and permanently for your browser. - By email to contact@storewy.com.
We also honour the Global Privacy Control signal (Sec-GPC request header): if your browser sends it, we skip reach measurement entirely — regardless of your cookie choice.
Hash retention in PostHog EU: project default 30 days; the daily salt rotation makes the hash unlinkable after 24 hours at the latest.
4. Analytics — consent only
Only if you choose “Accept analytics” we load PostHog (posthog-js, EU host eu.i.posthog.com, via /ingest).
| Name | Type | Purpose | Duration |
|---|---|---|---|
storewy.ph_anon_id | First-party cookie | Pseudonymous analytics id | 1 year |
ph_* (PostHog) | Cookie / local storage | PostHog persistence per SDK | per PostHog |
Processing: page views, conversion events, masked autocapture. Session recording is active after consent — inputs and text content are masked automatically (maskAllInputs, mask_all_text).
Legal basis: Art. 6(1)(a) GDPR; § 25(1) TDDDG.
Withdraw: Cookie settings → Necessary only — we remove storewy.ph_anon_id and stop PostHog. To additionally disable reach measurement under § 3a, use the toggle there.
Details: Privacy Policy.
5. Third parties at checkout
Stripe Checkout may set its own cookies when you pay. Controlled by Stripe, not Storewy.
6. Consent records
We log your banner choice (time, banner version, selection) for accountability (Art. 7(1) GDPR).
7. Contact
Cookie questions: contact@storewy.com