Cookie Policy

This policy explains how heureka uses cookies and similar browser technologies on this website. Optional services remain disabled until you make an active choice. We do not use advertising cookies in this consent setup.

Your choice

On your first visit, you can accept all available categories, continue with necessary technologies only, or review the individual setting. Optional statistics and diagnostics are not preselected.

Your decision is stored for 180 days in a first-party consent cookie. It contains the selected categories, the consent-version number, and the time of your decision. It does not contain a user or advertising identifier.

Necessary technologies

These technologies are required to provide functions you explicitly request or to operate the website securely. They cannot be disabled through the consent dialog.

Privacy choice

heureka_cookie_consent_v1 stores your current selection so the website can respect it on subsequent page views. The cookie expires after 180 days unless you delete it earlier.

Language selection

i18n_redirected remembers whether you selected the German or English website. Without it, the preferred language may need to be determined again.

Form security with Cloudflare Turnstile

Public forms use Cloudflare Turnstile to detect automated abuse. When a security challenge is required, Cloudflare may use technically necessary browser storage such as cf_clearance. This processing is limited to protecting the requested form and website service.

Optional statistics and diagnostics

The following services start only after you consent to Statistics & diagnostics.

Sentry

Sentry helps us identify application errors and performance problems. Before consent, client events, performance transactions, logs, session tracking, and breadcrumbs are not transmitted. After consent, technical information such as the affected page, browser and device details, error context, timing data, and the IP address required for network communication may be processed. Default transmission of personal identifiers remains disabled.

Leadfeeder by Dealfront

Leadfeeder helps us understand which companies visit the website and which content is relevant to them. After consent, the service may process the IP address, visited pages, timestamps, visit duration, browser information, device information, and referring source. Where technically possible, these signals are associated with a company rather than an individual person.

Depending on the Leadfeeder configuration, the following browser entries may be used:

• _lfa: identifies repeat visits from the same browser; regular lifetime of up to one year
• _lfa_consent: records Leadfeeder's cookie permission where its consent mode is used; lifetime of up to two years
• _lfa_test_cookie_stored: checks whether browser cookies can be stored and is removed immediately after the check
• _lfa_expiry: local-storage value supporting the expiry of the Leadfeeder browser identifier; lifetime of up to two years

Legal basis

Access to or storage on your device for strictly necessary functions is based on Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The related processing of personal data is based on Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the requested service and security purpose.

Optional statistics and diagnostics are based on your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Change or withdraw your choice

After making a decision, you can reopen Privacy settings at any time from the legal links in the website footer. There you can grant, change, or withdraw optional consent.

When you withdraw statistics and diagnostics consent, heureka removes known Leadfeeder cookies and related browser-storage entries and reloads the current page so optional trackers remain inactive. The withdrawal applies to future processing and does not affect processing that was lawful before withdrawal.

You can also delete cookies and browser storage through your browser settings. Blocking necessary storage may prevent language selection, form protection, or consent preferences from working reliably.