Cookie Policy
for the “Tapper” app
Last updated: February 2026
1. General Information
This Cookie Policy explains how cookies and similar technologies (in particular local storage) are used on the Tapper website and web app.
It supplements our Privacy Policy.
2. Legal Basis
Where information is stored on or accessed from your device, this is done in accordance with Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
- Necessary technologies are used based on Section 25(2) TDDDG.
- Optional technologies (e.g. analytics) are only used with your consent under Section 25(1) TDDDG.
If personal data is processed afterwards, this is done under the GDPR, in particular:
- Art. 6(1)(a) GDPR (consent),
- Art. 6(1)(f) GDPR (legitimate interests, where applicable).
3. What are cookies and similar technologies?
Cookies are small text files stored by your browser on your device. They can be used, for example, for language settings, security functions, or statistics.
We also use local storage, which is a browser-based storage mechanism similar to cookies.
4. Categories
4.1 Necessary
These technologies are required for secure operation and core functionality and cannot be disabled.
4.2 Preferences
These technologies store settings (e.g. display options) to improve convenience.
4.3 Analytics
These technologies help us understand how the website/app is used so we can improve content and features.
4.4 Marketing
This category is technically available in the consent banner. As of now, we do not actively use our own marketing/advertising trackers.
5. Technologies Used (as of February 2026)
| Name / Key | Type | Provider | Category | Purpose | Retention |
|---|---|---|---|---|---|
csrfSecret | Cookie | Tapper | Necessary | Protection against CSRF attacks | Session / technically required |
lang | Cookie | Tapper | Necessary | Stores language preference for website/app | up to 1 year |
theme | Cookie | Tapper | Preferences | Stores selected appearance (light/dark/system) | up to 1 year |
sidebar:state | Cookie | Tapper | Preferences | Stores sidebar state | up to 7 days |
cookie_consent_status | Local Storage | Tapper | Necessary | Stores your consent choice | up to 6 months (then re-consent) |
_ga, _ga_* (if enabled) | Cookie | Google Ireland Limited / Google LLC | Analytics | Reach measurement and usage analytics via Google Analytics | depending on Google configuration, typically up to 2 years |
| Cookies in Stripe checkout/portal (e.g. functional and security-related) | Cookie | Stripe | Necessary / functional on Stripe pages | Secure payment handling and session control on Stripe pages | per Stripe policy |
Note on Supabase: additional technically necessary authentication/session cookies may be set for auth functionality.
6. Google Analytics
If you consent to the “Analytics” category, Google Analytics (GA4) is enabled.
In this context, data transfers to Google servers in the United States cannot be excluded. For such transfers, Google provides relevant safeguards and data protection information.
You can withdraw your consent at any time with effect for the future.
7. Consent, Withdrawal, and Re-Consent
On your first visit, we ask for your choice via the cookie banner.
- Optional categories are disabled by default.
- You can choose “Accept all”, “Reject all”, or save granular preferences.
- You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.
Your choice is stored locally and requested again after a maximum of 6 months.
8. Browser Settings
You can also delete or block cookies via your browser settings. Please note that this may limit website/app functionality.
9. Changes to This Cookie Policy
We may update this Cookie Policy if legal, technical, or organizational requirements change.
The current version published on the website applies.