Cookie Policy – Zcratch
Last updated: August 2026
This cookie policy explains which cookies and comparable storage technologies we use. Further details are in our privacy policy. In case of doubt, the German version prevails.
What are cookies?
Cookies are small text files a website stores in your browser. localStorage and sessionStorage work similarly. Under Sec. 25(1) TDDDG we may only store or read such information with your consent – except for technologies that are strictly necessary for the service you requested (Sec. 25(2) no. 2 TDDDG).
Your choice
On your first visit you can choose Accept all, Reject all or select individual categories. You can change or withdraw your decision at any time via Cookie settings in the footer. Consent expires automatically after six months.
Category 1: Necessary (always active)
| Name | Provider | Purpose | Type / lifetime |
|---|---|---|---|
zc_consent_v2 | Zcratch | Stores your privacy choice incl. timestamp as evidence | localStorage / 6 months |
zc_sid | Zcratch | Random session ID for anonymous reach measurement | sessionStorage / until tab closes |
zc_attr | Zcratch | First-touch attribution (referrer, UTM) within the session | sessionStorage / until tab closes |
zc_cart | Zcratch | Contents of your cart | localStorage / until cleared |
cart, _secure_session_id, _shopify_* | Shopify | Cart, checkout, fraud prevention | Cookie / session up to 2 years |
__cf_bm, cf_clearance | Cloudflare | Bot detection and delivery security | Cookie / 30 minutes to 1 year |
Legal basis: Sec. 25(2) no. 2 TDDDG and Art. 6(1)(b) and (f) GDPR.
Category 2: Statistics (consent only)
| Name | Provider | Purpose | Type / lifetime |
|---|---|---|---|
_ga | Google Ireland Ltd. | Distinguishes users in Google Analytics 4 | Cookie / 2 years |
_ga_<ID> | Google Ireland Ltd. | Session state in GA4 | Cookie / 2 years |
Retention of GA4 reporting data: up to 14 months. Legal basis: Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG.
Category 3: Marketing (consent only)
| Name | Provider | Purpose | Type / lifetime |
|---|---|---|---|
_gcl_au | Google Ireland Ltd. | Conversion measurement for Google Ads | Cookie / 90 days |
IDE, test_cookie | Google Ireland Ltd. | Ad delivery and remarketing | Cookie / up to 13 months |
Legal basis: Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG.
Embedded content
We embed video guides from YouTube in privacy-enhanced mode (youtube-nocookie.com). Playing a video may cause Google to set cookies or comparable identifiers. See section 11 of the privacy policy.
Third-country transfer
With Google services, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework and EU standard contractual clauses apply in addition. Access by US authorities cannot be fully excluded.
Deleting cookies in your browser
Independently of our banner you can inspect, block or delete cookies in your browser settings at any time. If necessary cookies are blocked, the cart and checkout may stop working.