Privacy settings

This lists every service that processes data on this site — who runs it, what it is for, where the data goes and what it leaves behind in your browser. You can consent to whole groups or pick individual services. Your decision applies to this browser and can be changed at any time via “Cookie settings” in the footer.

Sitzung und Formularschutz (Glowfish GmbH & Co. KG)

Always active

Show details Hide

So that the site knows it is still you across several pages, it creates a session: it holds your shopping cart, an order in progress and your sign-in. A second value protects every form against another site submitting something in your name. A third records the decision you made here — otherwise we would have to ask again on every visit. All three stay on our servers; nobody else reads them.

Provider: Glowfish GmbH & Co. KG
Processing: Our own servers in Germany. No disclosure to third parties.
Legal basis: Section 25(2) TDDDG — strictly necessary for operation; no consent required.
Privacy policy of the provider: www.glowfish.de/en/datenschutz

What is stored in your browser

Name	Purpose	Duration	Type
`glowfish-session`	Keeps the shopping cart, sign-in and form entries of one session together.	4 hours	Cookie (encrypted)
`XSRF-TOKEN`	Protects forms against forged requests.	4 hours	Cookie
`gf_einwilligung`	Stores the decision you make in this window, with a timestamp.	12 months	Cookie

Kartenzahlung (Stripe Payments Europe, Ltd., Dublin, Irland)

Always active

Show details Hide

If you choose credit card or a payment service when ordering, the payment window is loaded from Stripe. You enter your card details there directly — we never see them, only the outcome of the payment and a transaction number. Stripe checks that the payment is genuine and sets two cookies for that. This happens on the payment page only, and only once you have chosen this payment method — not when you simply visit the site.

Provider: Stripe Payments Europe, Ltd., Dublin, Irland
Processing: Stripe Payments Europe in Ireland; a transfer to the US parent company cannot be ruled out (EU-US Data Privacy Framework, plus standard contractual clauses).
Legal basis: Art. 6(1)(b) GDPR (processing your payment) and (f) (fraud prevention); Section 25(2) TDDDG.
Privacy policy of the provider: stripe.com/de/privacy

What is stored in your browser

Name	Purpose	Duration	Type
`__stripe_mid`	Recognises the device again to make card fraud harder.	12 months	Cookie set by Stripe
`__stripe_sid`	Links the payment in progress to the fraud check.	30 minutes	Cookie set by Stripe

Google Analytics 4 (Google Ireland Limited, Dublin, Irland)

Show details Hide

On our behalf, Google measures which pages are viewed, how long someone stays, which page they came from and which device they use. That shows us what people look for and where they get stuck. Your IP address is shortened before it is stored; location is determined at city level only. Advertising features are switched off: neither “Google Signals” nor personalised advertising is enabled, and we do not pass the data to advertising networks. If you do not consent, the Google script is not loaded at all — no connection is made.

Provider: Google Ireland Limited, Dublin, Irland
Processing: Google Ireland Limited in Ireland; a transfer to the United States cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, and the EU Commission’s standard contractual clauses apply in addition. Google deletes the data after 14 months.
Legal basis: Section 25(1) TDDDG together with Art. 6(1)(a) GDPR — your consent alone. You can withdraw it at any time with effect for the future.
Privacy policy of the provider: policies.google.com/privacy?hl=de

What is stored in your browser

Name	Purpose	Duration	Type
`_ga`	Distinguishes visitors from one another without naming them.	24 months	Cookie set by Google
`_ga_J67MNXR409`	Keeps the state of the current session (which page, how long).	24 months	Cookie set by Google

Google Ads (Google Ireland Limited, Dublin, Irland)

Show details Hide

We run adverts in Google Search. If you consent, Google records that you came here through one of our adverts and attributes a later order to that advert. That shows us which advert is worth its money and which one to switch off. An identifier is stored in your browser for this; your name, your address and the contents of your order are not part of it. If you do not consent, the Google script is not loaded at all — no connection is made, and the advert stays without feedback for us.

Provider: Google Ireland Limited, Dublin, Irland
Processing: Google Ireland Limited in Ireland; a transfer to the United States cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, and the EU Commission’s standard contractual clauses apply in addition. Google deletes the data after 14 months.
Legal basis: Section 25(1) TDDDG together with Art. 6(1)(a) GDPR — your consent alone. You can withdraw it at any time with effect for the future.
Privacy policy of the provider: policies.google.com/privacy?hl=de

What is stored in your browser

Name	Purpose	Duration	Type
`_gcl_au`	Records which advert someone came through, so that a later order can be attributed to it.	90 days	Cookie set by Google

Game server configuration