Cookie Policy
Information about the use of cookies on our website
What are cookies?
Cookies are small text files that websites store on your computer or mobile device when you visit them. They are commonly used to make websites work, or work more efficiently, and to report information back to the site owners.
What types of cookies do we use?
Necessary cookies
These cookies are essential for the website to function properly.
- Session management
- Security features
- Core website functionality
- Login status
Legal basis: Art. 6(1)(f) GDPR, § 25(2) TDDDG
Analytics cookies
These cookies help us understand how visitors interact with the website.
- Visitor statistics
- Page views
- Time on page
- Popular content
Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG — withdrawable at any time
Marketing cookies
These cookies are used to show you relevant advertising.
- Personalised advertising
- Retargeting
- Conversion tracking
- Advertising audiences on Facebook and Instagram
Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG — withdrawable at any time
Third-party cookies
We embed third-party services. Analytics and marketing services only load once you consent; embedded content only loads when you click it or have chosen “Accept all”; necessary services are required for sign-in and payment. Which group applies is noted with each entry:
- Google Tag Manager (server-side, gtm.lumeus-app.de): Loads Google Analytics 4 and Google Ads as soon as you consent to analytics or marketing cookies. With analytics consent, our server container sets the FPID cookie (an identifier for Google Analytics, up to 2 years); after a withdrawal the website cannot delete it itself, but you can remove it in your browser settings. For a category you have not consented to, these services set no cookies but do send cookieless measurement signals (e.g. time, the page viewed including any ad click ID in its address, device type, and for orders and sign-ups details such as order number, amount and product) to Google.
- Meta Pixel and Meta Conversions API (Facebook/Instagram): To measure ad performance. When you start an order, make a purchase or sign up (newsletter, webinar), our server also sends these events to Meta, for purchases and sign-ups with hashed contact details (e.g. your email address) — both only if you consent to marketing cookies
- Klaviyo: Sends our newsletter (only if you signed up for it) and course-related emails after a purchase. Klaviyo loads no script and sets no cookies on our website.
- YouTube / Vimeo: For embedded videos — loads only after you click, or after “Accept all”
- Calendly / Typeform: For appointment booking and embedded forms — loads only after you click, or after “Accept all”
- Spotify: For embedded podcast episodes — loads only after you click, or after “Accept all”
- Payment providers (Stripe): For secure payment processing and fraud prevention (including hCaptcha as Stripe’s sub-processor). Loads only on the checkout pages, straight away there, and sets the cookies __stripe_mid (1 year) and __stripe_sid (30 minutes) — necessary
- Google Pay: As a payment method at checkout, only if selected — necessary
- Supabase: For account, login and content, servers in Frankfurt am Main — necessary. We also store our own visit and order statistics there — only if you consent to analytics cookies
- Cloudflare: For delivery and attack protection — necessary. Cloudflare also receives our own visit statistics — only if you consent to analytics cookies
Embedded content: click to load
Videos from YouTube and Vimeo, podcast episodes from Spotify, the reimbursement check from Typeform and appointment booking from Calendly come from other providers. If you chose “Accept all” (in the banner or in the cookie settings), this content loads straight away — your consent is already on record. Otherwise we do not load it automatically: you first see only a placeholder, and your click is what requests the content from the provider. Until then that provider learns nothing about your visit. So that you do not have to click for every video, we remember your decision per provider in your browser; “Necessary only” in the cookie settings deletes that too.
What we store ourselves
These entries come from us rather than third parties. Where one is only stored with your consent, this is noted:
| Name | Purpose | Storage period |
|---|---|---|
| lumeus-cookie-consent | Stores your choice in the cookie banner | Your choice is valid for 24 months, after which we ask again. You can change it at any time. |
| lumeus-embed-consent | Remembers which embed providers you have allowed | Until you change it, at most 24 months |
| Supabase session | Keeps you signed in to your account | Until you sign out |
| lastCheckoutProduct | Remembers the product you last opened so the order confirmation can show it | Until you clear your browser storage |
| lumeus_webinar_recording_access | Remembers that you unlocked the webinar recording | Until you clear your browser storage |
| Session storage (notices) | Remembers that you have already seen or closed a newsletter or notice window so it does not appear again | Until you close the tab |
| Session storage (visit statistics) | Our own visit and checkout statistics within one visit — only if you consent to analytics cookies | Until you close the tab; deleted immediately if you withdraw consent |
| lumeus-ad-click-ids | Remembers the click ID of a Google or Meta ad you arrived from — only if you consent to marketing cookies | Until you close the tab; deleted immediately if you withdraw consent |
Transfers to third countries
Some of the providers listed process data outside the EU/EEA, in particular in the USA (Klaviyo, Stripe, Vimeo, Calendly, Cloudflare, and the US parent companies of Google and Meta). Any transfer takes place only in accordance with Art. 44 et seq. GDPR — generally on the basis of the EU standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. The USA does not offer a level of data protection equivalent to European law; in particular, access by US authorities cannot be ruled out.
How can you manage cookies?
Browser settings
You can manage cookies in your browser settings:
- Chrome: Settings → Advanced → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
Cookie settings on our website
You can change your choice at any time via “Cookie settings” in the footer or with the button below.
Withdrawing your consent
Your consent only ever applies going forward, and you can withdraw it at any time without any disadvantage. Open the cookie settings and choose “Necessary only”, or untick individual categories and save. “Necessary only” also resets any embed providers you had allowed. The lawfulness of processing carried out up to that point is unaffected.
What happens if you disable cookies
Important note:
Disabling certain cookies can affect how our website works. Some features may no longer be available or may not function correctly.
Cookie lifetime
We use both session cookies and persistent cookies:
- Session cookies: Deleted automatically when you close your browser
- Persistent cookies: Stored for a defined period (a maximum of 2 years)
How this relates to our privacy policy
This Cookie Policy supplements our privacy policy and sets out in detail which cookies and embedded third-party services run in your browser. Everything else we process — payments, newsletters, support enquiries or the AI coach — and your rights as a data subject are described there: Go to the privacy policy
Contact
If you have any questions about our use of cookies, you can contact us at any time:
Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons.
Last updated: October 2026