Cookie Policy
Information about the use of cookies on our website
What are cookies?
Cookies are small text files that websites store on your computer or mobile device when you visit them. They are commonly used to make websites work, or work more efficiently, and to report information back to the site owners.
What types of cookies do we use?
Necessary cookies
These cookies are essential for the website to function properly.
- Session management
- Security features
- Core website functionality
- Login status
Legal basis: Art. 6(1)(f) GDPR, § 25(2) TDDDG
Functional cookies
These cookies enable enhanced functionality and personalisation.
- Language settings
- User preferences
- Regional settings
- Saved preferences
Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG
Analytics cookies
These cookies help us understand how visitors interact with the website.
- Visitor statistics
- Page views
- Time on page
- Popular content
Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG — withdrawable at any time
Marketing cookies
These cookies are used to show you relevant advertising.
- Personalised advertising
- Retargeting
- Conversion tracking
- Social media integration
Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG — withdrawable at any time
Third-party cookies
We embed third-party services. Analytics and marketing services only load once you consent; embedded content only loads when you click it; necessary services are required for sign-in and payment. Which group applies is noted with each entry:
- Google Tag Manager (server-side): Controls the loading of Google Analytics 4 and Google Ads — only if you consent to analytics or marketing cookies
- Meta Pixel (Facebook/Instagram): To measure ad performance — only if you consent to marketing cookies
- Klaviyo: For newsletter sign-up forms and email marketing — only if you consent to marketing cookies
- YouTube / Vimeo: For embedded videos
- Google Maps: For address autocomplete during checkout
- Calendly / Typeform: For appointment booking and embedded forms
- Spotify: For embedded podcast episodes — loads only after you click
- Payment providers (Stripe): For secure payment processing — necessary
- Google Pay: As a payment method at checkout, only if selected — necessary
- Supabase: For account, login and content, servers in Frankfurt am Main — necessary
- Cloudflare: For delivery, attack protection and the anonymous checkout analysis — necessary
Embedded content: click to load
Videos from YouTube and Vimeo, podcast episodes from Spotify, the reimbursement check from Typeform and appointment booking from Calendly come from other providers. If you chose “Accept all” in the banner, this content loads straight away — your consent is already on record. Otherwise we do not load it automatically: you first see only a placeholder, and your click is what requests the content from the provider. Until then that provider learns nothing about your visit. So that you do not have to click for every video, we remember your decision per provider in your browser; “Reject all” in the cookie settings deletes that too.
What we store ourselves
These entries come from us rather than third parties, and are required to run the website:
| Name | Purpose | Storage period |
|---|---|---|
| lumeus-cookie-consent | Stores your choice in the cookie banner | Until you change it or clear your browser storage |
| lumeus-embed-consent | Remembers which embed providers you have allowed | Until you change it or clear your browser storage |
| NEXT_LOCALE | Your language choice (German or English) | 1 year |
| Supabase session | Keeps you signed in to your account | Until you sign out |
| Session storage (visit path) | Anonymous analysis of your page path within one visit | Deleted when you close the tab |
Transfers to third countries
Some of the providers listed process data outside the EU/EEA, in particular in the USA (Klaviyo, Vimeo, Calendly, Cloudflare, and the US parent companies of Google and Meta). Any transfer takes place only in accordance with Art. 44 et seq. GDPR — generally on the basis of the EU standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. The USA does not offer a level of data protection equivalent to European law; in particular, access by US authorities cannot be ruled out.
How can you manage cookies?
Browser settings
You can manage cookies in your browser settings:
- Chrome: Settings → Advanced → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
Cookie settings on our website
You can change your cookie preferences at any time via our cookie banner or in the privacy settings.
Withdrawing your consent
Your consent only ever applies going forward, and you can withdraw it at any time without any disadvantage. Open the cookie settings and choose “Reject all”. This also resets any embed providers you had allowed. The lawfulness of processing carried out up to that point is unaffected.
What happens if you disable cookies
Important note:
Disabling certain cookies can affect how our website works. Some features may no longer be available or may not function correctly.
Cookie lifetime
We use both session cookies and persistent cookies:
- Session cookies: Deleted automatically when you close your browser
- Persistent cookies: Stored for a defined period (a maximum of 2 years)
How this relates to our privacy policy
This Cookie Policy supplements our privacy policy and sets out in detail which cookies and embedded third-party services run in your browser. Everything else we process — payments, newsletters, support enquiries or the AI coach — and your rights as a data subject are described there: Go to the privacy policy
Contact
If you have any questions about our use of cookies, you can contact us at any time:
Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons.
Last updated: August 2026