Cortado

Cookie Policy

Cookie Policy of cortado.com, mycortado.com

This document informs Users about the technologies that help cortado.com, mycortado.com to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with cortado.com, mycortado.com.

For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.

Some of the purposes for which Trackers are used may also require the User's consent, depending on the applicable law. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.

Cortado.com, mycortado.com uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.

How cortado.com, mycortado.com uses Trackers

Necessary

Cortado.com, mycortado.com uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.

Trackers managed by third parties

Cloudflare (Cloudflare, Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means that it filters all the traffic through cortado.com, mycortado.com, i.e., communication between cortado.com, mycortado.com and the User's browser, while also allowing analytical data from cortado.com, mycortado.com to be collected.

Personal Data processed: Trackers and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.

Trackers duration:

  • _cfuvid: indefinite
  • cf_clearance: 30 minutes

Google reCAPTCHA (Google Ireland Limited)

Google reCAPTCHA is a spam protection service provided by Google Ireland Limited. The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed: answers to questions, clicks, keypress events, motion sensor events, mouse movements, scroll position, touch events, Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy.

Trackers duration:

  • _GRECAPTCHA: duration of the session
  • rc::a: indefinite
  • rc::b: duration of the session
  • rc::c: duration of the session
  • rc::f: indefinite

iubenda Privacy Controls and Cookie Solution (iubenda srl)

The iubenda Privacy Controls and Cookie Solution allows the Owner to collect and store Users’ preferences related to the processing of personal information, and in particular to the use of Cookies and other Trackers on cortado.com, mycortado.com.

Personal Data processed: IP address and Trackers.

Place of processing: Italy – Privacy Policy.

Trackers duration:

  • _iub_cs-*: 1 year
  • _iub_cs-*-granular: 1 year
  • euconsent-v2: 1 year

Stripe (Stripe, Inc.)

Stripe is a payment service provided by Stripe, Inc., Stripe Payments Europe, Limited or by Stripe Payments UK, Ltd, depending on how the Owner manages the Data processing.

Personal Data processed: billing address, email address, first name, last name, payment info, purchase history, Trackers, Usage Data and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy; European Union – Privacy Policy; United Kingdom – Privacy Policy.

Trackers duration:

  • 1: indefinite
  • __Host-LinkSession: 2 years
  • __stripe_mid: 1 year
  • __stripe_sid: 30 minutes
  • _mf: indefinite
  • dashboard.banner-dismissals: duration of the session
  • link.auth_session_client_secret: duration of the session
  • m: 2 years
  • pay_sid: 1 year

Webflow (Webflow, Inc.)

Webflow is a platform provided by Webflow, Inc. that allows the Owner to build, run and host cortado.com, mycortado.com. Webflow is highly customizable and can host websites from simple blogs to complex e-commerce platforms.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy – Opt out.

Trackers managed by third parties

WP Engine

The websites of Cortado including the online shop are hosted by WP Engine Inc. WP Engine only provides the web server platform. The management of the data, including encryption, however, is the exclusive responsibility of Cortado.

Place of processing: United States - (https://wpengine.com/legal/privacy/)

Trackers duration:

  • openid-connect-generic-redirect: 10 minutes

Microsoft: Azure

This cookie supports the Extract, Load, and Transform (ELT) process of Microsoft Azure.

Place of processing: European Union - Privacy Policy: https://www.microsoft.com/en-us/privacy/privacystatement

Trackers duration:

  • elt: 7 days

Functionality

Cortado.com, mycortado.com uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.

Trackers managed by third parties

Cortado ID Server

For using the Cortado (MDM) cloud service as well as for downloads, you must first log on to the Cortado Identity (ID) Server and provide personal information. The data to be provided include: first and last name, company name, phone number, email address and country. Cortado does not store passwords in plain text, but only a hash value of them.

Place of processing: European Union - Privacy Policy: https://www.iubenda.com/privacy-policy/65906630/full-legal

Trackers duration:

  • first_session: 32 days
  • idsrv.regmarker: 1 year
  • idsrv.antiforgery: duration of the session
  • idsrv.temp-data: 1 year
  • idsrv.session: duration of the session
  • idsrv.application: duration of the session
  • .auth: duration of the session
  • AdminConsole: duration of the session
  • UICultureCookie: duration of the session
  • api_session: 90 days
  • signout_token: duration of the session
  • remote_auth: duration of the session
  • .AspNetCore.Cookies: indefinite
  • .AspNetCore.OpenIdConnect.Nonce.*: 15 minutes
  • .AspNetCore.Correlation.*: 15 minutes

Facebook Authentication (Meta Platforms, Inc.)

Facebook Authentication is a registration and authentication service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, and is connected to the Facebook social network.

Personal Data processed: Trackers and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

Trackers duration:

  • _fbp: 3 months
  • datr: 2 years
  • fbssls_*: duration of the session
  • lastExternalReferrer: duration of the session

Facebook Oauth (Meta Platforms, Inc.)

Facebook Oauth is a registration and authentication service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, and is connected to the Facebook social network.

Personal Data processed: Trackers and various types of Data.

Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

Trackers duration:

  • _fbp: 3 months
  • lastExternalReferrer: duration of the session

Chargebee (Chargebee Inc.)

Chargebee is a subscription management tool provided by Chargebee Inc, which allows the Owner to manage subscriptions, invoicing, pricing models, and subscription and revenue analytics.

Personal Data processed: billing address, email address, first name, last name, payment info, phone number, purchase history, shipping address, Trackers and Usage Data.

Place of processing: United States – Privacy Policy.

Chatbase.co: AI chatbot

The AI chatbot is a service for interacting with the live chat platform of Chatbase.co Inc., 4700 Keele Street, 215 Bergeron Centre, Toronto, ON, Canada, M3J 1P3.
Processed personal data: Data communicated when using the service; email address; Tracker; Usage Data.
Cookie: cortado.com (partitioned, https://developers.google.com/privacy-sandbox/cookies/chips)

Place of processing: United States - Privacy Policy: https://www.chatbase.co/legal/privacy

Experience

Cortado.com, mycortado.com uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.

Trackers managed by third parties

Font Awesome (Fonticons, Inc. )

Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows cortado.com, mycortado.com to incorporate content of this kind on its pages.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy.

YouTube Video Widget (Google Ireland Limited)

YouTube is a video content visualization service provided by Google Ireland Limited that allows cortado.com, mycortado.com to incorporate content of this kind on its pages.

Personal Data processed: Cookies and Usage Data.

Place of processing: Ireland – Privacy Policy.

Trackers duration:

  • PREF: 8 months
  • VISITOR_INFO1_LIVE: 8 months
  • VISITOR_PRIVACY_METADATA: 7 months
  • YSC: duration of the session
  • YtIdbMeta:databases: duration of the session
  • iU5q-!O9@$: indefinite
  • yt-player-headers-readable: duration of the session
  • yt-remote-cast-available: indefinite
  • yt-remote-cast-installed: indefinite
  • yt-remote-connected-devices: duration of the session
  • yt-remote-device-id: duration of the session
  • yt-remote-fast-check-period: indefinite
  • yt-remote-session-app: indefinite
  • yt-remote-session-name: indefinite
  • ytidb::LAST_RESULT_ENTRY_KEY: duration of the session

YouTube Video Widget (Privacy Enhanced Mode) (Google Ireland Limited)

YouTube is a video content visualization service provided by Google Ireland Limited that allows cortado.com, mycortado.com to incorporate content of this kind on its pages. This widget is set up in a way that ensures that YouTube won't store information and cookies about Users on cortado.com, mycortado.com unless they play the video.

Personal Data processed: Trackers, Universally unique identifier (UUID) and Usage Data.

Place of processing: Ireland – Privacy Policy.

Trackers duration:

  • iU5q-!O9@$: indefinite
  • yt-player-headers-readable: duration of the session
  • yt-remote-cast-available: indefinite
  • yt-remote-cast-installed: indefinite

Google Fonts (Google LLC)

Google Fonts is a typeface visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows cortado.com, mycortado.com to incorporate content of this kind on its pages.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.

Synthesia video generator (Synthesia Limited)

Synthesia is a service provided by Synthesia Limited (Kent House, 14-17 Market Place, London, W1W 8AJ, United Kingdom) for AI-powered video generation and visualization of video content that allows cortado.com, mycortado.com to incorporate content of this kind on its pages.
Personal Data processed: cookies, usage data.
Place of processing: USA (Amazon Web Services) – Privacy Policy:
https://www.synthesia.io/legal/privacy-policy

Trackers duration:

  • muxData: 2 years
  • cortado.com: indefinite

Facebook Like Button and Social Widgets (Meta Platforms, Inc.)

The Facebook Like Button and Social Widgets are services allowing interaction with the Facebook social network provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

Trackers duration:

  • _fbp: 3 months
  • datr: 2 years
  • lastExternalReferrer: duration of the session

X Post Button and Social Widgets (X Corp.)

The X Post Button and Social Widgets are services allowing interaction with the X social network provided by X Corp.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy.

Trackers duration:

  • personalization_id: 2 years

UserScape: Net Promoter Score

This Cookie is used by UserScape aka thermostat.io to build the Net Promoter Score (NPS) ‒ a market research metric that is based on a single survey question asking respondents to rate the likelihood that they would recommend a company, product, or a service to a friend or colleague.

Place of processing: European Union - Privacy Policy: https://userscape.com/privacy

Trackers duration:

  • thermostatio_pl: duration of the session
  • thermostatio_hide: 1 day

Measurement

Cortado.com, mycortado.com uses Trackers to measure traffic and analyze User behavior to improve the Service.

Trackers managed by third parties

Google Analytics (Universal Analytics) with anonymized IP (Google Ireland Limited)

Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of cortado.com, mycortado.com, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. This integration of Google Analytics anonymizes your IP address. It works by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed: Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

Trackers duration:

  • AMP_TOKEN: 1 hour
  • _ga: 2 years
  • _gac*: 3 months
  • _gat: 1 minute
  • _gid: 1 day

Google Analytics Demographics and Interests reports (Google Ireland Limited)

Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for cortado.com, mycortado.com (demographics means age and gender Data).

Users can opt out of Google's use of cookies by visiting Google's Ads Settings.

Personal Data processed: Trackers and unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).

Place of processing: Ireland – Privacy Policy – Opt Out.

Trackers duration:

  • IDE: 2 years
  • _gcl_*: 3 months
  • test_cookie: 15 minutes

Google Analytics 4 (Google Ireland Limited)

Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of cortado.com, mycortado.com, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed: number of Users, session statistics, Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt out.

Trackers duration:

  • _ga: 2 years
  • _ga_*: 2 years

Posthog

Tracking frontend analytics (to see how the users are using the app) by PostHog Inc, 2261 Market Street #4008, San Francisco, CA 94114, USA.

Trackers duration:

  • _ph: duration of the session
  • ph_phc_*_posthog: 1 year

Akamai

The ak_bmsc and bm_sv cookies come from Akamai and are used to differentiate between traffic from humans and bots.

Place of processing: United States - Privacy Policy: https://www.akamai.com/legal/privacy-statement

Trackers duration:

  • ak_bmsc: 2 hours
  • bm_sv: 1 hour

Betterstack

The _session cookie is used for infrastructure monitoring using Better Uptime from Better Stack Inc., 9450 SW Gemini Dr Beaverton, OR, 97008-7105 USA.

Place of processing: United States - Privacy Policy: https://betterstack.com/privacy

Trackers duration:

  • _session: 90 days

HubSpot Analytics ( HubSpot Germany GmbH)

HubSpot Analytics is an analytics service provided by HubSpot Germany GmbH.

Personal Data processed: Trackers and Usage Data.

Place of processing: Germany – Privacy Policy.

Trackers duration:

  • __hmpl: duration of the session
  • __hs_gpc_banner_dismiss: 6 months
  • __hssc: 30 minutes
  • __hssrc: duration of the session
  • __hstc: 2 years
  • hublytics_events_53: duration of the session
  • hubspotutk: 2 years
  • messagesUtk: 2 years

Marketing

Cortado.com, mycortado.com uses Trackers to deliver personalized ads or marketing content, and to measure their performance.

Some of the advertising services used by the Owner adhere to the IAB Transparency and Consent Framework, an initiative that facilitates responsible privacy practices across the digital advertising industry - providing Users with enhanced transparency and control over how their data are used for advertising tracking purposes. Users can customize their advertising preferences at any time by accessing the advertising preferences panel from within the cookie notice or via the relevant link on cortado.com, mycortado.com.

Cortado.com, mycortado.com participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. Cortado.com, mycortado.com uses iubenda (identification number 123) as a Consent Management Platform.

Trackers managed by third parties

LinkedIn Website Retargeting (LinkedIn Corporation)

LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation that connects the activity of cortado.com, mycortado.com with the LinkedIn advertising network.

Personal Data processed: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt out.

Trackers duration:

  • li_gc: 6 months
  • bcookie: 1 year
  • lidc: 1 day
  • AnalyticsSyncHistory: 1 month
  • JSESSIONID: duration of the session
  • UserMatchHistory: 1 month
  • bscookie: 1 year
  • lang: duration of the session
  • lissc: 1 year
  • lms_ads: 1 month
  • lms_analytics: 1 month

Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects the activity of cortado.com, mycortado.com with the Meta Audience Network.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

Trackers duration:

  • _fbp: 3 months
  • datr: 2 years
  • lastExternalReferrer: duration of the session

Google Ads Remarketing (Google Ireland Limited)

Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google Ireland Limited that connects the activity of cortado.com, mycortado.com with the Google Ads advertising network and the DoubleClick Cookie.

In order to understand Google's use of Data, consult Google's partner policy.

Users can opt out of Google's use of Trackers for ads personalization by visiting Google's Ads Settings.

Personal Data processed: Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt out.

Trackers duration:

  • APC: 6 months
  • Conversion: 3 months
  • DSID: 14 days
  • FCNEC: 1 year
  • FLC: 10 seconds
  • FPAU: 3 months
  • FPGCLAW: 3 months
  • FPGCLDC: 3 months
  • FPGCLGB: 3 months
  • FPGCLGS: 3 months
  • FPGSID: 3 months
  • GCL_AU_P: 3 months
  • GCL_AW_P: 3 months
  • GCL_DC_P: 3 months
  • GED_PLAYLIST_ACTIVITY: duration of the session
  • IDE: 2 years
  • NID: 6 months
  • RUL: 1 year
  • TESTCOOKIESENABLED: 1 minute
  • __eoi: 7 months
  • __gads: 2 years
  • __gpi: 2 years
  • __gpi_optout: 2 years
  • __gsas: 2 years
  • _gac_: 3 months
  • _gac_gb_: 3 months
  • _gcl_ag: 3 months
  • _gcl_au: 3 months
  • _gcl_aw: 3 months
  • _gcl_dc: 3 months
  • _gcl_gb: 3 months
  • _gcl_gf: 3 months
  • _gcl_gs: 3 months
  • _gcl_ha: 3 months
  • ar_debug: 3 months
  • id: 2 years
  • receive-cookie-deprecation: 6 months
  • test_cookie: 15 minutes

X Ads remarketing (X Corp.)

X Ads remarketing is a remarketing and behavioral targeting service provided by X Corp. that connects the activity of cortado.com, mycortado.com with the X advertising network.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy.

Trackers duration:

  • muc_ads: 2 years
  • personalization_id: 2 years

Drip (Drip Global, Inc.)

Drip is a User database management service provided by Drip Global, Inc. Drip leverages the User’s email address, which it can combine with Data that is gathered from cortado.com, mycortado.com and other sources (if any, indicated within this privacy policy), to enable cortado.com, mycortado.com to set up automations and communicate with Users in a personalized context and timing.

Personal Data processed: Email, Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

HubSpot CRM ( HubSpot Germany GmbH)

HubSpot CRM is a User database management service provided by HubSpot Germany GmbH.

Personal Data processed: email address, first name, last name, Trackers and Usage Data.

Place of processing: Germany – Privacy Policy.

Trackers duration:

  • __hmpl: duration of the session
  • __hs_gpc_banner_dismiss: 6 months
  • __hssc: 30 minutes
  • __hssrc: duration of the session
  • __hstc: 2 months
  • hublytics_events_53: duration of the session
  • hubspotutk: 2 months
  • messagesUtk: 2 months

HubSpot Lead Management ( HubSpot Germany GmbH)

HubSpot Lead Management is a User database management service provided by HubSpot Germany GmbH.

Personal Data processed: email address, Trackers and Usage Data.

Place of processing: Germany – Privacy Policy.

Trackers duration:

  • __hmpl: duration of the session
  • __hs_gpc_banner_dismiss: 6 months
  • __hssc: 30 minutes
  • __hssrc: duration of the session
  • __hstc: 2 months
  • hublytics_events_53: duration of the session
  • hubspotutk: 2 months
  • messagesUtk: 2 months

Google Ads conversion tracking (Google Ireland Limited)

Google Ads conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on cortado.com, mycortado.com.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed: Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy.

Trackers duration:

  • IDE: 2 years
  • test_cookie: 15 minutes

Meta ads conversion tracking (Meta pixel) (Meta Platforms, Inc.)

Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Meta Audience Network with actions performed on cortado.com, mycortado.com. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

Trackers duration:

  • _fbc: 3 months
  • _fbp: 3 months
  • fr: 3 months
  • lastExternalReferrer: duration of the session
  • lastExternalReferrerTime: duration of the session

Meta Lookalike Audience (Meta Platforms, Inc.)

Meta Lookalike Audience is an advertising and behavioral targeting service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that uses Data collected through Meta's Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the basis of their past use of cortado.com, mycortado.com or engagement with relevant content across Meta's apps and services. On the basis of these Data, personalized ads will be shown to Users suggested by Meta Lookalike Audience.

Users can opt out of Meta's use of Trackers for ads personalization by visiting this opt-out page.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

Trackers duration:

  • _fbp: 3 months
  • lastExternalReferrer: duration of the session
  • lastExternalReferrerTime: duration of the session

Google Ad Manager (Google Ireland Limited)

Google Ad Manager is an advertising service provided by Google Ireland Limited that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner, unless otherwise specified in this document, has no direct relationship with.

This service uses Cookies and similar identifiers, including information transmitted automatically such as Users' IP addresses, to identify Users' devices and to track use of cortado.com, mycortado.com and User behavior concerning ads, products and services offered.

Users may manage their advertising preferences and disable advertising Cookies via Google Ad Settings. Please note that this may not prevent Users' devices from being identified on the basis of information transmitted automatically, such as their IP address.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed: Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy.

Trackers duration:

  • APC: 6 months
  • Conversion: 3 months
  • DSID: 14 days
  • FCNEC: 1 year
  • FLC: 10 seconds
  • FPAU: 3 months
  • FPGCLAW: 3 months
  • FPGCLDC: 3 months
  • FPGCLGB: 3 months
  • FPGCLGS: 3 months
  • FPGSID: 3 months
  • GCL_AU_P: 3 months
  • GCL_AW_P: 3 months
  • GCL_DC_P: 3 months
  • GED_PLAYLIST_ACTIVITY: duration of the session
  • IDE: 2 years
  • NID: 6 months
  • RUL: 1 year
  • TESTCOOKIESENABLED: 1 minute
  • __eoi: 7 months
  • __gads: 2 years
  • __gpi: 2 years
  • __gpi_optout: 2 years
  • __gsas: 2 years
  • _gac_: 3 months
  • _gac_gb_: 3 months
  • _gcl_ag: 3 months
  • _gcl_au: 3 months
  • _gcl_aw: 3 months
  • _gcl_dc: 3 months
  • _gcl_gb: 3 months
  • _gcl_gf: 3 months
  • _gcl_gs: 3 months
  • _gcl_ha: 3 months
  • ar_debug: 3 months
  • id: 2 years
  • receive-cookie-deprecation: 6 months
  • test_cookie: 15 minutes

Google Ads Similar audiences (Google Ireland Limited)

Similar audiences is an advertising and behavioral targeting service provided by Google Ireland Limited that uses Data from Google Ads Remarketing in order to display ads to Users with similar behavior to Users who are already on the remarketing list due to their past use of cortado.com, mycortado.com.
On the basis of this Data, personalized ads will be shown to Users suggested by Google Ads Similar audiences.

Users who don't want to be included in Similar audiences can opt out and disable the use of advertising Trackers by going to: Google Ad Settings.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed: Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt out.

Trackers duration:

  • APC: 6 months
  • Conversion: 3 months
  • DSID: 14 days
  • FCNEC: 1 year
  • FLC: 10 seconds
  • FPAU: 3 months
  • FPGCLAW: 3 months
  • FPGCLDC: 3 months
  • FPGCLGB: 3 months
  • FPGCLGS: 3 months
  • FPGSID: 3 months
  • GCL_AU_P: 3 months
  • GCL_AW_P: 3 months
  • GCL_DC_P: 3 months
  • GED_PLAYLIST_ACTIVITY: duration of the session
  • IDE: 2 years
  • NID: 6 months
  • RUL: 1 year
  • TESTCOOKIESENABLED: 1 minute
  • __eoi: 7 months
  • __gads: 2 years
  • __gpi: 2 years
  • __gpi_optout: 2 years
  • __gsas: 2 years
  • _gac_: 3 months
  • _gac_gb_: 3 months
  • _gcl_ag: 3 months
  • _gcl_au: 3 months
  • _gcl_aw: 3 months
  • _gcl_dc: 3 months
  • _gcl_gb: 3 months
  • _gcl_gf: 3 months
  • _gcl_gs: 3 months
  • _gcl_ha: 3 months
  • ar_debug: 3 months
  • id: 2 years
  • receive-cookie-deprecation: 6 months
  • test_cookie: 15 minutes

LinkedIn Ads (LinkedIn Ireland Unlimited Company)

LinkedIn Ads is an advertising service provided by LinkedIn Ireland Unlimited Company or by LinkedIn Corporation, depending on how the Owner manages the Data processing.

Personal Data processed: Trackers and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt out; United States – Privacy Policy – Opt out.

Trackers duration:

  • GAID: indefinite
  • IDFA: indefinite
  • UserMatchHistory: 1 month
  • _gcl_*: 3 months
  • _guid: 3 months
  • aam_uuid: 1 month
  • li_fat_id: 1 month
  • li_giant: 7 days
  • li_sugr: 3 months
  • lms_ads: 1 month
  • oribi_cookie_test: duration of the session
  • oribi_session: 2 hours
  • oribi_user_guid: 7 months

LinkedIn conversion tracking (LinkedIn Insight Tag) (LinkedIn Corporation)

LinkedIn conversion tracking (LinkedIn Insight Tag) is an analytics and behavioral targeting service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on cortado.com, mycortado.com. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and enables to target groups of Users on the base of their past use of cortado.com, mycortado.com.

Users may opt out of behavioral targeting features through their device settings, their LinkedIn account settings or by visiting the AdChoices opt-out page.

Personal Data processed: device information, Trackers and Usage Data.

Place of processing: United States – Privacy Policy – Opt out.

Trackers duration:

  • AnalyticsSyncHistory: 1 month
  • JSESSIONID: duration of the session
  • UserMatchHistory: 1 month
  • bcookie: 1 year
  • bscookie: 1 year
  • lang: duration of the session
  • li_gc: 7 months
  • lidc: 1 day
  • lms_ads: 1 month
  • lms_analytics: 1 month
  • sdui_ver: 1 day

Microsoft Advertising (Microsoft Corporation)

Microsoft Advertising is an advertising service provided by Microsoft Corporation.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy – Opt out.

Trackers duration:

  • BFB: 400 days
  • BFBFB: 400 days
  • MUIDB: 390 days
  • OIDI: 14 days
  • OIDST: 14 days

X Ads conversion tracking (X Corp.)

X Ads conversion tracking is an analytics service provided by X Corp. that connects data from the X advertising network with actions performed on cortado.com, mycortado.com.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy.

Trackers duration:

  • muc_ads: 2 years
  • personalization_id: 2 years

LiveRamp (LiveRamp, Inc.)

LiveRamp is an advertising service provided by LiveRamp, Inc.

Personal Data processed: Trackers and Usage Data.

Place of processing: United States – Privacy Policy – Opt out.

Trackers duration:

  • *CONTENT: indefinite
  • *CREATEDAT: indefinite
  • *LASTREFRESHTIME: indefinite
  • *TYPE: indefinite
  • _lr_drop_match_pixel: 1 day
  • _lr_env: 1 year
  • _lr_env_src_ats: 1 month
  • _lr_geo_location: 1 day
  • _lr_retry_request: 1 hour
  • idl_env: 1 month
  • optout: 11 years
  • pxrc: 2 months
  • rlas3: 1 year

Google Ads enhanced conversions (Google LLC)

Google Ads enhanced conversions is an advertising service provided by Google LLC that allows the Owner to send hashed first-party conversion Data to Google in order to improve conversion measurements.

Personal Data processed: address, contact details, email address, first name, last name, phone number and Trackers.

Place of processing: United States – Privacy Policy.

HubSpot Email ( HubSpot Germany GmbH)

HubSpot Email is an email address management and message sending service provided by HubSpot Germany GmbH.

Personal Data processed: email address, Trackers and Usage Data.

Place of processing: Germany – Privacy Policy.

Trackers duration:

  • __hmpl: duration of the session
  • __hs_gpc_banner_dismiss: 6 months
  • hublytics_events_53: duration of the session

Trackers that do not fit the above categorizations

Wordpress

Wordpress cookies are required to provide the content of the entire website, but are also used to identify visitors to a website in order to collect statistics and enable personalized advertising.

Place of processing: United States - Privacy Policy: https://automattic.com/privacy

Trackers duration:

  • _wpfuuid: 400 days
  • wp-wpml_current_language: duration of the session

How to manage preferences and provide or withdraw consent on cortado.com, mycortado.com

Whenever the use of Trackers is based on consent, users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on cortado.com, mycortado.com.

With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

How to control or delete Cookies and similar technologies via your device settings

Users may use their own browser settings to:

  • See what Cookies or other similar technologies have been set on the device;
  • Block Cookies or similar technologies;
  • Clear Cookies or similar technologies from the browser.

The browser settings, however, do not allow granular control of consent by category.

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).

How to opt out of interest-based advertising

Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.

Consequences of denying the use of Trackers

Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help cortado.com, mycortado.com to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.

Owner and Data Controller

Cortado Mobile Solutions GmbH
Alt-Moabit 91a
10559 Berlin
Germany

Email address of the data protection officer: dataprotection@cortado.com

Owner contact email: info@cortado.com

Since the use of third-party Trackers through cortado.com, mycortado.com cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.

Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by cortado.com, mycortado.com.

Definitions and legal references

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through cortado.com, mycortado.com (or third-party services employed in cortado.com, mycortado.com), which can include: the IP addresses or domain names of the computers utilized by the Users who use cortado.com, mycortado.com, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

User

The individual using cortado.com, mycortado.com who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of cortado.com, mycortado.com. The Data Controller, unless otherwise specified, is the Owner of cortado.com, mycortado.com.

cortado.com, mycortado.com (or this Application)

The means by which the Personal Data of the User is collected and processed.

Service

The service provided by cortado.com, mycortado.com as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User's browser.

Tracker

Tracker indicates any technology - e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, for example by accessing or storing information on the User’s device.

Email

Provides access to the User's primary email address.

Legal information

This policy relates solely to cortado.com, mycortado.com, if not stated otherwise within this document.

Latest update: April 09, 2026