Cookie Policy
Last updated: September 2026
1. Overview
Hoppla uses only essential cookies and local storage items that are strictly necessary for the Service to function. We do not use any tracking, analytics, advertising, or third-party cookies.
Because we exclusively use cookies that are strictly necessary to provide the telemedia service explicitly requested by the user, no prior consent is required under §25 Abs. 2 Nr. 2 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz) and Art. 5(3) of the ePrivacy Directive (2002/58/EC).
2. Legal Basis
The legal basis for storing information on and accessing information from your device is:
- §25 Abs. 2 Nr. 2 TDDDG — storage of and access to information on the end user's device is strictly necessary to provide the telemedia service explicitly requested by the user
- Art. 6(1)(b) GDPR — processing is necessary for the performance of the contract (service provision)
- Art. 6(1)(f) GDPR — legitimate interest in security (CSRF protection)
3. Cookies We Use
| Cookie Name | Purpose | Duration | Type | Legal Basis |
|---|---|---|---|---|
monitoring_session | Maintains your authenticated session and keeps you logged in | Session / 2 hours idle | Strictly necessary | §25(2) Nr.2 TDDDG, Art. 6(1)(b) GDPR |
XSRF-TOKEN | Cross-site request forgery (CSRF) protection for form submissions and API calls | Session / 2 hours idle | Strictly necessary | §25(2) Nr.2 TDDDG, Art. 6(1)(f) GDPR |
2fa_remember | Remembers successful two-factor authentication to avoid repeated prompts on the same device | 14 days | Strictly necessary | §25(2) Nr.2 TDDDG, Art. 6(1)(b) GDPR |
4. Local Storage Items
In addition to cookies, the Service uses browser local storage for user preferences. Local storage items are not sent to the server with each request.
| Key | Purpose | Duration | Type |
|---|---|---|---|
hoppla-color-mode | Stores your light/dark mode preference | Persistent (until manually cleared) | Functional preference |
hoppla-sidebar-collapsed | Stores sidebar collapse/expand state | Persistent (until manually cleared) | Functional preference |
5. What We Do Not Use
- No Google Analytics, Matomo, Plausible, or any other analytics service
- No Facebook Pixel, Google Ads, or any advertising/remarketing trackers
- No advertising or cross-site tracking cookies
- No browser fingerprinting or cross-site tracking techniques
- No social media tracking pixels or embeds
- No A/B testing tools that use cookies or tracking
6. Third-Party Resources
We serve our own fonts, icons and static assets from our own domain. Three external resources load, each on a limited set of pages:
- Cloudflare Turnstile (
challenges.cloudflare.com) — spam and abuse protection on the sign-up, migration and site-audit forms. Strictly necessary for the function you requested on those pages. - Paddle.js (
cdn.paddle.com) — loaded only on the checkout page to process your payment. Strictly necessary to conclude the purchase. - Cloudflare as our CDN and DDoS protection sits in front of every hoppla.dev hostname and sets its own integrity cookies on our domains to distinguish real visitors from automated traffic.
We use no advertising networks, no analytics providers, no social media pixels and no embeds.
7. Public Status Pages
Public status pages hosted on hoppla.dev or on custom domains set no cookies of our own and use no tracking technologies. Status page visitors are not profiled or identified beyond standard server access logs. Where the operator of a status page has selected a web font that is hosted by Google, that font is requested from Google when the page loads; the operator chooses this, and it is disclosed in the page's own privacy information.
8. How to Manage Cookies
Since we only use essential cookies, disabling them will prevent the Service from functioning correctly (you will not be able to log in or use the dashboard).
You can manage cookies through your browser settings. All major browsers allow you to view, manage, and delete cookies:
9. Changes to This Policy
If we ever introduce additional cookies or tracking technologies, we will update this policy and implement a cookie consent mechanism as required by §25 TDDDG and the GDPR before any non-essential cookies are set.
10. Contact
Questions about our cookie usage?
Email: [email protected]