Cookie Policy of hyperate
This document informs Users about the technologies that help hyperate to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with hyperate.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
Hyperate uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.
How hyperate uses Trackers
Necessary
Hyperate uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Trackers managed by third parties
-
Stripe (Stripe Inc)
Stripe is a payment service provided by Stripe Inc.
Personal Data processed: billing address, email address, first name, payment info, purchase history, Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
- __Host-LinkSession: 2 years
- __stripe_mid: 1 year
- __stripe_sid: 30 minutes
- dashboard.banner-dismissals: duration of the session
- link.auth_session_client_secret: duration of the session
- m: 2 years
- pay_sid: 1 year
-
Cloudflare Bot Management (Cloudflare, Inc.)
Cloudflare Bot Management is a malicious bot protection and management service provided by Cloudflare, Inc.
Personal Data processed: app information, Application opens, browser information, browsing history, city, clicks, country, county, custom events, device information, device logs, geography/region, interaction events, IP address, keypress events, language, latitude (of city), launches, longitude (of city), metro area, motion sensor events, mouse movements, number of sessions, operating systems, page events, page views, province, scroll position, scroll-to-page interactions, search history, session duration, session statistics, state, touch events, Trackers, Usage Data, video views and ZIP/Postal code.
Place of processing: United States – Privacy Policy.
Storage duration:
- __cf_bm: 3 seconds
- __cfruid: duration of the session
- cf_ob_info: 3 seconds
- cf_use_ob: 3 seconds
- cfmrk_cic: 3 months
Experience
Hyperate uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
Trackers managed by third parties
-
YouTube video widget
YouTube is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows hyperate to incorporate content of this kind on its pages.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Storage duration:
- PREF: 8 months
- VISITOR_INFO1_LIVE: 8 months
- YSC: duration of the session
-
Google Fonts (Google Ireland Limited)
Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows hyperate to incorporate content of this kind on its pages.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy.
Measurement
Hyperate uses Trackers to measure traffic and analyse User behaviour to improve the Service.
Trackers managed by third parties
-
Google Analytics (Universal Analytics)
Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of hyperate, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
-
Google Analytics 4
Google Analytics 4 is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of hyperate, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: browser information, city, device information, latitude (of city), longitude (of city), number of Users, session statistics, Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- _ga: 2 years
- _ga_*: 2 years
-
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is an analytics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner insights into the traffic and interactions on hyperate.
Personal Data processed: Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy.
Storage duration:
-
HubSpot Analytics (HubSpot, Inc.)
HubSpot Analytics is an analytics service provided by HubSpot, Inc.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out .
Storage duration:
- __hs_gpc_banner_dismiss: 6 months
- __hssc: 30 minutes
- __hssrc: duration of the session
- __hstc: 2 years
- hubspotutk: 2 years
- messagesUtk: 2 years
-
Google Analytics (Universal Analytics) with anonymized IP (Google Ireland Limited)
Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of hyperate, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. It works by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
Marketing
Hyperate uses Trackers to deliver personalized ads or marketing content, and to measure their performance.
Some of the advertising services used by the Owner adhere to the IAB Transparency and Consent Framework, an initiative that facilitates responsible privacy practices across the digital advertising industry - providing Users with enhanced transparency and control over how their data are used for advertising tracking purposes. Users can customize their advertising preferences at any time by accessing the advertising preferences panel from within the cookie notice or via the relevant link on hyperate.
Hyperate participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. Hyperate uses iubenda (identification number 123) as a Consent Management Platform.
Trackers managed by third parties
-
Meta ads conversion tracking (Meta pixel)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Meta Audience Network with actions performed on hyperate. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Storage duration:
- _fbp: 3 months
- fr: 3 months
-
Google AdSense (Google Ireland Limited)
Google AdSense is an advertising service provided by Google Ireland Limited. This service uses the “DoubleClick” Cookie, which tracks use of hyperate and User behavior concerning ads, products and services offered.
Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings.
In order to understand Google's use of data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
- AID: 2 years
- ANID: 2 years
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- GCL_AW_P: 3 months
- GED_PLAYLIST_ACTIVITY: duration of the session
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- TAID: 14 days
- __gads: 2 years
- __gpi: 2 years
- __gpi_optout: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_ag: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_gs: 3 months
- _gcl_ha: 3 months
- id: 2 years
- receive-cookie-deprecation: 6 months
- test_cookie: 15 minutes
-
AddThis (Oracle Corporation)
AddThis is an advertising and behavioral targeting service provided by Oracle Corporation that displays a widget that allows interaction with social networks and external platforms as well as sharing the contents of hyperate and connects the activity of hyperate with the Oracle advertising network. Users can opt out of Oracle's use of Trackers for ads personalization by visiting this opt-out page.
Personal Data processed: Tracker, Universally unique identifier (UUID) and Usage Data.
Place of processing: United States – Privacy Policy – Opt out.
Storage duration:
- UID: 2 years
- __atuvc: 2 years
- __atuvs: 30 minutes
-
Facebook Lookalike Audience (Facebook Ireland Ltd)
Facebook Lookalike Audience is an advertising and behavioral targeting service provided by Facebook Ireland Ltd that uses Data collected through Facebook Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the base of their past use of hyperate or engagement with relevant content across the Facebook apps and services.
On the base of these Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audience.
Users can opt out of Facebook's use of Trackers for ads personalization by visiting this opt-out page.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Storage duration:
-
X Ads conversion tracking (X Corp.)
X Ads conversion tracking is an analytics service provided by X Corp. that connects data from the X advertising network with actions performed on hyperate.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
- personalization_id: 2 years
-
Better Ads (d3sv.net) (Better Ads GmbH)
Better Ads (d3sv.net) is an advertising service provided by Better Ads GmbH.
Personal Data processed: Trackers and Usage Data.
Place of processing: Germany – Privacy Policy – Opt out.
Storage duration:
- _dnmt_c: 2 months
- _dnmt_f: 2 months
-
OneSignal (Lilomi, Inc.)
OneSignal is a message sending service provided by Lilomi, Inc.
OneSignal allows the Owner to send messages and notifications to Users across platforms such as Android, iOS, and the web. Messages can be sent to single devices, groups of devices, or specific topics or User segments.
Depending on the permissions granted to hyperate, the Data collected may also include precise location (i.e. GPS-level data) or WiFi information, apps installed and enabled on the User's device. Hyperate uses identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS, respectively) and technologies similar to cookies to run the OneSignal service.
The Data collected may be used by the service provider for interest-based advertising, analytics and market research. In order to understand OneSignal's use of Data, consult OneSignal's privacy policy.
Push notifications opt-out
Users may in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then changing those settings for some or all of the apps on the particular device.
Interest-based advertising opt-out
Users may opt-out of OneSignal advertising features through applicable device settings, such as the device advertising settings for mobile phones.
Different device configurations, or updates to devices, may affect or change how these indicated settings work.
Personal Data processed: email address, geographic position, language, Tracker, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example), Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy – Opt out.
-
Twitter Remarketing (X Corp.)
Twitter Remarketing is a remarketing and behavioral targeting service provided by Twitter, Inc. that connects the activity of hyperate with the Twitter advertising network.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
- personalization_id: 2 years
-
Twitter Tailored Audiences (X Corp.)
Twitter Tailored Audiences is a remarketing and behavioral targeting service provided by X Corp. that connects the activity of hyperate with the Twitter advertising network.
Users can opt out from interest-based ads by going to: Personalization and Data.
Personal Data processed: email address and Trackers.
Place of processing: United States – Privacy Policy.
Storage duration:
- personalization_id: 2 years
-
HubSpot CRM (HubSpot, Inc.)
HubSpot CRM is a User database management service provided by HubSpot, Inc.
Personal Data processed: Trackers.
Place of processing: United States – Privacy Policy.
Storage duration:
- __hs_gpc_banner_dismiss: 6 months
- __hssc: 30 minutes
- __hssrc: duration of the session
- __hstc: 2 months
- hubspotutk: 2 months
- messagesUtk: 2 months
-
HubSpot Lead Management (HubSpot, Inc.)
HubSpot Lead Management is a User database management service provided by HubSpot, Inc.
Personal Data processed: Trackers.
Place of processing: United States – Privacy Policy.
Storage duration:
- __hs_gpc_banner_dismiss: 6 months
- __hssc: 30 minutes
- __hssrc: duration of the session
- __hstc: 2 months
- hubspotutk: 2 months
- messagesUtk: 2 months
How to manage preferences and provide or withdraw consent on hyperate
Whenever the use of Trackers is based on consent, users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on hyperate.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
How to control or delete Cookies and similar technologies via your device settings
Users may use their own browser settings to:
- See what Cookies or other similar technologies have been set on the device;
- Block Cookies or similar technologies;
- Clear Cookies or similar technologies from the browser.
The browser settings, however, do not allow granular control of consent by category.
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Consequences of denying the use of Trackers
Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help hyperate to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.
Owner and Data Controller
Brainbuxx UG (haftungsbeschränkt) & Co. KG
Neumarkterstr.87
81673 München
Sitz der Gesellschaft: München
Amtsgericht München HRA 86336
USt-ID-Nummer DE814522031
Persönlich haftende Gesellschafterin:
Brainbuxx Beteiligungs UG (haftungsbeschränkt)
Sitz der Gesellschaft: München
Amtsgericht München HRB 262772
Geschäftsführer:
Alexander Holzreiter
Owner contact email: info@brainbuxx.com
Since the use of third-party Trackers through hyperate cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by hyperate.