Skip to content
Leadbase

Cookie Policy

How we use cookies and how you can manage them

Non-binding convenience translation: The German version is authoritative. This English translation is provided for information only; the German version prevails in any discrepancy.

Cookies and Your Privacy

Cookies and similar storage support sign-in, your preferences and use of Leadbase. Necessary access to your device is governed in particular by Section 25(2) TDDDG; storage or access requiring consent is subject to Section 25(1) TDDDG. Subsequent processing of personal data is additionally governed by the GDPR.

What We Store and Why

StoragePurposeDuration and control
Sign-in sessionSecure sign-in and access to your accountSessions last seven days and can be renewed during active use. Signing out ends the current session.
Cookie choicesCategories and time of your choice; browser cookie leadbase_cookie_consent and local storage leadbase_cookie_consent_v1The cookie lasts one year. Local storage remains until changed or cleared in your browser.
Sidebar preferenceExpanded or collapsed navigation; sidebar_stateSeven days.
Other interface preferencesFor example language and display, depending on the function usedUntil changed or cleared, or according to the relevant session.

Additional technically necessary security or session storage may depend on the service visited. Stripe's information also applies to its own interface when you open the payment service.

Cookies on Payment and External Services

Leadbase uses Stripe directly for payment pages. External services may set their own necessary cookies on their interfaces. The Privacy Policy lists data providers and recipients.

  • Essential Cookies: Automatically enabled, no consent required (legal basis: Art. 6(1)(f) GDPR)
  • Functional Cookies: Opt-in required for extended functionality
  • Analytics Cookies: Separate consent for usage statistics and performance monitoring
  • Marketing Cookies: Explicit consent for advertising and personalization
  • Third-Party Cookies: Specific consent for external services and integrations

Choose the optional categories you allow through Cookies in the footer. You can update or reject them at any time. Necessary storage keeps the functions you request working. The storage inventory above describes the services in use; the preference panel also covers optional categories available for consent.

You can also clear or block cookies and local storage in your browser. This can remove sign-in and saved preferences. Clearing only the cookie may leave a local choice in place; clear local site data as well for a complete reset.

User Rights and Self-Determination

GDPR-Compliant Data Subject Rights

  • Right to Information (Articles 13, 14 GDPR): Full transparency about cookie use and data processing
  • Right of Access (Article 15 GDPR): Overview of all stored cookie data and its purposes
  • Right to Rectification (Article 16 GDPR): Correction of inaccurate cookie-based preferences and profiles
  • Right to Erasure (Article 17 GDPR): Complete removal of all cookie data and tracking information
  • Right to Restriction (Article 18 GDPR): Temporary suspension of cookie processing
  • Right to Data Portability (Article 20 GDPR): Export of cookie-based preferences and settings
  • Right to Object (Article 21 GDPR): Stopping cookie processing based on legitimate interests

Extended Control Options

Use the footer to manage consent by category, or clear stored site data through your browser. For questions about your choices or the data we hold, contact privacy@leadbase.io.

Desktop Browser Configuration

Google Chrome (Desktop)

  • Cookie Settings:{" "} chrome:
  • Delete All Cookies: Settings > Privacy and security > Clear browsing data
  • Site-Specific Control: Lock icon in address bar > Cookies
  • Block Third-Party Cookies: Settings > Privacy and security > Cookies and other site data
  • Incognito Mode: Ctrl+Shift+N for cookie-free browsing

Mozilla Firefox (Desktop)

  • Cookie Management: about:preferences#privacy
  • Enhanced Tracking Protection: Strict mode for maximum cookie protection
  • Cookie Exceptions: Define individual website rules
  • Automatic Deletion: Configure cleanup at the end of a session
  • Private Mode: Ctrl+Shift+P for temporary browsing

Safari (macOS)

  • Intelligent Tracking Prevention (ITP):{" "} Automatic cross-site tracking protection
  • Cookie Settings: Safari > Settings > Privacy
  • Manage Website Data: Detailed view by domain
  • Private Browsing: Cmd+Shift+N for tracking-free sessions

Microsoft Edge (Desktop)

  • Tracking Prevention: Three protection levels (Basic, Balanced, Strict)
  • Cookie Controls: edge:
  • InPrivate Browsing: Ctrl+Shift+N for cookie-isolated sessions

Mobile Browsers and Apps

iOS Safari

  • Settings: Settings > Safari > Privacy & Security
  • Prevent Cross-Site Tracking: Enabled by default for better privacy
  • Clear Website Data: Remove all Safari data and cookies

Android Chrome

  • Cookie Settings: Menu > Settings > Site settings > Cookies
  • Incognito Mode: Private browsing without cookie storage
  • Clear Website Data: Selectively or completely remove browser data

International Compliance and Multi-Jurisdictional Requirements

European Union (EU/EEA)

GDPR Compliance (EU 2016/679)

  • Lawfulness of Processing: Article 6 GDPR: consent, legitimate interests, performance of a contract
  • Special Categories: Article 9 GDPR: no processing of sensitive data without explicit consent
  • Transparency Obligations: Articles 12-14 GDPR: understandable information about cookie use
  • Data Subject Rights: Articles 15-22 GDPR: full implementation of all data protection rights
  • Data Protection Impact Assessment: Article 35 GDPR: for high-risk cookie processing

ePrivacy Directive (Directive 2002/58/EC)

  • Cookie Consent: Article 5(3): prior consent for non-technical cookies
  • Exceptions: Strictly necessary cookies for requested services
  • Information and Consent: Clear and comprehensive information before cookies are set

German Implementation (TDDDG)

  • Section 25 TDDDG: Protection of privacy in terminal equipment
  • Consent Requirement: Explicit consent for storing/accessing information
  • Exceptions: Technical necessity and user request

United States

California Consumer Privacy Act (CCPA/CPRA)

  • Right to Know: Disclosure of cookie categories and purposes of use
  • Right to Delete: Deletion of personal information from cookies
  • Right to Opt-Out: Objection to the sale of personal information
  • Do Not Sell: Respect for "Do Not Sell My Personal Information" requests
  • Sensitive Personal Information: Enhanced safeguards for sensitive data

Other US States

  • Virginia Consumer Data Protection Act (VCDPA): Rights similar to the CCPA with local specificities
  • Colorado Privacy Act (CPA): Comprehensive privacy rights and cookie control
  • Connecticut Data Privacy Act (CTDPA): Additional safeguards for minors

Canada (PIPEDA)

  • Meaningful Consent: Understandable and specific cookie consent
  • Purpose Limitation: Cookie use only for stated purposes
  • Individual Access: Right of access to cookie-based data collection
  • Privacy Breach Notification: Notification obligation for cookie-related data breaches

Other International Jurisdictions

United Kingdom (UK GDPR + DPA 2018)

  • Post-Brexit Continuity: Largely identical requirements to the EU GDPR
  • ICO Guidance: Specific guidance from the Information Commissioner's Office
  • PECR Compliance: Privacy and Electronic Communications Regulations

Brazil (LGPD)

  • Lei Geral de Proteção de Dados: Comprehensive data protection rights similar to the GDPR
  • Consent Requirements: Explicit consent for cookie processing
  • Data Subject Rights: Full data subject rights including portability

Australia (Privacy Act 1988)

  • Australian Privacy Principles: 13 principles for cookie-based data processing
  • Notifiable Data Breach Scheme: Notification obligation for relevant data breaches

Technical Security Measures

Encryption and Secure Transmission

  • HTTPS-Enforcement: Exclusive transmission over encrypted connections (TLS 1.3)
  • Secure-Flag Implementation: Prevents transmission over unencrypted HTTP connections
  • Cookie-Encryption: Encryption of sensitive cookie content with AES-256
  • Integrity-Protection: HMAC signing to protect against tampering
  • Perfect Forward Secrecy: Use of temporary keys for maximum security

Access Control and Authorization

  • HttpOnly-Attributes: Protection against JavaScript access for security-critical cookies
  • SameSite-Controls: Strict/Lax policies for CSRF prevention
  • Domain-Restrictions: Strict limitation to authorized domains and subdomains
  • Path-Limitations: Minimum required path ranges for cookie access
  • Role-Based Cookie Access: Different cookie sets based on user roles

Privacy-by-Design Implementation

Data Minimization Strategies

  • Purpose Limitation: Strict purpose limitation for each cookie type
  • Storage Minimization: Minimal necessary amount of data per cookie
  • Retention Limitations: Automatic deletion after the shortest possible period
  • Anonymization Techniques: Pseudonymization and anonymization of sensitive data

Advanced Privacy Technologies

  • Differential Privacy: Mathematical privacy guarantees for analytics
  • Homomorphic Encryption: Computations on encrypted cookie data
  • Secure Multi-Party Computation: Collaborative analytics without data exchange
  • Zero-Knowledge Proofs: Verification without revealing sensitive information

Incident Response and Security Monitoring

Continuous Monitoring

  • Cookie-Anomaly Detection: Automatic detection of unusual cookie activity
  • Unauthorized Access Monitoring: Real-time monitoring of suspicious cookie access
  • Data Exfiltration Prevention: Protection against unauthorized cookie data exfiltration
  • Compliance Monitoring: Continuous monitoring of cookie compliance

Incident Response Procedures

  • Breach Detection: Immediate detection of cookie-related data protection breaches
  • Containment Strategies: Rapid containment and damage limitation
  • Notification Procedures: Timely notification of supervisory authorities and data subjects
  • Forensic Analysis: Detailed investigation of cookie security incidents
  • Recovery Planning: Systematic recovery and improvement of cookie security

Future-Proofing and Post-Cookie Strategies

Cookieless Future Preparation

First-Party Data Strategies

  • Customer Data Platforms (CDP): Central collection and management of first-party data
  • Progressive Profiling: Gradual collection of user data with explicit consent
  • Zero-Party Data Collection: Direct collection of preferences through surveys and settings
  • Behavioral Analytics without Cookies: Server-side tracking and session-based analytics

Alternative Identifier Technologies

  • Privacy-Preserving Identifiers: Anonymous but consistent user identification
  • Contextual Targeting: Content-based rather than user-based personalization
  • Cohort-Based Analytics: Grouped tracking for privacy-compliant insights
  • Device Fingerprinting Alternatives: Privacy-friendly device recognition

Emerging Technologies and Standards

Privacy Sandbox and Web Standards

  • Topics API: Interest-based advertising without cross-site tracking
  • FLEDGE/Protected Audience: Remarketing without third-party cookies
  • Attribution Reporting API: Conversion measurement with privacy protection
  • Trust Tokens: Anti-fraud without user tracking

Blockchain and Decentralized Identity

  • Self-Sovereign Identity: User-controlled identity management
  • Decentralized Consent Management: Blockchain-based consent management
  • Privacy-Preserving Analytics: Verifiable analytics without data exchange

Adaptive Compliance Framework

Regulatory Future-Proofing

  • Continuous Compliance Monitoring: Automatic adaptation to new legal requirements
  • Global Privacy Framework: Consistent data protection standards across all jurisdictions
  • Regulatory Technology (RegTech): AI-supported compliance monitoring and adaptation

Technology Evolution Readiness

  • API-First Architecture: Flexible integration of new privacy technologies
  • Modular Consent Systems: Extensible consent platforms
  • Cross-Platform Compatibility: Consistent privacy experience across all devices and browsers

Contact, Support, and Complaint Management

Privacy Support and Requests

Direct Contact Options

International Support Channels

  • EU/DACH Support: German-language support for European customers
  • North America Support: English-language support for the USA/Canada
  • Global Privacy Office: Central contact point for international data protection matters

Complaint Procedures and Supervisory Authorities

Internal Complaint Office

  • First Level: Direct resolution through privacy support
  • Escalation: Referral to the Data Protection Officer if the resolution is unsatisfactory
  • Management Review: Highest escalation level to management
  • Documentation: Complete record of all complaint steps

External Supervisory Authorities

Primary Supervisory Authority (Lead Authority):

  • Germany: Bavarian State Office for Data Protection Supervision (BayLDA)
  • Address: Promenade 18, 91522 Ansbach
  • Website: www.lda.bayern.de
  • Email: poststelle@lda.bayern.de Other relevant supervisory authorities:
  • Austria: Data Protection Authority (DSB): www.dsb.gv.at
  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch
  • EU level: European Data Protection Board (EDPB)
  • edpb.europa.eu

Self-Help Resources and Documentation

Online Help Center

  • Cookie FAQ: Frequently asked questions and answers about cookie use
  • Video Tutorials: Step-by-step instructions for cookie settings
  • Browser Guides: Specific guidance for all common browsers
  • Troubleshooting: Solutions for common cookie problems

Educational Resources

  • Cookie Glossary: Plain-language explanation of all cookie terms
  • Privacy Best Practices: Recommendations for optimal cookie settings
  • Legal Updates: Current information about cookie laws
  • Technology Roadmap: Future of cookie technology and privacy tools

Regular Updates and Version Control

Change Management and Versioning

Systematic Updates

  • Quarterly Reviews: Regular review and update of the Cookie Policy
  • Regulatory Updates: Immediate adjustment to new legal requirements
  • Technology Evolution: Integration of new cookie technologies and privacy tools
  • User Feedback Integration: Consideration of user feedback and improvement suggestions

Notification and Communication

  • Change Notifications: Proactive information about material changes
  • Grace Periods: Sufficient lead time to adapt to new Cookie Policies
  • Multi-Channel Communication: Information via email, website banners, and in-app notifications
  • Rollback Procedures: Possibility of reversal in the event of critical problems

Continuous Improvement

Performance Monitoring

  • Cookie Performance Analytics: Measuring the impact of Cookie Policies on website performance
  • User Experience Metrics: Analysis of the usability of cookie banners and settings
  • Conversion Impact Analysis: Evaluation of the impact of Cookie Policies on business metrics
  • Privacy-UX Balance: Optimization between privacy and user experience

Stakeholder Feedback Integration

  • Customer Advisory Board: Regular consultation with key customers about Cookie Policies
  • Legal Expert Review: External legal review of Cookie Policies
  • Technical Expert Input: Advice from privacy engineering experts
  • Industry Best Practice Analysis: Benchmarking against leading B2B SaaS providers

Future-Proofing and Innovation

Technology Roadmap

  • Privacy-Enhancing Technologies: Proactive integration of new privacy tools
  • Standards Compliance: Early adoption of new web standards and browser APIs
  • Cross-Platform Harmonization: Consistent Cookie Policies across all Leadbase platforms
  • API-First Approach: Programmatic cookie management for enterprise customers

Innovation Pipeline

  • Research Partnerships: Collaboration with universities and privacy research institutes
  • Open Source Contributions: Contribution to privacy tools and standards development
  • Industry Collaboration: Active participation in privacy initiatives and standards bodies
  • Ethical AI Implementation: Responsible use of AI for cookie management and privacy enhancement ** This comprehensive Cookie Policy is regularly reviewed and updated to meet the highest standards of data protection, transparency, and legal compliance. If you have any questions or suggestions, please feel free to contact us at any time. **