Cookie Policy

Effective Date: 10.11.2026

Version: 1.1

This Cookie Policy explains which cookies and similar technologies Sliplane uses on sliplane.io, what they are for, how long they are stored, and how you can control them. How we process personal data in general is described in our Privacy Policy.

1. What Are Trackers?

Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage, pixels and scripts, also store or read information on your device. In this policy, we call all of these "trackers".

First-party trackers are set by Sliplane itself. Third-party trackers are set by other providers whose services we use; these providers can read the trackers they set.

2. Your Choice

Trackers that are strictly necessary to provide the website and the service are always active. You cannot switch them off in our cookie banner, but you can block them in your browser; parts of the website, such as signing in, will then no longer work.

All other trackers are only used if you allow them. When you first visit our website, our cookie banner asks you which categories you allow. Until you decide, every optional tracker stays switched off. "Reject all" is as easy as "Accept all", and rejecting has no disadvantage other than the missing features described below.

You can change or withdraw your choice at any time through the "Cookie settings" link in the footer of our website. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. We ask you again when this policy changes in a way that requires new consent, and in any case after 12 months.

We store a record of each choice you make: a random identifier stored in your browser, the categories you allowed or rejected, the version of this policy, the time, your IP address and a browser fingerprint (a JA4H hash of your browser's request headers). If you are signed in, we link the record to your account. We need this record to prove your consent (Art. 7(1) GDPR) and keep it for three years.

The legal basis for necessary trackers is § 25(2) no. 2 TDDDG together with Art. 6(1)(b) and (f) GDPR. The legal basis for all other trackers is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR.

We load Google Tag Manager (Google Ireland Limited / Google LLC) only after you allowed measurement or marketing trackers. It then loads the scripts of the categories you allowed. Until you allow one of these categories, your browser does not connect to Google Tag Manager. Google Tag Manager does not set its own cookies, but when it loads, your browser connects to Google's servers, which transmits your IP address and browser information. Privacy policy: https://policies.google.com/privacy

3. Necessary

These trackers are required to run the website and the service, to keep you signed in, to protect you against attacks, and to remember your choices.

Name Provider Purpose Duration
cookie_consent Sliplane Stores your cookie choices and the identifier of your consent record 12 months
session Sliplane Keeps you signed in to the dashboard 7 days
auth-session Sliplane Protects the sign-in process with GitHub 1 day
csrfToken Sliplane Protects forms against cross-site request forgery 7 days
locale Sliplane Remembers your language 12 months
isBusiness Sliplane Remembers whether prices are shown with or without VAT 12 months

4. Live Chat

Crisp (Crisp IM SARL, France) provides the live chat on our website. We use Crisp in its Total Privacy Mode: loading the chat button stores nothing in your browser. Only when you open the chat does Crisp store an identifier for your chat session, so that the conversation continues across pages and visits. Because this happens only when you ask for the chat, it needs no consent in our cookie banner (§ 25(2) no. 2 TDDDG). Privacy policy: https://crisp.chat/en/privacy/

Name Provider Purpose Duration
crisp-client/* Crisp Identifies your chat session, set only after you open the chat 6 months

If you do not want to use the chat, you can reach us at support@sliplane.io.

5. Measurement

These trackers help us understand how visitors use our website, so that we can improve it.

Meta Events Manager (Meta Platforms Ireland Limited / Meta Platforms, Inc.) uses the Meta pixel to give us insights into traffic and interactions on our website. The trackers it uses are listed under "Marketing" below, because the same pixel also measures ads. Privacy policy: https://www.facebook.com/privacy/policy/

Visit Records

If you allow measurement or marketing trackers, your browser sends us one record each time it loads a page of our website: the page, the time, the UTM parameters of the link and the external website that sent you there. In-app navigation sends nothing. We store a record only when it is the first one of your browser or when it names a source other than the last one we stored for it; we discard the others. With marketing consent, a record also contains ad click identifiers and ad browser identifiers (see "Conversions Sent from Our Servers" below).

We link the records to the identifier of your consent record and, once you sign in, to your account. We use them to see where our visitors and customers come from. Nothing is stored in your browser for this.

Name Provider Purpose Duration
Visit records Sliplane Where visits to our website came from, stored on our servers As long as your account exists; without an account, 12 months after your last cookie choice

6. Marketing

These trackers measure whether our ads lead to sign-ups and purchases, and let us show ads to people who have visited our website or who may be interested in Sliplane. The providers may combine this data with other data they hold about you and use it for their own purposes.

If you allow marketing trackers and are signed in, we may also send a hashed version of your email address to Google and Meta to match conversions (enhanced conversions, Custom Audiences).

Conversions Sent from Our Servers

If you allow marketing trackers, we also measure conversions from our servers. This way they are counted when an ad blocker stops the scripts in your browser, and when you use Sliplane through our API, our command-line tool (CLI) or our MCP server.

  • When you arrive through an ad link, the visit record of your browser (see "Visit Records" above) also contains the ad click identifier from the link (for example gclid, gbraid, wbraid, rdt_cid, fbclid, oppref or msclkid) and the browser identifiers that the providers' scripts set (_fbp, _fbc, _rdt_uuid). We store a record also when one of these browser identifiers has a new value. If you click another ad later, we store the new identifier as well and use the newest one from the last 90 days.
  • When you sign up, buy a server, database or storage bucket, upgrade a server or database (instance type or disk), or add your first payment method, we send this event to Google, Meta, Reddit and OpenAI. The event contains its type and time, a stable event identifier, and for purchases the product, the plan and the monthly price. We add a hashed (SHA-256) version of your email address and of your user ID, your IP address and browser information if the event came from a request, and the stored identifiers.

We check your consent before we store a record, when an event happens, and again right before we send it. If you withdraw your consent, your browser stops sending records and we send no further events. The records we stored before are kept as stated under "Visit Records". Without this consent we do none of this.

Google Ads

Google Ireland Limited / Google LLC: conversion tracking, enhanced conversions, remarketing, Optimized Targeting and Smart Bidding. Privacy policy: https://policies.google.com/privacy – Opt-out: https://adssettings.google.com

Name Provider Purpose Duration
_gcl_au, _gcl_aw, _gcl_dc, _gcl_gb, _gcl_gf, _gcl_gs, _gcl_ha, _gcl_ag Google Stores ad click information to attribute conversions 3 months
FPGCLAW, FPGCLDC, FPGCLGB, FPGCLGS, FPAU, FPGSID Google First-party copies of ad click information 3 months
GCL_AW_P, GCL_DC_P, GCL_AU_P, _gac_*, _gac_gb_*, Conversion Google Conversion measurement 3 months
IDE, id Google (doubleclick.net) Remarketing and measuring ad performance 2 years
__gads, __gpi, __gpi_optout, __gsas Google Ad delivery and frequency control 2 years
NID Google Remembers ad preferences 6 months
APC Google Ad delivery 6 months
DSID Google Links activity across devices for signed-in Google users 14 days
FCNEC Google Ad delivery and measurement 1 year
RUL Google Checks whether an ad was displayed correctly 1 year
__eoi Google Ad delivery 7 months
ar_debug, receive-cookie-deprecation Google Technical checks for ad measurement 3 to 6 months
test_cookie, TESTCOOKIESENABLED, FLC Google Checks whether the browser accepts cookies Up to 15 minutes
_GESPSK-*, _GFO, _GSD, _GUSM, __lsa__, __lscp__, __lsr__, __lsv__, __storage_test__, adStatsCache, adStatsReset, rc::a, rc::b, rc::e, rc::h Google Local storage for ad delivery and measurement Until deleted
GED_PLAYLIST_ACTIVITY Google Ad measurement Session

Meta

Meta Platforms Ireland Limited / Meta Platforms, Inc.: the Meta pixel for conversion tracking, Custom Audiences, Lookalike Audiences, the Audience Network and lead ads. Privacy policy: https://www.facebook.com/privacy/policy/ – Opt-out: https://www.facebook.com/adpreferences/

Name Provider Purpose Duration
_fbp Meta Identifies the browser to deliver and measure ads 3 months
_fbc Meta Stores the last ad click 3 months
fr Meta Ad delivery and measurement 3 months
lastExternalReferrer, lastExternalReferrerTime Meta Stores the last external referrer Session

Reddit

Reddit, Inc. (USA): the Reddit Pixel measures conversions and lets us show ads on Reddit to people who visited our website. It collects page views, actions on our website, your IP address and browser information. Privacy policy: https://www.reddit.com/policies/privacy-policy

Name Provider Purpose Duration
_rdt_uuid Reddit Identifies the browser for conversion measurement 3 months
_rdt_cid Sliplane Stores the Reddit click identifier from the ad link 3 months

OpenAI Ads

OpenAI Ireland Ltd. / OpenAI, L.L.C.: measures the actions you take after interacting with an ad in ChatGPT or other OpenAI services. When you arrive through such an ad, an attribution identifier from the link is stored in a first-party cookie. Events such as sign-ups and purchases are sent to OpenAI, partly from our servers. OpenAI reports results to us in aggregated form only. Privacy policy: https://openai.com/policies/privacy-policy/

7. Managing Trackers in Your Browser

In addition to our cookie settings, you can use your browser to see which cookies are stored, to block them, and to delete them. Browser settings do not let you choose by category, and blocking all cookies can break the sign-in. You can find instructions for the most common browsers here:

You can also opt out of interest-based advertising from many providers at once through Your Online Choices (https://www.youronlinechoices.eu) in the EU and UK, and through the Network Advertising Initiative (https://optout.networkadvertising.org) and the Digital Advertising Alliance (https://optout.aboutads.info) in the United States.

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a rejection of marketing trackers.

8. Contact

Sliplane GmbH c/o ECOSIA Gerichtstraße 23, Innenhof 4 13347 Berlin Germany

Email: support@sliplane.io

We describe third-party trackers to the best of our knowledge, but the providers can change them at any time. For complete and current information, please also see the privacy policies of the providers linked above.