Cookie Policy

Essential cookies only by default. No tracking, no ads.

Cookie consent

When you first visit our site, a cookie banner lets you Accept all, Reject non-essential, or make granular choices. Your choice is stored in your browser (and, when you are signed in, recorded with your account so we can show what you agreed to). You can change or withdraw it at any time with Cookie settings in the site footer — as easily as you gave it.

Strictly necessary (always active, § 25 Abs. 2 TDDDG)

• Session cookies — login state and portal access (up to 30 days).
• Cloudflare Turnstile — bot protection on login, checkout, notice and cancellation forms. Cloudflare processes the challenge as our processor.
• PayPal FraudNet — loaded only on the PayPal / card checkout path; PayPal is the controller for that fraud check.
• Security tokens — protection against cross-site request forgery.
• Consent record — remembers your cookie choice.

Optional (only with your consent, § 25 Abs. 1 TDDDG)

• Preferences — remembers interface choices such as dismissed notices.
• Referral attribution — aluy_ref, 30 days: if you arrived through a partner’s referral link, remembers which partner referred you.

What we don’t use

No advertising cookies, no analytics or tracking pixels, no fingerprinting, no cross-site tracking, and no selling of data.

Separately from cookies, we keep a server-side security log of access to your account; see the Privacy Policy (“Account audit log”).

Controller: Julian Achter (Einzelunternehmer), trading as Aluy (Germany).

Updated 22 September 2026