Cookies & Analytics

Browser storage used by the site

Analytics choice

Your accept/reject choice is stored in localStorage under thinkpunk-ga4-consent-v1 for 180 days. The stored value records the choice and date; when it expires, the notice is shown again. It is not a cookie.

Basket

The basket stores product slugs and quantities in language-specific localStorage keys. It has no automatic expiry; the basket is cleared when checkout completes.

Language

The selected language is stored in localStorage without an automatic expiry set by the site.

Order recovery

The browser keeps a checkout proof linked to the public order identifier, without an automatic local expiry. The server expires download links after 72 hours; the proposal is to delete each token record 30 days after expiry, but automatic deletion is not currently active.

Google Analytics 4

The Measurement ID is G-X4NEP004LJ. The Google script is not in the initial HTML; it is loaded only after you explicitly accept. If you reject, Analytics remains off. You can change your choice at any time using “Cookie preferences” in the footer.

After consent, the site sends only manual page_view events for canonical public paths and page titles. Public site pages may be measured, including Contact, Impressum, and these notices. Query strings and external referrers are not sent. Basket, checkout, order confirmation, order access, downloads, and unrecognised paths are excluded.

The code denies ad storage, use of data for advertising, and ad personalisation, disables the initial automatic pageview, and sends a referrer only when it is a previous public page. These controls describe the site code, not the active GA4 property settings; account-level automatic measurement and other options have not been checked.

Withdrawal sends a denied consent update and deletes _ga and _ga_* cookies from this browser. It does not retrospectively delete data already received by Google. For standard properties, Google documents 2- or 14-month retention options for user and event data; the actual ThinkPunk® property setting has not been checked.

Google states that for users in Switzerland, the EU, and the UK it derives coarse location from an IP address and then discards the IP before logging. Analytics therefore does not log or store that IP according to this documentation, although transient processing may occur for connection and location purposes.

PayPal and Instagram content

The PayPal SDK loads during checkout and communicates directly with PayPal. PayPal may use cookies or similar technologies under its own settings. The site does not control PayPal cookie names, lifetimes, or deletion; see the provider’s privacy notice.

The Instagram page does not use an iframe: the server requests public posts from Meta’s Graph API and the browser loads their media from Instagram/Meta CDNs. Those CDN requests disclose ordinary browser technical data to Meta, including the IP address.

External services and documented terms

Providers may process data outside Switzerland. Resend states that customer data, email content, logs, and account records are stored in the United States regardless of the email sending region. The sending region changes email routing, not data residency.

Resend documents 30-day email and log retention on Free, Pro, and Scale plans, with flexible retention for Enterprise. ThinkPunk®’s active plan and sending region have not been checked. Copies in the recipient mailbox also follow that service’s settings.

Replit documentation says publishing geography is selected per project and controls where compute and storage are hosted; this project’s chosen region has not been checked. General documentation describes production PITR with a default 7-day window and options up to 28 days on some plans; scheduled backups are separate and depend on settings and plan. These terms do not establish which options are active for this account.

PayPal applies its privacy statement and the terms for the payment product actually used. Its public DPA for card and direct-debit processing does not automatically apply to PayPal Wallet. Meta processes requests to its API and CDNs under its privacy policy; account-specific settings and terms have not been checked.