Cookies are small text files your browser stores; besides them there is storage inside the browser itself (local storage) and identifiers a service places there. Under Section 25 (1) of the German TDDDG (Telecommunications Digital Services Data Protection Act) a provider may store or read information on your device only with your consent. Exempt under Section 25 (2) no. 2 TDDDG is what is strictly necessary for us to provide a service you have explicitly requested. This page is organised along that line. The German version of this page is the legally binding one.
Without consent: strictly necessary
These are stored on every visit because the site does not work without them. They contain no advertising or tracking identifiers.
| Name | Purpose | Duration |
|---|---|---|
| gamenavigator-session | Session: keeps you recognised as the same visitor between two page views, carries form state, sign-in and the navigator's chat state | 2 hours from the last request |
| XSRF-TOKEN | Protection against forged form submissions (cross-site request forgery) | 2 hours |
| remember_web… | Only if you choose "stay signed in" when signing in: keeps you signed in | up to 5 years or until you sign out |
| Consent storage (cookie and local storage of the Google consent dialog) | Remembers your choice in the consent dialog so that we do not ask on every visit; holds your choice in the format of the IAB Transparency & Consent Framework 2.2 | up to 13 months |
| gn_consent | Remembers your choice about measuring reach (time, version of the question, purpose chosen) so that we do not ask on every visit | 6 months |
The navigator counts your daily quota without a cookie: a hash value is derived server-side from your IP address and browser identification (see Privacy Policy). Nothing is stored or read on your device for that.
Only with consent: measuring reach (Matomo)
We would like to know which pages get read. For that we use Matomo — software we run ourselves, on our own server at www.provimedia.de/analytics/. The counts never leave our house: nothing is passed to a third party, nothing is transferred to a third country.
Nothing happens before you agree. Only your click on "Allow" loads the Matomo code at all. Until then not a single request goes to the measurement server — not even the one that would fetch the counting script, because that request alone would transmit your IP address. If you decline, nothing is loaded and nothing is stored, and we do not ask again.
Cookies Matomo sets as first-party cookies on this domain after your consent (source: Matomo, FAQ "What are the cookies created by Matomo?", retrieved 21 September 2026):
| Name | Purpose | Duration |
|---|---|---|
| _pk_id | Unique visitor id, so that a returning visit is recognised | 13 months |
| _pk_ses | Data about the visit in progress | 30 minutes |
| _pk_ref | Referrer: where you came from | 6 months |
| _pk_cvar | Session-scoped extra attributes | 30 minutes |
If you withdraw consent, we delete these cookies at that moment.
Legal basis: § 25 (1) TDDDG and Art. 6 (1) (a) GDPR (consent).
Only with consent: advertising (Google AdSense)
We deliver ads through Google AdSense. Only once you agree in the consent dialog do we load Google's advertising code, and only then can Google and the advertising partners named in the dialog set and read cookies. Until then consent is technically set to "denied" (Google Consent Mode v2 with the default "denied" for advertising cookies, advertising data and personalisation).
Typical Google cookies after your consent (domains google.com, doubleclick.net, googlesyndication.com):
| Name | Purpose | Duration |
|---|---|---|
| IDE | Delivery and measurement of Google ads on third-party websites; with personalisation only where you have consented to it | 13 months |
| _gads, _gpi | Enables Google ads to be shown on this site and attributes ad delivery | 13 months |
| NID | Ads for users not signed in to Google, remembering preferences | 6 months |
| DSID | Recognition of a user signed in to Google on third-party websites | 2 weeks |
| test_cookie | Checks whether your browser accepts cookies | 15 minutes |
The complete list maintained by Google is at Types of cookies used by Google. Which partners work with Google and what they use data for is shown in the consent dialog under "Partners" and "Purposes".
Legal basis: Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR (consent). As a Supporter you see no ads; the advertising code is not loaded for you.
Payment (Stripe)
On Stripe's payment page and in Stripe's customer portal, Stripe sets its own cookies that are needed for payment and fraud prevention (for example __stripe_mid, __stripe_sid). They are only set when you start the payment process, that is, when you use a service you explicitly requested (Section 25 (2) no. 2 TDDDG). On GameNavigator's own pages Stripe sets no cookies.
Partner links
Viewing a page with partner links stores nothing and transmits nothing to the partner. Only with the click do you leave GameNavigator; a cookie to attribute the commission is then set, if at all, by the partner on its own site.
Change or withdraw consent
You can change or withdraw your choice at any time with effect for the future:
- for measuring reach via the link "Change your choice on measurement" in the footer of every page; it brings the question back, and your new answer takes effect at once,
- for advertising via the link "Privacy settings" in the footer of every page; it opens the consent dialog again,
- via your browser's cookie settings, where you can delete cookies individually or block them for certain domains,
- for personalised Google advertising additionally in the ad settings of your Google account.
Declining is as easy as accepting: the dialog offers both with equally designed buttons, and the site is fully usable without consent.
Proof of consent
Your choice is recorded in the consent storage on your device (time, version of the dialog, purposes chosen). Beyond that we keep no server-side log with personal reference.