OrbitPage-Rechtsdokumente

Cookie-Richtlinie

Wie OrbitPage verwendet es optionalen Browserspeicher, Sicherheitstools und Analysen.

In Kraft und aktualisiert unter: 26. Juli 2026

Diese Übersetzung dient der besseren Verständlichkeit. Maßgeblich bleibt die englische Fassung.

1. Scope

This policy covers orbitpage.com, including the website, login and dashboard, and explains OrbitPage's consent controls on hosted user pages at orbitpage.net. OrbitPage does not load its own Google Analytics property on hosted user pages. A page owner may enable their own analytics or external services and remains responsible for any additional notice and consent required for those choices.

2. What these technologies are

Cookies are small values stored by a browser and sent with later requests. Local storage and IndexedDB keep values in the browser until they are cleared, while session storage normally lasts for the current tab. Software development kits can use comparable identifiers to maintain a session or assess abuse.

3. Necessary storage

Firebase AuthenticationMaintains the sign-in state requested by the user and protects account access. Firebase may use IndexedDB, local storage and provider-domain cookies according to the selected sign-in method.

Firebase App Check / reCAPTCHA EnterpriseProduces security and attestation tokens and evaluates browser, device and request signals to distinguish legitimate app traffic from abuse.

Dashboard session cacheStores a short-lived workspace snapshot and the embedded editor's authenticated session in session storage so reloads are faster and the editor can call the correct tenant API.

Chat preferencesStores a random chat session identifier, the resized panel dimensions and whether the attention cue has been shown. These values remain in session storage for the current tab.

Interface preferencesStores settings requested by the user, such as editor onboarding state, sidebar state, language, display choices or page-specific consent choices.

orbitpage_consent_v1Stores the visitor's analytics choice in local storage until it is changed or browser data is cleared. This prevents repeatedly asking the same question.

Public-page consent recordStores the visitor's necessary, preference, analytics and marketing category choices for that hosted page. It prevents an external embed from loading before the required category is granted.

Necessary technologies operate because they are required to provide a requested login, security, dashboard, preference or consent-management function. Blocking them can prevent the relevant feature from working.

4. Optional Google Analytics

OrbitPage uses Google Analytics 4 only on explicitly listed platform pages on orbitpage.com, and only after the visitor selects Allow analytics. Advertising storage, Google signals, advertising user data and ad personalisation are disabled. Email addresses, usernames, Firebase UIDs, tenant IDs and page content are not intentionally sent as analytics event parameters.

_gaFirst-party analytics cookie used to distinguish visitors. Google's default duration is up to two years, subject to the property configuration and browser limits.

_ga_<measurement-id>First-party analytics cookie used to maintain session state. Google's default duration is up to two years, subject to the property configuration and browser limits.

5. Provider flows you choose to open

Selecting Google sign-in opens Google's authentication flow. Selecting a paid plan or billing management opens Stripe Checkout or the Stripe Customer Portal. A Shop seller is redirected to Stripe-hosted connected-account onboarding and management, and a Shop buyer is redirected to Stripe Checkout. Those providers may use their own necessary, security and fraud-prevention technologies on their domains. Their policies apply while you use those provider pages.

6. Partner blocks and external content on user pages

A page owner can add public content from independent services. OrbitPage supports social and video services such as Instagram, Facebook, YouTube, Vimeo, Loom, TikTok and Giphy; audio services such as Spotify, Apple Music, Deezer, SoundCloud and Mixcloud; and utility services such as Google Maps, Google Calendar, Calendly, Typeform and Google Forms.

Ordinary external links do not load the destination service until a visitor chooses to open them. Embedded partner content is initially replaced with a consent notice and no request is sent to the provider. The embed loads only after the visitor grants the category configured for that block, normally Preferences for maps, booking, forms and audio players or Marketing for social and video content. The page owner can change the category and is responsible for using an appropriate lawful setting.

After an embed is allowed, the external provider can receive the visitor's IP address, browser information, referring page and provider-specific cookies or identifiers. Existing sign-in state with that provider can also affect what it displays. OrbitPage does not control those technologies. The provider's own privacy and cookie terms apply.

7. Owner analytics on hosted pages

An eligible page owner may configure their own Google Analytics tag. It is separate from OrbitPage's platform property and remains blocked until the public-page visitor grants analytics consent. The page owner is responsible for the property configuration, data retention, notices, legal basis and responses to visitor rights requests.

8. Manage or withdraw consent

The first consent prompt presents optional analytics separately from essential storage. You can change or withdraw your choice at any time. Withdrawal updates Google Consent Mode, removes accessible OrbitPage-domain _ga* cookies and reloads the page without the analytics tag. Provider or browser storage outside OrbitPage's domain may need to be cleared in browser settings.

9. Browser controls and Global Privacy Control

You can delete or block storage through browser settings. Because necessary storage supports security and requested account functions, blocking it can stop sign-in or dashboard features. OrbitPage does not use advertising cookies or sell personal data; optional analytics remains off unless consent is recorded.

10. Updates and contact

This policy is updated when browser storage, providers or purposes materially change. Questions can be sent to contact@orbitpage.com.