Cookie Policy

This cookie policy is based on the following legal foundations:

§ 25 TDDDG (German Telecommunications Digital Services Data Protection Act):
Storing information on the user's device or accessing stored information is only permitted with consent or if strictly necessary.

Art. 6 GDPR:
• lit. a: Consent for non-essential cookies
• lit. b: Contract fulfillment for essential cookies
• lit. f: Legitimate interests for security cookies

ePrivacy Directive (2002/58/EC):
European directive for privacy protection in electronic communications.

Cookies are small text files stored on your device when you visit a website. They are commonly used to make websites work more efficiently and provide information to website operators.

Types of Storage:
• Cookies: Small text files in your browser
• Local Storage: Data stored locally in your browser
• Session Storage: Temporary data deleted when browser closes

Cookies can be "First-Party" (set by us) or "Third-Party" (set by other services). We primarily use first-party cookies.

We use cookies for the following purposes:

Authentication (technically necessary):
• Maintaining your login across sessions
• Securing your account with HTTP-only cookies
• Validating your session on each request

Preferences (with consent):
• Storing your theme preference (dark/light mode)
• Storing UI settings like sidebar state
• Personalizing your experience

Analytics (with consent):
• Counting page views and unique visitors
• Understanding which features are most used
• Improving our service based on usage patterns

We do NOT use cookies for:
• Advertising or ad targeting
• Cross-site tracking
• Selling data to third parties

You have control over cookies:

Consent Management:
• You'll be asked for consent on first visit
• You can withdraw consent at any time
• Essential cookies cannot be disabled (required for login)

Browser Settings:
• Most browsers allow blocking or deleting cookies
• You can set your browser to notify you when cookies are set
• Private/Incognito mode limits cookie storage

Consequences of Disabling Cookies:
• You won't be able to stay logged in
• Your preferences won't be saved
• Some features may not work properly

We use minimal third-party services:

Hosting (Vercel):
• May set performance-related cookies
• Subject to their own privacy policies

Security (Cloudflare):
• Turnstile bot protection (cf_clearance cookie)
• DDoS protection and CDN

We do NOT use:
• Google Analytics
• Facebook Pixel
• Advertising networks
• Social media tracking pixels

We implement security measures for our cookies:

HTTP-Only Cookies:
• Session cookies cannot be accessed by JavaScript
• Protects against XSS attacks

Secure Flag:
• Cookies are only sent over HTTPS in production
• Prevents interception on insecure connections

SameSite Attribute:
• Set to "Lax" to prevent CSRF attacks
• Cookies are not sent with cross-site requests

Expiration:
• Session cookies expire after 7 days
• Automatic cleanup of expired sessions

We may update this cookie policy from time to time:

• Changes will be reflected in the "Last updated" date
• Significant changes will be announced via email or in-app notification
• Continued use of the service after changes constitutes acceptance

For questions about cookie usage:

Email: privacy@extasy.asia
Website: https://extasy.asia/support

For general privacy inquiries, see our Privacy Policy.