Cookie Policy
Our cookie policy and how we use them
Last updated: 9 July 2026
1. What are cookies?
Cookies are small text files that a website stores in your browser when you visit it. Similar technologies – such as your browser’s local storage (localStorage) – serve the same purpose. In this policy we refer to all of these technologies collectively as “cookies”.
A distinction is made between first-party cookies, which we set ourselves, and third-party cookies, which come from third-party services embedded in our site. Some cookies are stored only for the duration of your visit (session cookies), while others remain for a defined period (persistent cookies). Cookies may be necessary for the website to function, or they may serve to measure usage and deliver advertising.
2. Controller and scope
The controller within the meaning of the General Data Protection Regulation (GDPR) is Univents GmbH, Schillerstraße 10, 74395 Mundelsheim, Germany. Email: hello [at] univents.app.
This cookie policy applies to the univents.app website, including our campaign landing pages (under /lp) and our free calculator tools, to the public booking pages of our customers that are hosted by Univents (among others under /book and /embed), and to the logged-in application area of Univents.
3. How we obtain your consent and how you can withdraw it
On your first visit we show you a cookie banner with three categories: Necessary (always active), Statistics and Marketing. The “Accept all” and “Necessary only” buttons are presented with equal prominence.
You can change your selection at any time. On our marketing pages and landing pages you will find the “Cookie settings” link in the footer for this purpose; on our customers’ booking pages you can reach the settings below the booking page.
We log your consent on the server so that we can demonstrate it in accordance with Art. 7(1) GDPR. We store the reference to your decision in the necessary cookie consent_token.
Legal bases
- For technically necessary cookies: Section 25(2) TDDDG (formerly TTDSG).
- For all other cookies (Statistics and Marketing): your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.
4. Categories of cookies
Necessary
These cookies are required for the operation of the website and the booking pages, for example for security, login and storing your cookie selection. They are always active and do not require consent.
Statistics
These cookies help us understand how the website and the booking pages are used so that we can improve them. They are set only after your consent.
Marketing
These cookies serve to measure the success of our advertising campaigns and to deliver relevant advertising to you. They are set only after your consent and are used exclusively on our marketing website, not on our customers’ booking pages.
5. Overview of the cookies we use
The following overview shows the cookies and comparable technologies we use, grouped by category. Some of the names are patterns (with *), as some providers set several cookies with the same name prefix.
Necessary
| Name / pattern | Provider | Type | Storage duration | Purpose |
|---|---|---|---|---|
| consent_token | Univents | Cookie (httpOnly) | 12 months | Stores the reference to your consent decision. |
| univents_cookie_consent | Univents | localStorage | Until deleted | Stored cookie selection (website). |
| booking_cookie_consent | Univents | localStorage | Until deleted | Stored cookie selection (booking pages). |
| csrfSecret | Univents | Cookie | Session | Security (protection against cross-site request forgery). |
| lang | Univents | Cookie | 12 months | Language preference. |
| sb-*-auth-token | Supabase | Cookie | Login session | Login session, only for logged-in users. |
Statistics
Only after your consent.
| Name / pattern | Provider | Type | Storage duration | Purpose |
|---|---|---|---|---|
| ph_* | PostHog (EU servers, hosted in the EU) | Cookie + localStorage | 12 months | Product and usage analytics. |
| _ga, _ga_* | Google Ireland Ltd. (Google Analytics 4) | Cookie | up to 24 months | Reach measurement and usage statistics. |
| intercom-* | Intercom R&D Unlimited Company | Cookie | Up to 9 months | Support chat on the website. The chat loads only after your consent and is therefore assigned to the Statistics category. |
Marketing
Only after your consent.
| Name / pattern | Provider | Type | Storage duration | Purpose |
|---|---|---|---|---|
| attribution_id | Univents | Cookie (httpOnly) | 12 months | Our own first-party attribution of which campaign led to a registration. It is deleted on refusal or withdrawal and is never set on our customers’ booking pages. |
| _gcl_* | Google Ireland Ltd. (Google Ads) | Cookie | 90 days | Conversion measurement for Google Ads campaigns. |
| _fbp, _fbc | Meta Platforms Ireland Ltd. (Meta Pixel) | Cookie | 90 days | Measurement and retargeting for Meta campaigns. |
| li_*, bcookie | LinkedIn Ireland U.C. (Insight Tag) | Cookie | 180 days | Measurement and B2B retargeting for LinkedIn campaigns. |
Functional / other
| Name / pattern | Provider | Type | Storage duration | Purpose |
|---|---|---|---|---|
| HubSpot Meetings | HubSpot Inc. | Cookie | Set by HubSpot | Only on our demo appointment-booking page: there we load HubSpot’s scheduler in order to provide the requested appointment booking. In doing so, HubSpot may set its own cookies. |
Note on PostHog: before consent, nothing is stored in your browser and no persistent identifier is created. Insofar as reach measurement already takes place before consent, it is exclusively cookieless and anonymous.
6. Third-party providers and international transfers
Some of the cookies listed above are set by third-party providers that we embed in our website. The providers’ own privacy notices additionally apply to the processing carried out by them.
Google Consent Mode v2
The Google tag loads technically for all visitors, but is set to “denied” by default. Without your consent no cookies are set as a result; only cookieless, aggregated signals are transmitted. Only with your consent to the Statistics category is analytics_storage activated, and with your consent to Marketing the storage for ad_storage, ad_user_data and ad_personalization.
The Meta Pixel and the LinkedIn Insight Tag, by contrast, load only after your consent to the Marketing category; before your consent they are not loaded.
International transfers
Google, Meta, LinkedIn, Intercom and HubSpot may transfer data to the USA. The basis for this is the EU-US Data Privacy Framework or – where applicable – the European Commission’s Standard Contractual Clauses. PostHog processes the data on servers in the EU.
7. Server-side conversion measurement
Only after your consent to the Marketing category do we additionally transmit certain conversion events – such as a registration or a demo booking – server-side to Google Ads and to Meta (Conversions API). Without your marketing consent, this server-side transmission does not take place.
8. Our customers’ booking pages
On our customers’ public booking pages – even when these appear embedded on the respective customer’s website – we do not use any marketing or advertising services. Google, Meta, LinkedIn and HubSpot services do not load there as a matter of principle, regardless of your selection in the cookie banner.
These booking pages have their own cookie banner. Without your consent, only necessary cookies and an anonymous, cookieless statistic are used there. After your consent, statistics cookies from PostHog are added – where applicable including a recording of the session flow with masked input fields, in order to improve the booking process.
If the respective provider (our customer) embeds its own analytics or marketing tools on its booking page – for example its own Google Tag Manager – it is the controller for those. These tools, too, load only after consent given via the banner. The privacy policy of the respective provider additionally applies.
9. Deleting or blocking cookies in your browser
Independently of our cookie banner, you can also manage cookies in your browser. In the settings of all common browsers you can delete cookies that have already been set and restrict or block the setting of new cookies. Please note that the website and the booking pages may no longer function fully if you block necessary cookies.
You can also delete the cookie selection stored in your browser’s local storage (localStorage) via your browser settings.
10. Changes to this policy
We adapt this cookie policy when the cookies we use or the legal framework change. The version published on this page applies in each case. The “last updated” date at the top indicates when we last updated the policy.
11. Contact
If you have any questions about this cookie policy or about data protection, you can reach us at: Univents GmbH, Schillerstraße 10, 74395 Mundelsheim, Germany. Email: hello [at] univents.app.
We respect your privacy
We use cookies for statistics and — with your consent — for marketing (Google, Meta, LinkedIn) to improve our advertising. Details: Cookie Policy