Cookie Policy
Last updated: November 2026
This policy is part of our Privacy Policy and Terms of Service.
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits and remember your preferences. We also use similar technologies such as local storage and tracking pixels — these are covered by this policy and referred to collectively as "cookies."
Workshop Weaver uses cookies to ensure the website functions correctly and — only with your explicit consent — for analytics and marketing purposes. In accordance with § 25 TDDDG (German Telecommunications and Digital Services Data Protection Act) and the EU ePrivacy Directive, we set analytics and marketing cookies only after obtaining your consent via our cookie banner. Without your consent, our website sets no cookie apart from the strictly necessary ones (Section 2). The one exception is in the application: if you are signed in, PostHog sets its cookie (Section 3). If you decline the banner or do not answer it, nothing is counted on our website; the application counts your visit without cookies (Section 3).
2. Strictly Necessary Cookies
These cookies are essential for the website to function and cannot be disabled. They do not require your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| CookieConsent | Workshop Weaver | Stores your answer to the cookie banner; shared between workshopweaver.com and app.workshopweaver.com | 1 year |
| NEXT_LOCALE | Workshop Weaver | Stores your preferred language | 1 year |
| preferred_lang | Workshop Weaver | Carries the language you picked in the language switcher between website and application; set only when you pick a language | 1 year |
3. Analytics and Marketing Cookies
These cookies collect information about how visitors use our website and application. The data is used to improve them. They are only set after you give consent — with one exception: if you are signed in to the application, PostHog is active and sets its cookie regardless of the banner (legitimate interest; see Privacy Policy Section 6.5).
| Service | Provider | Purpose | Data Location | Duration |
|---|---|---|---|---|
| PostHog | PostHog Inc. | Product analytics: page views and feature usage, linked to a pseudonymous identifier in the ph_* cookie. Only after consent, or while you are signed in to the application. | EU (eu.i.posthog.com) | Up to 1 year |
| Notifuse | Workshop Weaver (self-hosted) | Website analytics: page views, time on page, scroll depth and campaign source, linked to a pseudonymous visitor ID in browser storage (nf_*) | EU (news.workshopweaver.com) | Until you withdraw consent or clear your browser storage |
| Google Analytics 4 | Google Ireland Ltd. | Audience measurement on the website and in the application | EU / USA* | Up to 2 years |
| Google Tag Manager | Google Ireland Ltd. | Tag management — triggers other analytics tools | EU / USA* | Session |
| Google Ads | Google Ireland Ltd. | Remarketing and ad conversion measurement on the website and in the application (cookies _gcl_au, _gcl_aw) | EU / USA* | 90 days |
| Meta Pixel | Meta Platforms Ireland Ltd. | Remarketing and ad conversion measurement on the website and in the application (cookies _fbp, _fbc); joint controllership | EU / USA* | 90 days |
*Google and Meta may transfer data to the USA under the EU-US Data Privacy Framework (adequacy decision July 2023). Google LLC and Meta Platforms, Inc. are certified under this framework.
Marketing cookies: Google Ads and the Meta Pixel load only if you accept analytics and marketing cookies. They let us show our ads on Google, Facebook and Instagram to people who have visited our website (remarketing) and measure whether an ad led to a visit. For the Meta Pixel, we and Meta Platforms Ireland Limited are joint controllers (Art. 26 GDPR). Details, including retention: Privacy Policy Section 6.13. The same applies in the application (app.workshopweaver.com), where we also report a completed registration and a completed purchase. There, with your consent, Google Ads also creates the entry _gcl_ls in local storage, and the application records under ww_signup_conversion:* that a registration has already been reported. On the website, Google Tag Manager also loads a helper script from Meta via the content delivery networks jsDelivr and unpkg.
Counting without cookies in the application: If you decline the cookie banner or do not answer it, nothing is counted on our website. In the application, we still count your visit, but without cookies: PostHog sets no cookie and stores nothing in your browser. Instead, PostHog's servers form a hash from your IP address, user agent, host name and a salt that changes daily. It is not stored in your browser, changes every day and is not linked to you as a person or to an account you create later. We use these figures solely as aggregate statistics. The legal basis is Art. 6(1)(f) GDPR (legitimate interest); you may object under Art. 21 GDPR by writing to [email protected]. Details: Privacy Policy Section 5.7.
4. Source Attribution Cookie
If you accept both analytics and marketing in the cookie banner, we store in a first-party cookie where your visit came from. We use this information solely to attribute account registrations to the channel that brought the visitor (for example a search engine, an AI assistant, LinkedIn or a newsletter). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time via “Cookie Settings” in the footer; the cookie is then deleted. We do not build profiles from it, do not combine it with data from other websites and do not pass it on to third parties. Without your consent, nothing is stored on your device: the source of your current visit is held only in the open page, and if you follow a link to the application, its campaign parameters (utm_*) and the position of the button you clicked are added to that link. Ad click IDs (gclid, fbclid) are passed on only with your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| ww_attribution | Workshop Weaver | Stores campaign parameters (utm_*, gclid, fbclid), the landing page, the referring domain, the position of the button last clicked (CTA) and timestamps — for your first and your most recent visit — in order to attribute account registrations to the channel that brought the visitor. First-party, set only with your consent to analytics and marketing (Art. 6(1)(a) GDPR) and deleted when you withdraw it. The 30-day lifetime restarts with every visit. | 30 days |
Storage in the application
At app.workshopweaver.com we additionally store a small number of entries in your browser's local storage. These are not cookies: they are never sent to our servers and are removed when you sign out or clear your browser storage.
| Entry | Purpose | Duration |
|---|---|---|
| wasp:sessionId | Keeps you signed in (session identifier) | Until you sign out |
| ww_app_sidebar, ww_studio_density, agenda-view-mode, workshop-weaver-theme | Sidebar, density, view mode and theme preferences | Until you clear it |
| ww-collaborator-guest-name, ww-collaborator-guest-email | Pre-fills the comment form on share links | Until you clear it |
5. How to Control Cookies
You have several options to control or limit how cookies are used:
- Cookie banner: When you first visit our site, you can choose to accept all cookies, reject non-essential cookies, or customise your preferences. If you reject or do not answer, our website sets no analytics or marketing cookie and loads no analytics service; the application counts your visit only without cookies (Section 3). You can change your choice at any time via “Cookie Settings” in the footer; your choice also applies to app.workshopweaver.com.
- Browser settings: Most browsers allow you to view, manage, and delete cookies. Note that disabling all cookies may affect website functionality. Guidance for common browsers: allaboutcookies.org
- Opt-out tools: You can opt out of Google Analytics via Google's opt-out tool.
Strictly necessary cookies cannot be disabled as they are required for the website to function correctly. The cookie banner does not control cookieless counting or product analytics in the signed-in application; to object to them, write to [email protected].
Counting banner choices: When the cookie banner is shown and when you make a choice in it, your browser sends a short message to our server. It states only that the banner was shown or which choice was made (accept all, reject all or custom settings), together with the page type, the language and a shortened page address without parameters. We forward this to our analytics provider PostHog (EU) as an anonymous count, without any identifier or cookie: no cookie is read or set, no identifier is assigned, and your IP address is neither stored nor passed on. We use these figures solely as aggregate statistics on how many visitors agree to analytics, so that we can interpret our consent-based statistics correctly. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in aggregate statistics); you may object under Art. 21 GDPR by writing to [email protected].
6. Updates to This Policy
We may update this Cookie Policy from time to time, for example when we add or remove third-party services. Material changes will be communicated via our cookie banner or by email for registered users. The current version is always available at . workshopweaver.com/cookies.
7. Contact
For questions about our use of cookies, contact us at: [email protected]
For full details on how we process your personal data, see our Privacy Policy.