This Cookie Policy explains how parat.io uses cookies and similar technologies (local storage, IndexedDB, session storage) on parat-io.vercel.app. For the broader picture of how we handle personal data, see the Privacy Policy.

Storing or reading information on your device requires your prior consent unless the storage is strictly necessary to deliver the service you explicitly requested (§25 TTDSG, implementing the ePrivacy Directive). Analytics, marketing, and most personalisation do not count as strictly necessary. Rejecting non-essential storage must be just as easy as accepting.

• firebase:authUser:*(IndexedDB) — keeps you logged in. Until sign-out or 60 days.
• firebase-installations-database(IndexedDB) — abuse prevention / rate limiting.
• firebase-heartbeat-database(IndexedDB) — SDK health telemetry (no personal data).
• NEXT_LOCALE(cookie) — remembers your UI language (de / en / fr). 1 year.
• parat_consent(cookie, planned) — records your cookie-banner choices. 12 months.

Currently none. We do not run Google Analytics, Plausible, PostHog, Meta Pixel, or any comparable tool at this time. Any future addition will be listed in this table and will require your consent through a cookie banner before being loaded.

Even without setting cookies, the browser makes requests to third-party services while using parat.io. Each transmits your IP and User-Agent to the receiver:

• fonts.googleapis.com, fonts.gstatic.com — Material Icons font (planned to be self-hosted).
• *.basemaps.cartocdn.com— Leaflet map tiles.
• nominatim.openstreetmap.org— geocoding fallback.
• maps.googleapis.com— optional geocoding, called server-side.
• *.firebaseapp.com, *.firebasestorage.app, firestore.googleapis.com— authentication, database, file storage.

When the consent banner is deployed (before we ship any non-essential storage):

• A banner appears on your first visit.
• Equal-weight buttons for “Accept all” and “Reject all”.
• A “Preferences” pane to accept or reject each category individually.
• Your choice is saved in the parat_consent cookie for 12 months.
• The banner is re-openable from the footer link “Cookie preferences”.
• You can withdraw consent at any time; withdrawal takes effect immediately.

We respect the Global Privacy Control (GPC) signal — if your browser sends it, we treat it as a rejection of non-essential storage for your session. We do not treat the older DNT header as legally binding.

Questions about cookies or tracking? Email [CONTROLLER EMAIL].