Legal
Cookie Policy
We keep this website deliberately light. Strictly necessary cookies only by default; anything beyond that requires your explicit, revocable consent. This policy explains both.
Last updated: 03.08.2026
1. What Cookies Are
Cookies are small text files stored on your device. Similar technologies (localStorage, pixels) are treated identically below. Legal framework: § 25 TDDDG and the GDPR.
2. Categories We Use
Strictly necessary (no consent required — § 25(2) TDDDG). Used to deliver the site and remember your cookie decision and basic preferences (e.g., your audience selection on the homepage, the text size you chose in the header, or your answer when we offer you the German version of a page). Lifetime: 12 months. No tracking, no profiling. This category also includes Cloudflare Turnstile, the security verification protecting our forms against automated abuse; it processes technical signals solely for bot detection.
Statistics (consent required). We currently use no statistics or analytics cookies. Should we introduce them, they will be activated only after your explicit consent, and this policy will be updated first.
Functional & marketing (consent required). HubSpot (EU data residency) may set cookies when you use our forms or the website chat — for spam protection, session continuity, and, only after consent, visitor analytics. Lifetime: up to 6 months. No cookies are set by these services before you interact with them or give consent.
Appointment booking (consent required). The discovery-call page embeds Cal.com (Cal.com, Inc., United States). The embed is loaded only after you consent to the corresponding category; until then no connection to Cal.com is established and nothing is stored on your device. Once loaded, Cal.com sets its own cookies to keep the booking session and your time zone. Details in the Privacy & GDPR Center.
Services that receive data only after you consent to marketing. Alongside HubSpot we use Apollo (Apollo.io, United States) for company-level visitor identification: once you consent, the script receives your IP address and the pages you view, and matches the IP to a company. It sets no cookies and stores nothing on your device. Decline marketing and the script is never loaded at all.
The cookies themselves, named. Verified against the live site on 07.08.2026.
Set before you make any choice – strictly necessary. One only:
- pll_language – remembers which language version of the site you are viewing. Lifetime: 12 months. Set by the website.
Written the moment you accept or decline, so we do not ask again – strictly necessary:
- cmplz_banner-status – whether the banner has been answered
- cmplz_consented_services – which individual services you allowed
- cmplz_functional, cmplz_preferences, cmplz_statistics, cmplz_marketing – your decision for each category
- cmplz_policy_id – the version of this policy you agreed to, so we can ask again if it changes
Lifetime: 12 months. Set by the website (Complianz).
Set only after you consent – HubSpot, our CRM and form provider, EU data residency:
- hubspotutk – visitor identifier, so a form submission can be linked to the visit. Lifetime: 6 months
- __hstc – main analytics cookie. Lifetime: 6 months
- __hssc – the current session. Lifetime: 30 minutes
- __hssrc – records whether this is a new browser session. Lifetime: browser session
Before a cookie decision is made, only pll_language is present. No statistics or marketing cookie is set before consent.
Website chat (functional, no consent required). Our AI assistant stores five entries in your browser’s local storage, and only from the moment you open the chat. If you never open it, nothing is stored on your device. None of these entries are used for tracking or profiling, and none are shared with third parties.
- cxl_sid – conversation identifier, so replies reach the right conversation
- cxl_hist – the conversation itself, last 60 messages, kept in your browser
- cxl_email – an email address you entered in the chat, so you are not asked for it twice
- cxl_xl – whether you left the chat window expanded
- cxl_ver – storage format version, used to tidy up old entries after an update
They stay until you clear your browser data. “Clear chat” in the chat menu removes the transcript straight away.
Content notice (functional, no consent required). Occasionally we point visitors to a new whitepaper, article or webinar in a small notice. Two entries make sure it appears at a sensible moment and only once:
- cxlPromoT – seconds spent on this site during the current browser session, in session storage, so the notice waits until you have had a chance to read something. Deleted when you close the tab
- cxlPromoSeen… – in local storage, records that you have already seen or dismissed a particular notice, so it is not shown to you again
Not cookies, but the same purpose: tracking parameters in links. Links in our newsletters carry the parameters _hsenc and _hsmi, and your click first passes through a server operated by HubSpot before being forwarded to the destination. These are not stored on your device the way a cookie is, but they serve the same end: they let us see which link was clicked and connect that with your other visits to cxlever.io. We list them here because a policy covering only cookies would leave exactly this out. They apply only if you subscribed to our newsletter and consented; you can withdraw at any time via the unsubscribe link in every email. We do not measure whether or when an email is opened – that pixel was switched off on 12 August 2026. Details in the Privacy & GDPR Center.
Both are counters held on your device. They contain no identifier, are never sent to a third party, and are not used for profiling.
3. Your Choice
On your first visit, our cookie banner lets you accept all categories or continue with essential only — both with one click and equal prominence. You can change or withdraw your decision at any time via “Cookie Settings” in the footer. Withdrawal has effect for the future.
4. Managing Cookies in Your Browser
You can also delete or block cookies in your browser settings at any time. Blocking necessary cookies may limit site functionality.
5. Details and Contact
For the controller, your rights, and complaint options, see the Privacy & GDPR Center. Questions: [email protected]. Version: 07.08.2026.
