Cookie Policy
v2 ·
Effective: 22 May 2026. Version 2.
This page describes the cookies and local-storage TrackJet uses, why we use them, and how to control them. The short version: TrackJet uses ONE strictly-necessary cookie for form-submission security; everything else is opt-in and feature-driven. There are no cross-site tracking cookies.
1. What is a cookie? #
A cookie is a small text file a website asks your browser to store. The browser sends it back on subsequent requests so the site can recognise you, keep you logged in, or remember preferences. Local storage works similarly but lives on your device only — it is never sent to a server.
2. Cookies and storage TrackJet uses #
Strictly necessary
| Name | Purpose | Storage | Duration | Legal basis |
|---|---|---|---|---|
tj_csrf | Anti-CSRF token for POST forms (search, contact). | Cookie (1st-party) | Session | ePrivacy Art. 5(3) — strictly necessary |
tj_locale | Stores the language you picked (de/en/es) so the site stays in that language across requests. | Cookie (1st-party) | 1 year | ePrivacy Art. 5(3) — strictly necessary for the language-selection feature you used |
Functional — only on features you actively use
| Name | Purpose | Storage | Duration | Legal basis |
|---|---|---|---|---|
tj_my_shipments | Locally saved shipments from the "my TrackJet" feature. Never sent to the server. | localStorage | Until you clear it | ePrivacy Art. 5(3) — strictly necessary for the bookmark feature you actively enabled |
tj_theme | Dark / light mode preference. | localStorage | Until you clear it | ePrivacy Art. 5(3) — strictly necessary for the theme feature you used |
tj_sidebar_groups | Which sidebar collapsibles are open (admin panel only). | localStorage | Until you clear it | ePrivacy Art. 5(3) — strictly necessary for the layout-persistence feature |
Consent-gated third-party cookies
| Provider | Purpose | Set when | Legal basis |
|---|---|---|---|
| Google AdSense | Personalised advertising and frequency capping. | Only after you accept ads in the cookie banner. The site ships ad-free by default. | ePrivacy Art. 5(3) + GDPR Art. 6(1)(a) — consent |
| Cloudflare | Bot protection — temporary cookie set by the CDN edge if it suspects automated abuse. | On all requests (CDN-level, applied uniformly) | ePrivacy Art. 5(3) — strictly necessary for security |
3. What TrackJet does NOT use #
- No cross-site tracking cookies.
- No analytics cookies (no Google Analytics, no Plausible, no Matomo — TrackJet does its own privacy-first server-side analytics with daily-rotating salts; see /privacy).
- No social-media share/like trackers.
- No "fingerprinting" libraries.
4. How to control cookies #
Inside TrackJet
The cookie banner at the bottom of every page lets you accept, decline, or fine-tune categories. Your choice is remembered for 12 months. Click the small "Cookies" link in the footer to reopen it.
In your browser
All modern browsers let you block cookies globally or per site. The exact steps vary; the official guides:
Blocking the strictly-necessary cookies will break form submission — that's why they exist. Blocking the functional ones means "my TrackJet" and the theme toggle stop persisting between sessions.
5. Changes to this policy #
Material changes are announced via the "Effective" date at the top of this page. The previous version is preserved in the admin audit log so you can see what changed.
6. Contact #
For cookie or privacy questions: [email protected]. See the full /privacy page for everything else.