Cookie Policy
Last updated: April 2026
Your current choice
You have not made a choice yet.
Overview
This page explains which cookies and similar technologies we use on shipglobal.dev and why.
We use essential cookies (technically necessary), cookieless analytics (Umami), and — only with your explicit consent — session replay (OpenReplay, self-hosted in Germany).
1. Essential Cookies (Always Active)
These cookies are technically necessary for the website to function. They cannot be disabled in your browser.
| Name | Purpose | Provider | Duration |
|---|---|---|---|
| sb-access-token | Authentication and session management | Supabase (1st party) | Session |
| sb-refresh-token | Maintain automatic login | Supabase (1st party) | 7 days |
| NEXT_LOCALE | Stores your language setting (DE/EN) | Next.js (1st party) | 1 year |
| theme | Stores theme preference (light/dark) | 1st party | Persistent |
| cookie_consent | Stores your cookie choice (localStorage) | 1st party | Until withdrawn |
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) – these cookies are essential for the core functions of the website.
2. Analytics (Cookieless)
We use Umami Analytics, which works completely without cookies and does not store any personal data.
Privacy-Friendly Analytics
Umami Analytics is a privacy-friendly alternative to Google Analytics. It does NOT store IP addresses, does NOT use cookies, and does NOT create user profiles.
| Service | Purpose | Provider | Data Processing |
|---|---|---|---|
| Umami Analytics | Website usage statistics: visited pages, referrer, device type, browser | Self-hosted (Balane GmbH) on Railway | EU servers, fully anonymized |
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) – since no personal data is processed, no consent is required.
Retention period: Aggregated statistics, 24 months
More information: Umami Privacy Policy →
3. Session Replay (OpenReplay) — Consent Required
With your explicit consent, we record your interactions on the site (clicks, scrolls, console errors, network errors) anonymously to find bugs and UX issues. Form inputs are masked by default.
| Service | Purpose | Provider | Retention |
|---|---|---|---|
| OpenReplay | Bug and UX analysis through anonymised session recordings | Self-hosted (Balane GmbH) on Hetzner Falkenstein, Germany (replay.balane.tech) | 30 days, then automatically deleted |
Storage used: localStorage (e.g. __or_uid for anonymous session ID); no third-party cookies.
What is NOT recorded: Passwords, payment data and all form inputs (defaultInputMode = mask). Elements marked with data-openreplay-obscured are also masked.
Third-country transfer: None. Servers in Germany (Hetzner, Falkenstein).
Legal basis: Consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can withdraw your consent at any time using "Change settings" above.
What Umami Does NOT Do:
- ✗Store IP addresses
- ✗Set cookies
- ✗Create user profiles
- ✗Cross-site tracking
- ✗Sell data to third parties
4. Managing Cookies
In Your Browser
Most browsers allow you to control cookies:
- Chrome: Settings > Privacy and Security > Cookies
- Firefox: Settings > Privacy & Security
- Safari: Settings > Privacy
- Edge: Settings > Cookies and Site Permissions
Note: Blocking essential cookies may affect website functionality.
5. Further Information
For more information about privacy on our website, please visit our:
For questions, contact us at: contact@balane.tech