Business
ApplyLog in

Cookie Policy

Cookies are small text files a website stores on your device, for example so your cart stays filled, or so we understand how the shop is used. This page lists every cookie and similar technology we use, grouped by category. We only set non-necessary cookies with your consent, which you can change or withdraw at any time via “Cookie settings”.

Necessary

Enable core functions such as the cart, login and remembering your cookie settings; the shop does not work without them. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR) / § 25 (2) TDDDG.

CookiePurposeDuration
pp_consentStores your decision in the cookie banner12 months
pp_cartRemembers your shopping cart (cart ID)60 days (renewed on every visit)
pp_regionStores your chosen delivery country (availability & currency)180 days
pp_currencyStores your chosen currency (EUR/USD)180 days
pp.customerKeeps you signed in to your customer account14 days (renewed while you use it)
NEXT_LOCALEStores your language choiceSession (until you close your browser)

Statistics

Help us understand how visitors use the shop. This involves pseudonymous identifiers (e.g. cookie IDs) being processed and data being transmitted to Google. It lets us keep improving the shop.

Google Analytics 4

ProviderGoogle Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
PurposeWeb analytics/statistics. After a purchase we also transmit, server-side, a purchase event with client/session ID and order data to Google Analytics (Measurement Protocol) to attribute the purchase to the session.
Cookies_ga (2 years), _ga_* (2 years)
Legal basisArt. 6 (1) (a) GDPR, § 25 (1) TDDDG
US transferData may be transferred to Google LLC in the USA. This rests on the EU Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR); Google LLC is certified (the UK Extension and the Swiss-U.S. DPF apply to UK/Swiss visitors). Where the DPF does not apply in an individual case, the transfer is based on your consent (Art. 49 (1) (a) GDPR); the USA may then not provide an equivalent level of data protection, and authorities may access data without you having effective remedies.

Marketing

Enable personalised advertising and measuring the success of our ads. Data may be transferred to Google and Meta.

Google Ads

ProviderGoogle Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
PurposeConversion measurement and remarketing. After a purchase we also transmit a pseudonymised (SHA-256-hashed) form of your email address to Google (Enhanced Conversions) to attribute the purchase to the ad; the hashing happens in your browser.
Cookies_gcl_au (3 months), _gcl_aw (3 months), IDE (13 months)
Legal basisArt. 6 (1) (a) GDPR, § 25 (1) TDDDG
US transferData may be transferred to Google LLC in the USA. This rests on the EU Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR); Google LLC is certified (the UK Extension and the Swiss-U.S. DPF apply to UK/Swiss visitors). Where the DPF does not apply in an individual case, the transfer is based on your consent (Art. 49 (1) (a) GDPR); the USA may then not provide an equivalent level of data protection, and authorities may access data without you having effective remedies.

Meta Pixel

ProviderMeta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland
PurposeAd performance measurement and custom audiences (Facebook/Instagram). After a purchase we also transmit, server-side, a pseudonymised (hashed) form of your email address plus the _fbp/_fbc cookie IDs and order details to Meta (Conversions API) to attribute the purchase to the ad.
Cookies_fbp (3 months), _fbc (3 months), fr (3 months)
Legal basisArt. 6 (1) (a) GDPR, § 25 (1) TDDDG
US transferData may be transferred to Meta Platforms Inc. in the USA. This rests on the EU Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR); Meta Platforms Inc. is certified (the UK Extension and the Swiss-U.S. DPF apply to UK/Swiss visitors). Where the DPF does not apply in an individual case, the transfer is based on your consent (Art. 49 (1) (a) GDPR); the USA may then not provide an equivalent level of data protection, and authorities may access data without you having effective remedies.

Your consent ID

When you accept or reject cookies, your browser generates a random consent ID. It is stored together with your decision in our consent log as proof, without us knowing who you are. You can find your current ID in the cookie settings. To request proof of your consent, simply quote this ID.

© 2026 Puzzle Potato

ImprintPrivacy PolicyCookie PolicyTerms & Conditions