Legal
Cookie policy (EU)
This cookie policy explains which cookies and comparable technologies are used on crazysack.com, what they are for and how long they are stored. It supplements our privacy policy.
As at: 26 August 2026.
1. In short
Without your consent we only set cookies that are technically necessary to run the shop — cart, login and security. Statistics and marketing services are only loaded after you have agreed. Before that, no connection to Google or Microsoft is established and no data is transferred to third parties.
You can change your choice at any time: the Cookie settings link in the footer of every page.
2. What are cookies?
A cookie is a small text file that your browser stores when you visit a website. Local storage and session storage work in a comparable way — they also place information on your device. Legally they are treated the same, which is why we list them in the tables below.
3. Legal basis
For technically necessary storage, § 25(2)(2) of the German TDDDG applies (until May 2024: TTDSG) — it is permitted without consent because the shop does not work without it. Any storage beyond that takes place only with your consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Consent is voluntary and can be withdrawn at any time with effect for the future.
4. Technically necessary — no consent required
| Name | Type | Provider | Purpose | Storage period |
|---|---|---|---|---|
cs_cart_id | Cookie (httpOnly) | Crazysack | Links your cart to you so it survives as you browse on | 12 months |
cs_customer | Cookie (httpOnly) | Crazysack | Keeps you signed in to your customer account | 12 months |
cs_consent | Local storage | Crazysack | Stores your cookie choice so the banner does not reappear on every visit | 6 months |
cs_locale_hint | Local storage | Crazysack | Remembers that you dismissed the notice about another language version | until you delete it |
cs_purchase_… | Session storage | Crazysack | Prevents an order being counted twice when the thank-you page is reloaded | until the tab is closed |
__stripe_mid | Cookie | Stripe Payments Europe, Ltd. | Fraud prevention during payment | 12 months |
__stripe_sid | Cookie | Stripe Payments Europe, Ltd. | Fraud prevention during payment | 30 minutes |
The two Stripe cookies are set only on the checkout page, that is, once you complete an order. They are required for payment processing; without them Stripe cannot detect fraudulent payments and cannot carry out the payment.
5. Statistics — only with your consent
Google Analytics 4, provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
| Name | Type | Purpose | Storage period |
|---|---|---|---|
_ga | Cookie | Distinguishes visitors from one another | 2 years |
_ga_<container ID> | Cookie | Maintains the session state for analysis | 2 years |
We use the analysis to see which pages are found and where visitors drop off. IP addresses are processed by Google in truncated form.
Microsoft Clarity, provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Clarity creates heatmaps (which areas of a page are clicked and read) and records sessions: mouse movements, scrolling and clicks are assembled into a playable recording. Entries in form fields are masked in the process — names, addresses, email addresses and payment data are not visible in the recordings.
| Name | Type | Purpose | Storage period |
|---|---|---|---|
_clck | Cookie | Links page views to the same Clarity user ID | 1 year |
_clsk | Cookie | Combines the page views of one session into a single recording | 1 day |
CLID | Cookie (clarity.ms) | Identifies which pages were visited for the first time | 1 year |
ANONCHK | Cookie (Microsoft) | Checks whether click data is used for statistics only | 10 minutes |
MUID, MR, SM | Cookies (Microsoft) | Recognition and synchronisation across Microsoft services | up to 13 months |
We use Clarity to see where visitors get stuck in the shop — for example at which point of the checkout they abandon it. The service is only loaded after you have consented to statistics; if you withdraw your consent, the recording stops immediately.
6. Marketing — only with your consent
Google Ads, provider Google Ireland Limited.
| Name | Type | Purpose | Storage period |
|---|---|---|---|
_gcl_au | Cookie | Attributes an order to the preceding ad click (conversion measurement) | 90 days |
Cookies from doubleclick.net and google.com | Cookie | Recognition for remarketing and measuring ad performance | up to 24 months |
Google Customer Reviews, also Google Ireland Limited. After an order we can offer you, on the thank-you page, to take part in a Google survey. A widget with the seller rating may also be shown. Google receives the order number, email address, delivery country and estimated delivery date — and only if you agree in Google's own dialogue.
| Name | Type | Purpose | Storage period |
|---|---|---|---|
Cookies from google.com, gstatic.com and apis.google.com | Cookie | Survey opt-in and display of the seller rating | up to 6 months |
7. Transfer to the USA
Google Analytics, Google Ads and Google Customer Reviews belong to Google LLC, Microsoft Clarity to Microsoft Corporation — both based in the USA. Where consent is active, personal data may be transferred there. Google LLC and Microsoft Corporation are certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses under Art. 46(2)(c) GDPR apply. Nevertheless, a level of protection fully equivalent to European standards cannot be guaranteed — in particular, access by US authorities cannot be ruled out. By giving your consent you expressly agree to this transfer under Art. 49(1)(a) GDPR.
8. What we deliberately do not use
- No Google Fonts from Google's servers. Our fonts are hosted on our own server; loading a page sends no request to Google.
- No social media plugins, no embedded videos, no map services. This removes the usual silent connections to Facebook, YouTube or Google Maps.
- No third-party advertising tracking apart from the Google services named above.
9. Changing or withdrawing consent
- Cookie settings in the footer of every page reopens the selection dialogue. Your new choice takes effect immediately.
- Your choice expires after six months; after that we ask again.
- You can also delete or block cookies in your browser settings. Note: if you block all cookies, the cart and login will no longer work.
- Withdrawal does not affect the lawfulness of processing carried out up to that point.
10. Your rights and contact
Access, rectification, erasure, restriction, data portability and objection — the details are set out in the privacy policy. For questions about this cookie policy you can reach us at hello@crazysack.com; full provider details are in the legal notice.