This Cookie Policy explains how Kopexa GmbH (hereinafter referred to as "Kopexa", "we", "us" or "our") uses cookies and similar technologies to recognize you when you visit our websites, including but not limited to kopexa.com, app.kopexa.com and their successor URLs, mobile or localized versions and associated domains/subdomains ("Websites"). This policy also applies to our mobile app ("App") and our communication platform ("Platform"). It describes which technologies we use, why we use them and what rights you have to control our use of these technologies.
What are cookies?
Cookies are small data files that are stored on your computer or mobile device when you visit a website, mobile app or online platform. They are used by online services to capture information about user activity, facilitate interaction with websites, apps and platforms, and make the user experience faster and more efficient.
Types of cookies
- First-party cookies: These cookies are set and managed directly by Kopexa.
- Third-party cookies: These cookies are set by external providers and enable features such as advertising, interactive content or analytics on our website, app or platform. Third-party providers may recognize your device when you visit our or other websites.
For more information about cookies and their impact on your online experience, visit www.aboutcookies.org.
Which cookies do we actually use?
Our cookie banner (c15t) distinguishes three categories: Necessary, Analytics/Measurement, and Marketing. Specifically, we use the following cookies and storage access:
Necessary (no consent required)
| Name | Purpose | Provider | Duration |
|---|---|---|---|
kopexa-consent-v2 | Stores your cookie preferences | Kopexa (first party) | up to 12 months |
kp_gdpr | Flags whether you are accessing from the EU/EEA (for correctly displaying the consent banner) | Kopexa (first party) | session or up to 12 months |
mkt_consent | Internal signal for whether marketing consent has been given (also used by the Meta Conversions API) | Kopexa (first party) | up to 6 months |
Analytics/Measurement (only with your consent)
| Name | Purpose | Provider | Duration |
|---|---|---|---|
ph_* (e.g. ph_phc_..._posthog) | Recognizes sessions and users for product analytics and error tracking | PostHog Inc., processed in the EU data region (eu.posthog.com) | up to 12 months |
Note: for web analytics, we additionally use Matomo (self-hosted at stats.kopexa.com). Matomo runs entirely server-side via the HTTP Tracking API and sets no cookies in your browser. Since no cookie is set, no consent is required for Matomo.
Marketing (only with your consent)
| Name | Purpose | Provider | Duration |
|---|---|---|---|
_fbp | Recognizes visits for advertising performance measurement and retargeting (Meta Pixel) | Meta Platforms Ireland Ltd. / Meta Platforms Inc., USA | up to 90 days |
In addition to the Meta Pixel in the browser, we transmit certain events (e.g., contact or demo requests) server-side via the Meta Conversions API. Email address and phone number, where available, are transmitted only in pseudonymized/hashed form (SHA-256). This server-side transmission does not set an additional cookie in your browser, but also only occurs with marketing consent given.
OpenAI Ads: advertising measurement
With your consent to the “Marketing” category, we use the OpenAI Ads Pixel and OpenAI Conversions API to measure the effectiveness of our advertisements in ChatGPT. The browser pixel is loaded only after this consent. Following successful delivery of a contact request, we also send a server-side conversion event. Browser and server use the same event ID to avoid double counting. The technical event name is appointment_scheduled; in this integration it indicates a submitted contact request and does not confirm a booked appointment.
The data processed includes event type, event ID, time and page address. Our server removes query parameters and URL fragments from that address. If available, the advertisement click identifier oppref and pseudonymous browser identifier obref are also transmitted. Our server integration does not transmit names, email addresses, telephone numbers or message contents to OpenAI. Loading the browser SDK involves connection data such as IP address and browser information. OpenAI's processing is additionally governed by its privacy notices and the advertising account settings.
The pixel may use the first-party cookies __oppref (up to 30 days) and __obref (up to 365 days). The legal bases are your consent under Art. 6(1)(a) GDPR and, for storage access, Section 25(1) TDDDG. Contact requests remain available without marketing consent. You may withdraw consent at any time through cookie settings with effect for the future; this integration then sends no further events.
OpenAI Ireland Limited is the recipient for processing EEA data. Under the Conversion Terms, Kopexa and OpenAI generally act as independent controllers. Where OpenAI processes data outside the EEA, the transfer mechanisms provided by its Ad Tools Data Processing Addendum apply. The cookie lifetimes above do not specify retention of event data already transmitted to OpenAI; the provider's purposes and retention rules apply to that data.
Further information: OpenAI Privacy Policy, Conversion Terms and Ad Tools Data Processing Addendum.
| Name | Purpose | Provider | Lifetime |
|---|---|---|---|
__oppref | Advertisement click attribution | OpenAI | up to 30 days |
__obref | Pseudonymous browser identifier for advertising measurement | OpenAI | up to 365 days |
Managing cookie preferences
You can decide which cookies you want to allow. To adjust your cookie preferences and learn more about the cookies used on our website, visit the cookie settings in the footer of this page and click the "Adjust cookie settings" link. You can withdraw your consent to the "Analytics/Measurement" and "Marketing" categories there at any time, with effect for the future.