Cookies and analytics settings
Effective: 2026-10-07. Version: cookies-2026-10-07-v2.
The cookies necessary for using the service ensure login, form security, language settings, and remembering the cookie choices. The optional traffic measurement can be enabled separately; you can use all available services even if you reject it.
| Cookie | Purpose | Lifetime |
|---|---|---|
| __Host-shbv | Necessary session, access and form protection | Session; application initiates a new session after 30 minutes of inactivity |
| __Host-shbv-language | Remembering the selected language as well as the display of dates and numbers | Up to 1 year |
| __Host-shbv-consent | Remembering cookie settings | Up to 180 days |
Own aggregated analytics
After authorization, our own measurement only counts the route, language, day of the public page, and the mobile or desktop device group. In our own measurement, there is no unique visitor identifier, IP address, email, {"VIN":1} or report token. Consent and daily summaries are stored for up to {"180":1} days.
Google Analytics
With the same analytic consent, you also authorize the Google Analytics {"4":1} service. Google processes public page views, visitor and session IDs, as well as browser and device technical data to measure traffic. The set lifespan of analytic cookies (_ga and those starting with _ga_) is up to {"180":1} days. During connection with Google's servers, the IP address is technically accessible to the service provider.
The page title sent to Google Analytics does not contain query parameters or URL fragments, and we do not send the referrer page URL. We do not transmit {"VIN":1}, email, order data, or login or sharing tokens to analytics. Private pages are excluded. We do not allow ad personalization or Google Signals measurement.
Before authorization, we do not load the Google tracking code. Upon refusal or withdrawal, tracking stops and we delete accessible Google Analytics cookies. We respect Do Not Track and Global Privacy Control signals. Retention of measurement data managed by Google is governed by analytic account settings.
Network protection and external sites
Network protection may also apply a technical, abuse-prevention cookie depending on the specific security situation. When proceeding to the Stripe payment interface or a manufacturer's authorization page, the respective provider's own information applies to the cookies used there. Cookies on payment and manufacturer pages may only be affected when visiting that specific page.