Legal
Cookie Notice
Last updated: 24 October 2026 · ePrivacy + GDPR
This Cookie Notice explains how CHERRY uses cookies and similar technologies on this website. It should be read with our Privacy Notice.
1. What are cookies?
Cookies are small files stored on your device. Similar technologies include local storage and pixels. Some are essential to run the site; others help us understand usage or remember preferences.
2. Categories we use
- Essential: security (CSRF), consent-choice storage, language preference storage, and core site operation. These do not require consent under ePrivacy as applied with the GDPR where strictly necessary for a service you request (here: remembering Essential-only / Accept-all and your explicit language choice).
- Analytics: not active in the current build. If introduced, they will be set only after consent.
- Marketing: not used. If introduced, they will require prior consent.
3. Inventory (current build)
Only the technologies below are in use. This table is the source of truth for duration and purpose.
| Name | Type | Category | Purpose | Duration (as implemented) |
|---|---|---|---|---|
cherry_csrf (local) / __Host-cherry_csrf (production TLS) |
HTTP cookie (HttpOnly, SameSite=Strict; Secure and __Host- prefix in production) |
Essential | CSRF protection for the enquiry API | Max-Age=7200 (2 hours), then expires |
cherry_cookie_prefs_v1 |
Browser local storage (not an HTTP cookie) | Essential | Stores your Essential-only / Accept-all choice on this device | Up to 12 months from last save, or until you clear site data / change choice |
cherry_lang_v1 |
Browser local storage (not an HTTP cookie) | Essential / functional preference | Stores your explicit UI language choice (de or en only). Allowlisted values; never used for advertising. Optional ?lang= in the URL is read once, validated, then removed from the address bar. |
Up to 12 months from last save, or until you clear site data / change language |
4. Your choices
On first visit (or after preferences expire) you can accept optional cookies or choose essentials only. Both choices are equally easy. Change anytime via Manage Cookies or Cookie preferences. Refusing optional cookies does not block the site. No analytics scripts run unless you accept them and they are later enabled in the product.
5. Retention (matches the live system)
cherry_csrf/__Host-cherry_csrf: set only when you use the contact enquiry API; expires after 2 hours (Max-Age=7200). Production uses the__Host-cookie name with Secure (ASVS 5.0 §3.3). It is not a “session cookie until browser close.”cherry_cookie_prefs_v1: kept in local storage for a maximum of 12 months from the last update. After that the site treats the choice as expired and asks again. You can clear it earlier via Manage Cookies or by clearing browser storage.cherry_lang_v1: kept in local storage for a maximum of 12 months from the last update. Change anytime via the header language control (globe). Clearing site data removes it.
6. Language preference
CHERRY’s primary interface language is English. German is available as an optional switch. We follow common localisation practice (including Google’s guidance on language versions and W3C/MDN advice that an explicit user language choice should be remembered and not silently overridden): we store only an allowlisted code (de / en) on your device when you choose, set lang on the document, and expose hreflang hints for crawlers. We do not auto-switch from the browser’s Accept-Language header. Legal notices on this build remain authored in English; ask us if you need a German copy of a specific document.