Cookies and on-device storage
A complete list of everything we leave on your device, why, and for how long.
Last updated: 17 August 2026
In case of discrepancies between the language versions, the German version prevails.
Why there is no consent dialog
We use no advertising cookies, no third-party cookies and no cross-site tracking of any kind. Everything listed below is either technically necessary to run the service or remembers a setting you chose yourself.
Under section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG), storage of that kind requires no consent. That is why you see a short notice rather than a dialog with choices.
If we ever add measurement or a tool that does require consent, we will put a real consent mechanism in place first and update this page.
Local storage
Local storage stays in your browser and is not sent to our server with every request.
| Key | Contents | Purpose | Lifetime |
|---|---|---|---|
| xtwo-locale | A language code | Remembers the interface language you chose. | Until you clear it |
| xtwo-theme | Light or dark theme | Remembers the interface theme you chose. | Until you clear it |
| xtwo:selectedEvent | Details of the event you last selected, including its title, date and location | Opens the dashboard on the event you last worked on without refetching it. Present only for signed-in hosts. | Until you clear it or sign out |
| xtwo-cookie-notice | A flag that the notice was dismissed | Stops the cookie notice from reappearing on every visit. | Until you clear it |
We use no sessionStorage anywhere in the application.
Visit measurement
We use Vercel Web Analytics. It sets no cookies and leaves no identifier on your device. It distinguishes visitors only through a hash derived from data your browser sends with the request anyway, and that hash is discarded after 24 hours.
What is recorded: time, page address, referrer, approximate location at country or city level, device type and browser. We cannot identify you as a person or follow you across other sites.
Third-party content
The payment page opens at Stripe. Stripe sets its own cookies on its pages for payment processing and fraud prevention. We have no influence over them; see Stripe's privacy policy.
Tutorial videos in the dashboard load from youtube-nocookie.com, and only after you open a video yourself. No connection to Google is made before your click.
The invitation, gift list, photo upload and dashboard pages currently fetch typefaces from Google's servers. Your IP address is transmitted to Google in the process. That is not a cookie, but it is a data transfer; it is described in the privacy policy and we are working to remove it.
How to control this
You can remove or prevent all of the above in your browser.
- Browser settings let you delete cookies and local storage per site, or block them from being set.
- If you block the sign-in cookies you will not be able to log into the dashboard.
- If you delete the access cookie for a password-protected page, you will be asked for the password again.
- If you delete the language entries, the page will determine the language again from the country you visit from or your browser setting.
More about our processing in general is in the privacy policy at /datenschutz.
A question about cookies?
If anything on this list is unclear or you think something is missing, tell us.
Send a question