Skip to content
Tahto

Cookie Policy

Last updated: October 15, 2026

What this covers

This page explains which cookies and comparable storage Tahto uses on this website. The provider is Taskero UG (haftungsbeschränkt), Graben 2, 55116 Mainz, Germany.

We set strictly necessary cookies without asking. § 25 (2) no. 2 TDDDG (the German act that replaced the TTDSG in May 2024) allows that for storage strictly required to deliver the service you asked for, which here means signing in, form protection and your language choice.

Beyond those we use the Meta Pixel to measure whether our ads on Facebook and Instagram brought visitors to this site. That is not necessary but optional, so it runs only with your prior consent under § 25 (1) TDDDG and Art. 6(1)(a) GDPR. We ask you on your first visit. Until you agree, nothing is sent to Meta and no Meta cookie is set — the script itself is not even loaded. Details are under "Third-party services: the Meta Pixel".

You can change your mind at any time. Every page's footer carries a "Cookie settings" button for that. Refusing is exactly as easy as agreeing, and access to this site depends on neither answer.

Cookies and local storage

Cookies are small text files your browser stores when you visit a site and sends back on the next request. Local storage works similarly, but is never sent automatically: only the site that created an entry can read it.

The law treats both the same. § 25 TDDDG covers any storage of information on your device regardless of the technique, so both appear in one table below.

What we store

The first four entries are strictly necessary and therefore cannot be switched off. Without them, signing in, submitting a form or keeping your language choice would not work. The last two are set by the Meta Pixel, and only after you have consented.

Name Purpose Duration Type
sessionid Keeps you signed in while you move around the web area. 2 weeks Cookie, first-party, HttpOnly, Secure, SameSite=Lax
csrftoken Protects forms against cross-site request forgery by checking that a submission really came from this site. 1 year Cookie, first-party, HttpOnly, Secure, SameSite=Lax
cx_lang Remembers whether you read the site in German or English. Set only when you switch language yourself, never from automatic detection. 180 days Cookie, first-party, HttpOnly, SameSite=Lax
cookie_consent_public Your answer to the cookie banner, plus a random identifier and the time. Without this entry we would have to ask again on every page you open. 12 months, then we ask again Local storage, first-party
_fbp Meta Pixel: identifies your browser so Meta can attribute a visit to an ad. Set only after you consent, and deleted by us when you withdraw. 90 days Cookie, first-party, set by fbevents.js, recipient Meta
_fbc Meta Pixel: stores the click identifier (fbclid) when you arrive from an ad on Facebook or Instagram. Not set otherwise. 90 days Cookie, first-party, set by fbevents.js, recipient Meta

Third-party services: the Meta Pixel

Apart from the Meta Pixel, this website loads nothing from external servers. No Google Fonts, no content delivery network, no analytics software, no social media buttons, no embedded maps or videos.

The Meta Pixel comes from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Once you have consented, your browser loads a file from connect.facebook.net and reports the page view to Meta. What is transmitted: your IP address, the address you opened, the page you came from, details about your browser and device, our pixel's identifier, and the _fbp and _fbc cookies. We send nothing beyond that. Reading form fields, which Meta offers as "automatic advanced matching", is switched off, and the pixel is not loaded at all on the sign-in, contact, purchase and cancellation pages.

For collecting and transmitting this data we and Meta are joint controllers (Art. 26 GDPR). We have entered into the Controller Addendum that Meta publishes at facebook.com/legal/controller_addendum. The essence of that arrangement: we obtain your consent and inform you about it; Meta is responsible for what happens to the data afterwards and answers access and erasure requests about that further processing. We cannot verify what it consists of — Meta describes it in its own privacy policy.

Meta Platforms Ireland passes the data on to Meta Platforms, Inc. in the USA. The basis is the European Commission's adequacy decision on the EU-US Data Privacy Framework, in which Meta participates (Art. 45 GDPR), supplemented by the standard contractual clauses under Art. 46 GDPR. Access by US authorities to this data cannot be entirely ruled out.

The processors we use to run the app are listed in the privacy policy.

Managing cookies

You can withdraw your consent to the Meta Pixel at any time with effect for the future, exactly as easily as you gave it (Art. 7(3) GDPR):

The same button sits in every page's footer. Untick ad measurement and save: the pixel stops, and we delete _fbp and _fbc from your browser. Data Meta received before that point is unaffected — for that, please contact Meta.

So that we can demonstrate that we asked and what you answered, we store every decision on our server: the random identifier from your browser, the version of the text shown to you, your answer, where in the interface you gave it, the language and the time. No IP address and no page address. We keep this record for three years, counted from the end of the year the consent was given, and delete it automatically afterwards.

Independently of that, you can delete or block cookies in your browser at any time. For the necessary ones that has consequences: without sessionid and csrftoken you cannot sign in or submit forms, and without cx_lang the site falls back to the automatically detected language on every visit. Your browser's help pages explain how.

Changes

If we start using new cookies, or embed a service that stores something on your device, we update this page and the date at the top. For anything that is not strictly necessary, we ask for your consent first.

Contact

Questions about this cookie policy go to contact@taskero.de. Postal address: Taskero UG (haftungsbeschränkt), Graben 2, 55116 Mainz, Germany.

↑ Back to top

We use cookies to provide sign-in, your language setting and protection for our forms. These cookies are strictly necessary.

With your consent we additionally use a counting pixel from our advertising partner to measure whether our ads lead to visits to this website. Data about your visit is transmitted to them in the process.

The cookies expire after 90 days. You can withdraw your consent at any time. What was measured up to that point is unaffected.

More on this in the Cookie policy.

Necessary cookies keep language, sign-in and form protection working. Ad measurement is optional and only starts when you switch it on here.