Cookie settings

What Efforio stores on your device, and why. You can open this at any time from the footer.

Efforio uses no optional storage today — no analytics, no advertising, no third-party embeds. If that ever changes, you will be asked before anything is stored.

Nothing here leaves your device, and nothing is sent to us. Current notice version: 1.

Legal

Legal notes for your website

You are responsible for the website you publish with Efforio, including its legal notice (Impressum) and privacy policy. This page sums up what happens on your website technically, so your texts are complete and correct. It is not legal advice.

Last updated: 26 September 2026

What your website needs

  • A legal notice (Impressum, § 5 DDG) with your own details, reachable from every page in one click, for example as its own page linked in the footer.
  • A privacy policy (Art. 13 GDPR), also reachable from every page. The sections below list what it should say about Efforio.
  • If you sell to consumers through the website (shop, orders): your own terms and a withdrawal policy. Efforio provides the technology, not your contract terms.
  • The data processing agreement with Efforio. You accept it in the console, in your workspace settings.

Hosting and processing on your behalf

  • Your website is operated by efforio GmbH, Hohepfortestraße 62, 39106 Magdeburg, Germany, as a processor under Art. 28 GDPR.
  • The servers are hosted by Hetzner Online GmbH in Nuremberg. Images and files are delivered through Amazon CloudFront, addresses under efforio.app through Cloudflare. The full list of sub-processors is in Annex 2 of the data processing agreement.
  • When the website is opened, the server processes technically necessary data such as the IP address, time, page and browser, to deliver the page and protect it against attacks.

What Efforio uses on your website

  • No cookies and no tracking by Efforio. A shopping cart is kept only in the visitor’s browser (localStorage).
  • Visitor statistics without cookies: page views are counted with a hashed identifier from IP address and browser that changes daily. The IP address itself is not stored. Stored are the page, the referring page, country, device type, browser and operating system, for 400 days.
  • Fonts and icons are served by Efforio itself. No Google Fonts are loaded.
  • Forms (contact, newsletter, application, booking, reservation, order) store what is entered in your workspace. Confirmation emails are sent by Efforio through Amazon SES. You set how long records are kept in the settings (default 365 days).
  • Newsletter sign-ups use double opt-in. Unconfirmed sign-ups are deleted automatically.

Third-party services to name if you use them

  • Payments (shop, restaurant): checkout runs at Stripe Payments Europe Ltd., Dublin, Ireland, on checkout.stripe.com.
  • Embedded videos, maps and content (YouTube, Vimeo, Google Maps, Spotify, CodePen, Figma) load only after a click. With that click, data such as the IP address is sent to the provider.
  • Images linked from another site, or picked from Pexels by the AI assistant, load directly from the provider’s server (for example images.pexels.com), which receives visitors’ IP addresses. Upload the images if you want to avoid that.
  • Connected calendars and cloud storage (Google, Microsoft): bookings are added to your calendar with the guest’s name, email address and phone number; application documents are copied to your Google Drive.
  • Your own HTML code: you are responsible for services you embed through an HTML block.

What you must not ask for

  • Special categories of personal data, such as health details, allergies or religious beliefs, must not be processed through Efforio (clause 8.9 of the terms). Do not ask for them in forms.