Cookie Policy — 913.ai UG

Last updated: 01.09.2025

1. Who we are

This Cookie Policy explains how 913.ai UG ("we", "us", "our") uses cookies and similar technologies on our website and online services.

• Controller: 913.ai UG

• Registered address: Am Sandtorkai 32, 20457 Hamburg, Germany

• Contact (privacy): privacy@913.ai

This policy primarily addresses users in the European Economic Area (EEA) and the UK and is aligned with GDPR and the ePrivacy rules. We will extend this document for other regions as our operations expand.

2. What cookies are

Cookies are small text files placed on your device that store certain information. We also use similar technologies such as pixels, tags, local storage, and SDKs (together, "cookies"). Cookies can be:

• Strictly necessary: required for core site functionality and security.

• Functional: enable enhanced functionality or personalization.

• Analytics: help us understand how our site is used to improve performance.

• Advertising/marketing: used to deliver and measure ads and to build audiences.

Cookies may be "session" (deleted when you close your browser) or "persistent" (stored until they expire or are deleted). Cookies may be set by our site (first-party) or by third parties.

3. How we use cookies

We run our site on Framer and use Google Tag Manager ("GTM") with Consent Mode to control the loading of tags. We only set non-essential cookies (e.g., analytics/ads/marketing) after you provide consent via our banner. You can change your consent at any time via the “Cookie Settings” link or your browser settings.

We use cookies to:

• Provide core site functionality and security.

• Measure usage and performance (e.g., page views, events).

• Run and measure ad campaigns and optimize marketing.

• Prevent fraud and abuse.

4. Legal bases (EEA/UK)

• Strictly necessary cookies: legitimate interests (Art. 6(1)(f) GDPR) to provide a secure, functioning website.

• All other cookies (functional/analytics/advertising): your consent (Art. 6(1)(a) GDPR) collected via our banner. You can withdraw consent at any time.

5. Your choices

• Consent: For non-essential cookies, we rely on your consent. If you decline, those cookies will not be set (GTM Consent Mode).

• Withdraw/change: Adjust your choices via the banner when shown or through your browser settings (see provider guides below).

• Do Not Track / GPC: We honor browser-level Global Privacy Control (GPC) signals for advertising/targeting where technically feasible via our tag configuration.

6. Cookies we use (by category)

The tables below list typical cookies/pixels we use or may use. Exact names can vary by browser, device, and updates from providers. We update these tables periodically.

6.1 Strictly necessary

These are essential to provide the site and cannot be switched off in our systems. They are usually set in response to actions you take, such as setting your privacy preferences or filling in forms.

• Framer / site platform

• Purpose: Core functionality, security, load balancing.

• Provider: Framer B.V.

• Retention: Session to 12 months (varies).

• Type: First-party/session/persistent.

6.2 Functional (if enabled)

• Currently not in use beyond strictly necessary site operation. If added, we will update this section.

6.3 Analytics

• Google Analytics 4 (GA4)

• Example names: _ga, _ga_<container-id>

• Purpose: Analytics (page views, events, device info).

• Provider: Google Ireland Limited.

• Retention: [14 months] (confirm setting).

• Type: First-party/persistent.

• Controls: Respect consent via GTM Consent Mode.

6.4 Advertising/Marketing

• Google Ads

• Example names: IDE (via DoubleClick), _gcl_au, _gcl_aw

• Purpose: Conversion tracking, ad performance, remarketing.

• Provider: Google Ireland Limited.

• Retention: 90 days to 13 months (varies by cookie).

• Type: Third-party/first-party mix.

• Controls: Respect consent via GTM.

• Meta Pixel (Facebook/Instagram)

• Example names: _fbp, fbp, pixel-based events (no traditional cookie if blocked).

• Purpose: Conversion tracking, audience building, ad measurement.

• Provider: Meta Platforms Ireland Limited.

• Retention: ~90 days (events), up to 2 years for certain identifiers (varies).

• Type: First-/third-party depending on implementation.

• Controls: Loaded only after consent.

• Hyros (tracking/attribution)

• Example names: hyros ID, names, Emails

• Purpose: Marketing attribution across channels.

• Provider: Hyros.

• Retention: 24 months.

• Type: First-/third-party depending on setup.

• Controls: Loaded only after consent.

7. Third-country transfers

Where providers transfer personal data outside the EEA/UK (e.g., to the United States), such transfers are protected by appropriate safeguards, such as the EU-U.S. Data Privacy Framework, UK extension, and/or Standard Contractual Clauses. See provider privacy notices for details.

8. Managing cookies in your browser

You can block or delete cookies via your browser settings. The following links provide guidance:

• Chrome: https://support.google.com/chrome/answer/95647

• Firefox: https://support.mozilla.org/kb/clear-cookies-and-site-data-firefox

• Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

• Edge: https://support.microsoft.com/microsoft-edge/view-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

9. Updates to this policy

We may update this policy to reflect changes to cookies or legal requirements. Material changes will be highlighted on this page. Please check back regularly.

10. Contact

If you have questions about our use of cookies or this policy, contact us at:

• 913.ai UG, Am Sandtorkai 32, 20457 Hamburg, Germany

• Email: privacy@913.ai

Appendix — Provider references

• Google Analytics & Google Ads: https://policies.google.com/technologies/cookies

• Meta (Facebook/Instagram): https://www.facebook.com/policies/cookies/

• Hyros: https://www.hyros.com/privacy/