[marvinblum]

Correct, it's not so much about Cookies, but how data is collected and what is stored.

We have done a privacy risk analysis with an external lawyer and data protection officer, and concluded that Pirsch is in line with GDPR as we do not collect nor store personal identifiable information (PII). Processing stuff like IP addresses for example is legal as long as they are not stored and only cached for a reasonable amount of time (a few milliseconds in our case).

If you're interested, we have extensive documentation on this. You can reach out to [e-mail] to get it :)

If anyone is interested in doing something similar. This did cost us about 8,000 € in Germany.

[anonzzzies]

I guess because you store their fingerprint (for uniques) only 24 hours, it is ok?

[marvinblum]

This also factors in, yes. If we would store it indefinitely, there is the risk of profiling (estimating who someone is by their behaviour).

[michpoch]

> This did cost us about 8,000 € in Germany.

The apparently extensive legal assessment you just described costed just 8'000 euro?

I am sorry but that had to be some hasty review at best. Do you take the full legal risk in case any of your customers would be found in violation of privacy laws because of using your service?

For reference, with similar hourly rates as Germany, reviewing a standard apartment-purchase contract cost me ~3500 euro.

[marvinblum]

We had someone with a lot of experience in this field working for very large German corporations and got a discount/startup bonus. I wouldn't call it cheap.

Imagine starting a business in Germany. How are you suppose to pay 30-50k for legal questions before selling anything?