Privacy Policy

Last updated: September 2026

1. Controller

The controller responsible for data processing on this website is:

Jens Röcker
Südeschstraße 32
48429 Rheine
Germany
Email: [email protected]

2. Hosting

This website is hosted on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. When you visit the website, the following connection data (server log files) is automatically collected:

  • IP address of the requesting computer
  • Date and time of access
  • URL accessed and referrer URL
  • Browser and operating system used
  • Data volume transferred and HTTP status code

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website operation and security). Retention period: 7 days, then automatically deleted.

3. Content Delivery Network (Cloudflare)

We use Cloudflare (Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA) to deliver content faster and protect against attacks. Requests are routed through Cloudflare servers, including servers located in the EU. Cloudflare is certified under the EU-U.S. Data Privacy Framework.

Cloudflare Privacy Policy: cloudflare.com/privacypolicy

Legal basis: Art. 6(1)(f) GDPR.

4. Cookies

This website uses technically necessary cookies and — with your consent — analytics cookies from Google Analytics and Microsoft Clarity (see Sections 6 and 7):

  • Language cookie (pll_language): Stores your selected language. Expires when you close your browser.
  • WordPress session cookie: Set only for logged-in users.
  • Consent cookies (cmplz_*): Store your cookie consent decision. Lifetime: 365 days.
  • Google Analytics cookies (_ga, _ga_*): Set only after consent. See Section 6 for details.
    • \n
  • Microsoft Clarity cookies (_clck, _clsk and, where applicable, Microsoft third-party cookies): Set only after consent. See Section 7 and the cookie overview below.

You can withdraw your cookie consent at any time via the cookie banner.

\n\n

Cookie and service overview

\n

Polylang

Functional

Usage

We use Polylang for locale management. Read more about Polylang

Sharing data

This data is not shared with third parties.

Functional

Name
pll_language
Expiration
persistent
Function
Store language settings

WordPress

Functional

Usage

We use WordPress for website development. Read more about WordPress

Sharing data

This data is not shared with third parties.

Functional

Name
wordpress_test_cookie
Expiration
session
Function
Read if cookies can be placed
Name
wordpress_logged_in_*
Expiration
persistent
Function
Store logged in users
Name
wpEmojiSettingsSupports
Expiration
session
Function
Store browser details

Microsoft Clarity

Statistics: recognizes a browser across visits to this website., Statistics: measures interaction within one session., Statistics: recognizes a browser across sites using Clarity., Marketing: controls transfer of the Microsoft browser identifier., Marketing: maintains the Microsoft browser identifier., Marketing and statistics: supports advertising, site analytics, and operational purposes., Marketing: synchronizes the Microsoft browser identifier.

Usage

We use Microsoft Clarity for website statistics and session recordings. Read more about Microsoft Clarity

Sharing data

For more information, please read the Microsoft Clarity Privacy Statement.

Statistics: recognizes a browser across visits to this website.

Name
_clck
Expiration
1 year
Function
Stores the pseudonymous Clarity user ID and preferences for this website.

Statistics: measures interaction within one session.

Name
_clsk
Expiration
1 day
Function
Groups multiple page views into one Clarity session recording.

Statistics: recognizes a browser across sites using Clarity.

Name
CLID
Expiration
1 year
Function
Records when Clarity first saw this browser on a site using Clarity.

Marketing: controls transfer of the Microsoft browser identifier.

Name
ANONCHK
Expiration
10 minutes
Function
Indicates whether MUID is transferred to an advertising cookie; Clarity sets this flag to 0.

Marketing: maintains the Microsoft browser identifier.

Name
MR
Expiration
7 days
Function
Indicates whether the Microsoft browser identifier MUID should be refreshed.

Marketing and statistics: supports advertising, site analytics, and operational purposes.

Name
MUID
Expiration
up to 1 year
Function
Identifies browsers visiting Microsoft services.

Marketing: synchronizes the Microsoft browser identifier.

Name
SM
Expiration
session
Function
Synchronizes MUID across Microsoft domains.

Miscellaneous

Purpose pending investigation

Usage

Sharing data

Sharing of data is pending investigation

Purpose pending investigation

Name
wp-settings-time-1
Expiration
Function
Name
cmplz_functional
Expiration
365 days
Function
Name
cmplz_statistics
Expiration
365 days
Function
Name
cmplz_preferences
Expiration
365 days
Function
Name
cmplz_marketing
Expiration
365 days
Function
Name
vc_exchange_rates
Expiration
Function
Name
vc_currency
Expiration
Function
Name
vc_lang_choice
Expiration
Function
Name
vc_view
Expiration
Function
Name
vc-bestenliste-view
Expiration
Function
Name
vc_view_preference
Expiration
Function
Name
vc_watchlist
Expiration
Function
Name
astra_onboarding_state
Expiration
Function
Name
ai-builder-onboarding-details
Expiration
Function
Name
ai_builder_client_country
Expiration
Function
Name
_ga
Expiration
Function
Name
_ga_VPQEMR8D03
Expiration
Function
Name
wp_lang
Expiration
Function
Name
WP_PREFERENCES_USER_1
Expiration
Function
Name
gt-current-screen-vapochecker.com
Expiration
Function
Name
vc_compare
Expiration
Function
Name
vc_alerts_auth
Expiration
Function
Name
comment_author_158453a951433e26c7d2284b928da6f0
Expiration
Function
Name
comment_author_email_158453a951433e26c7d2284b928da6f0
Expiration
Function
Name
comment_author_url_158453a951433e26c7d2284b928da6f0
Expiration
Function
Name
vc_alert_email
Expiration
Function
Name
WP_DATA_USER_1
Expiration
Function
Name
cmplz_consented_services
Expiration
365 days
Function
Name
cmplz_policy_id
Expiration
365 days
Function
Name
cmplz_banner-status
Expiration
365 days
Function
Name
vc_recently_viewed
Expiration
Function
Name
vc_brand_tab
Expiration
Function
Name
vc_intl_shops
Expiration
Function
Name
vc_user_region
Expiration
Function
Name
vc_lang_ok
Expiration
Function
Name
vc_pref_sent
Expiration
Function
Name
vc_region
Expiration
Function
Name
cf_clearance
Expiration
Function
Name
vc_home_q
Expiration
Function
Name
vc_oauth_result
Expiration
Function
Name
vc_shop_sort
Expiration
Function
Name
vc_oauth_consent_given
Expiration
Function
Name
vc_ship_filter
Expiration
Function
Name
vc_sync_done
Expiration
Function
Name
vc_recently_viewed_v2
Expiration
Function
Name
vc_auth
Expiration
Function
Name
vc_vs_box_position_variant_v1
Expiration
Function

5. Price Alerts (Email Notifications)

When you set up a price alert, we process the following data:

  • Your email address
  • Your target price and the selected product
  • Date of registration and confirmation

Registration uses a double opt-in process: you first receive a confirmation email and the alert is only activated after you click the confirmation link.

Legal basis: Art. 6(1)(a) GDPR (consent). You can cancel your alert at any time via the unsubscribe link in the notification email. Your data will be deleted upon cancellation.

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; for users outside the EEA/CH: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics helps us understand how visitors use our website (pages visited, session duration, country, device type).

How our tracking works (Google Consent Mode v2 – Advanced):

  • With your consent: Google Analytics sets anonymized cookies (mainly _ga, _ga_*) and measures sessions, page views, and user interactions in the standard way. Legal basis: Art. 6(1)(a) GDPR (consent).
  • Without your consent: The Google Tag (gtag.js) is loaded but only sends cookieless pings to Google (consent signal gcs=G100, analytics_storage=denied). These pings contain no cookies, no persistent identifiers, and no personal data — only anonymous event signals (page view, device type, country at country level). Google uses these signals exclusively for statistical modelling of aggregated trends (Behavioral Modeling) and does not attribute them to any individual user. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistically valid reach measurement).
  • IP anonymization is active by default in Google Analytics 4. IP addresses are truncated before being stored by Google.

The collected data is processed in a Google account for which we have concluded a Data Processing Agreement (Art. 28 GDPR) with Google. Retention period of user data in GA4: 14 months.

You can withdraw your consent at any time via the cookie banner. Cookieless pings as described above will continue to be sent even after withdrawal; if you also wish to prevent those, please use the Google Analytics Opt-out Browser Add-on.

Google Signals (cross-device measurement): With your consent, we additionally enable Google Signals. For users signed in to a Google account who have opted into Ads Personalization in their Google account settings, this allows cross-device data to be aggregated — in particular approximate location, Search and YouTube history, and data from Google’s advertising partner sites. This enables us to evaluate cross-device sessions, demographics, and interests of consenting visitors. You can view and delete Google Signals data anytime via your Google Account “My Activity” dashboard, or disable personalization via your Google Ads Settings. Legal basis: Art. 6(1)(a) GDPR (consent).

Google Privacy Policy: policies.google.com/privacy | Google Consent Mode: support.google.com/analytics/answer/9976101 | Google Signals: support.google.com/analytics/answer/7532985

7. Microsoft Clarity (Heatmaps and Session Recordings)

We use Microsoft Clarity, an analytics service provided by Microsoft, to understand how visitors use our website and where usability problems occur. The Clarity tag is loaded only after you consent to the “Statistics” category. Without this consent, no connection to Clarity is established and Clarity does not collect data.

After you consent, Clarity collects in particular visited URLs, clicks, scroll and mouse movements, window sizes, browser, device and operating-system information, referrers, performance and error events, and DOM and layout changes. Microsoft uses this information to create aggregated usage statistics, heatmaps, and session replays. According to Microsoft, input field content, numbers, and email addresses are masked by default and are not uploaded to Clarity. We do not use the Clarity Identify API and do not send names or email addresses to Clarity as user identifiers.

After consent, Clarity sets the first-party cookies _clck (recognition and preferences, up to 1 year) and _clsk (grouping page views into one session, up to 1 day). Depending on your additional marketing consent and browser settings, Microsoft third-party cookies such as CLID, ANONCHK, MR, MUID, and SM may also be set. The complete overview is provided in Section 4.

The legal basis for storing and accessing cookies is Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act); the legal basis for subsequent processing is Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie banner with effect for the future. On withdrawal, our consent management system instructs Clarity to stop further collection and erase the Clarity cookies _clck and _clsk set by our domain. We cannot technically delete cookies on Microsoft domains ourselves; they expire according to the retention periods stated in Section 4.

Microsoft normally retains playback data for 30 days; click data, heatmaps, and labelled or favourited sessions are retained for up to 9 months. Processing may involve transfers of data to the United States. For more information about processing, safeguards, and data-subject rights, see the Microsoft Privacy Statement and the Clarity documentation.

8. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

Please send requests to: [email protected]

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
PO Box 20 04 44
40102 Düsseldorf, Germany
www.ldi.nrw.de

Not sure which one?
Our interactive buying guide helps you find the right vaporizer in 5 questions - based on your budget and usage style.
Try the Buying Guide →
Scroll to Top