Name	Category	Origin	Purpose	Storage Duration
act	Required	.facebook.com	Used to distinguish between two Facebook sessions for the same user, created at different times.	Session
c_user	Required	.facebook.com	The Facebook user ID of the currently logged-in user.	90 days
fblo_	Required	nerdspot.events	Used to log in users via Facebook.	6 months
fbm_	Required	nerdspot.events	Used to log in users via Facebook.	3 months
user-is-logged-in	Required	nerdspot.events	Saves that the user is/was logged in.	31536000 seconds
LF9x	Required	nerdspot.events	Unique ID that identifies the user's session.	14000 seconds
datr	Marketing	.facebook.com	Used to identify the web browser used to connect to Facebook regardless of the user logged in.	2 years
_fbp	Marketing	.facebook.com	Used by Facebook to display a range of advertising products, such as real-time bids from third party advertisers.	3 months
fr	Marketing	.facebook.com	Used to show and measure ads and improve the relevance of ads (including measurement of conversions). Determines the relevance of ads based on site behavior and/or current search queries.	3 months
sb	Marketing	.facebook.com	Used to show and measure ads and improve the relevance of ads (including measurement of conversions). Determines the relevance of ads based on site behavior and/or current search queries.	2 years
spin	Marketing	.facebook.com	Set by Facebook at login - exact usage unknown.	25 hours
	Marketing	nerdspot.events	Used to collect consent for tracking the user ID in Matomo. No cookie is set.
	Marketing	nerdspot.events	Used to collect consent for tracking the user email in Matomo. No cookie is set.
wd	Statistics	.facebook.com	This cookie stores the dimensions of the browser window and is used by Facebook to optimize the display of the page.	7 days
_GRECAPTCHA	Statistics	https://www.google.com	Cookie set by Google reCAPTCHA to protect the site from spam by bots.	180 days
mtm_consent	Statistics	nerdspot.events	Used to remember that consent was given by the user.	Unlimited
_pk_cvar.*	Statistics	nerdspot.events	Used to temporarily store data for the visit.	30 minutes
_pk_hsr.*	Statistics	nerdspot.events	Used to temporarily store data for the visit.	30 minutes
_pk_id.*	Statistics	nerdspot.events	Used to store details about the user (e.g. a unique visitor ID)	13 months
matomo_ignore	Statistics	stats.pcsg-server.de	Flags the user as ignored from tracking.	Unlimited
_pk_ref.*	Statistics	nerdspot.events	Used to store the attribution information (e.g. the referrer initially used to visit the website).	6 months
_pk_ses.*	Statistics	nerdspot.events	Used to temporarily store data for the visit.	30 minutes
MATOMO_SESSID	Statistics	nerdspot.events	Created when opt-out feature is used. Helps prevent CSRF security issues.	Temporary
_pk_testcookie.*	Statistics	nerdspot.events	Used to check whether the visitor’s browser supports cookies.	1 second
xs	Preferences	.facebook.com	This cookie contains multiple information about the user's session.	3 months

Privacy // clearly explained

Privacy policy

What NerdSpot processes, why it is needed and which choices and rights you have.

1. Who is responsible?

The controller for this website is:

ToadTec UG (haftungsbeschränkt)
Pfaffenberger Weg 142
42659 Solingen
Germany

You can reach us through the NerdSpot contact form.

2. Hosting and server logs

When you open this website, the web server automatically processes technical data required to deliver and secure it. This may include your IP address, date and time, requested address, referrer, browser and operating system, host name and response status.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are reliable delivery, security, fault analysis and protection against misuse. Log data is not combined with unrelated data and is deleted when it is no longer required, unless a security incident or a legal obligation requires longer storage.

3. Cookies and consent settings

NerdSpot uses technically necessary storage to provide basic functions, security and your privacy selection. This is based on Art. 6(1)(f) GDPR and, where access to your device is strictly necessary, Section 25(2) TDDDG.

Optional technologies and cookies are activated only with your consent. Their legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can change or withdraw your selection at any time using the cookie settings at the end of this page. Withdrawal does not affect processing carried out before it.

4. Audience measurement with our own Matomo instance

We use the open-source analytics software Matomo on our own infrastructure at stats.pcsg-server.de. It helps us understand which pages are visited, how visitors arrive at NerdSpot and which technical devices and browsers are used. We do not send these analytics data to an external analytics provider. User-ID and e-mail tracking are disabled.

Without consent for statistics, Matomo is instructed not to set analytics cookies. This cookie-free audience measurement is based on Art. 6(1)(f) GDPR; our legitimate interest is to measure and improve the reach, usability and technical quality of NerdSpot. If you consent to statistics, Matomo may use analytics cookies; this is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may object to the cookie-free measurement or withdraw consent through the cookie settings.

5. Contact form

If you contact us, we process the name or pseudonym you enter, the selected subject, your message and the technical information required to transmit it. The inquiry is stored in the QUIQQER system and sent to the responsible internal mailbox so that we can answer it.

For contractual or pre-contractual inquiries, the legal basis is Art. 6(1)(b) GDPR. Other inquiries are processed under Art. 6(1)(f) GDPR because we have a legitimate interest in answering them. We delete the inquiry when it has been resolved and no legal retention obligation or other lawful reason requires continued storage.

6. Spam protection with Google reCAPTCHA

The contact form uses Google reCAPTCHA to distinguish human submissions from automated abuse. The service is provided in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When activated, Google may process your IP address, browser and device data, referrer, time and interaction data and may access or store information on your device.

reCAPTCHA is loaded only after the required consent. The legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Processing by Google may also take place outside the European Economic Area. Further information is available in Google’s privacy policy. You can withdraw consent through the cookie settings.

7. External links

NerdSpot links to external websites, including social networks. A normal link does not establish a connection to the external service until you open it. The privacy rules of that provider then apply.

8. Recipients and storage

Data is accessible only to people and technical service providers who need it to operate the website or answer inquiries. Processors work under our instructions. We disclose data to authorities only when legally required.

Unless a more specific period is stated above, we keep personal data only as long as necessary for its purpose. We then delete it unless statutory retention duties, the establishment or defence of legal claims or another lawful basis requires longer storage.

9. Your rights

Under the GDPR, you may request access, rectification, erasure, restriction of processing and, where applicable, data portability. You may withdraw consent at any time for the future. You may object, for reasons arising from your particular situation, to processing based on Art. 6(1)(f) GDPR.

You also have the right to lodge a complaint with a data protection authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

10. Security and updates

NerdSpot uses TLS encryption. We update this policy when the website, the technologies used or legal requirements change.

Last updated: 11 August 2026