What this site may load

What is necessary always runs: sign-in, language, cart and the protection of forms. Everything else is your choice.

Remember hints: dismissed hints and your step in the tour stay stored beyond the session.
App & offline: the hub becomes installable as an app and shows an offline page without a connection.
Videos & 3D: moving images and the 3D stage from our own server. This is not consent but your preference on data usage.
External media: videos and images from Mux, YouTube, Vimeo and Instagram. 3 further controllers (Google, Vimeo, Meta) receive data such as your IP address, also in the USA (EU-US Data Privacy Framework).

Both buttons take you to the site. You can change your choice at any time at the bottom of every page under “Cookie settings”. Withdrawal takes effect from then on, not retroactively.

Imprint Privacy Cancel contracts here

All categories and providers in detail

Everything is off by default. A switch takes effect only with “Save choice”.

Necessary

Always on

Without these entries, sign-in, cart, checkout and security do not work. They cannot be switched off.

Entries (22)

px_consent
Type
Cookie
Purpose
Stores your choice in this dialog: version, checksum, time and selection. No identifier.
Duration
12 months
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof)
sb-<ref>-auth-token
Type
Cookie
Purpose
Keeps you signed in. Only created when you sign in.
Duration
up to 400 days (default of the sign-in library); ends when you sign out
Provider
Projection-X with Supabase (processor)
Role
Processor
Third country
USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
sb-<ref>-auth-token-code-verifier
Type
Cookie
Purpose
Secures the return from Google sign-in. Only created after “Sign in with Google”.
Duration
short, until sign-in is complete
Provider
Projection-X with Supabase (processor)
Role
Processor
Third country
USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
px2fa_ok
Type
Cookie
Purpose
Remembers that the second factor was confirmed on this device.
Duration
30 days
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)
pxag_ok
Type
Cookie
Purpose
Remembers the passed extra check for the admin area (team only).
Duration
12 hours
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)
px_next
Type
Cookie
Purpose
Remembers your destination when you sign in with Google, so you land there afterwards.
Duration
10 minutes
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
px_aktion_<id>
Type
Cookie
Purpose
Remembers that you entered the access word of a promotion.
Duration
until you close the browser
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
px_hub
Type
Cookie
Purpose
Lets team members and testers into the hub before launch (after approval or the correct tester PIN). Signed, holds the account ID and only valid for that account; only created then.
Duration
12 hours
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (access protection)
px_absicht
Type
Cookie
Purpose
Remembers that you chose “With Patreon” when registering, so your new account is assigned to it. Not a proof of entitlement. Only created when you click.
Duration
Session (until you close the browser); only created when you click and deleted once your account is created or you continue without Patreon
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
px_ref
Type
Cookie
Purpose
Remembers the invitation code you register with until your account is created. Only created when you click “Register”; opening an invitation link sets no cookie.
Duration
Session (until you close the browser); only created when you click
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
px_patreon_state
Type
Cookie
Purpose
Operator area only: secures connecting the operator’s Patreon account (signed check value with the operator’s account ID). Only valid on the way back from Patreon.
Duration
10 minutes
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)
px_google_start
Type
Cookie
Purpose
Remembers for up to ten minutes that the security check was passed before signing up with Google. Only needed for new accounts; deleted after returning from Google. Contains no personal data.
Duration
10 minutes
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)
px-cart
Type
Browser storage
Purpose
Your cart, only the product identifiers. Only after “Add to cart”.
Duration
at most 30 days
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
px-cart-checkout
Type
Browser storage
Purpose
Remembers the items that just went to checkout until you return.
Duration
until you close the tab
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
px-lesson-notes:*
Type
Browser storage
Purpose
Your own notes on a lesson. Only when you write them.
Duration
until you delete them
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
Page structure and images
Type
Service
Purpose
Page structure, fonts and images of this website from our own server.
Duration
usual browser caching
Provider
Projection-X, hosted by Vercel (processor)
Role
own service
Third country
USA (Vercel Inc.; EU-US Data Privacy Framework)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
Card pick sounds
Type
Service
Purpose
Short sounds of the card pick from our own server (/media/praeregistrierung/sfx). They only load after your click on the card page; the “Sound” switch turns them off. Nothing is stored on your device.
Duration
nothing stored on your device
Provider
Projection-X, hosted by Vercel (processor)
Role
own service
Third country
USA (Vercel Inc.; EU-US Data Privacy Framework)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
Supabase
Type
Service
Purpose
Sign-in, registration and password reset. Only when you use one of them.
Duration
no storage of its own in your browser
Provider
Supabase Inc. (processor)
Role
Processor
Third country
USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
Stripe
Type
Service
Purpose
Payment: we forward you to Stripe’s checkout. No Stripe script loads on this website.
Duration
no storage on this website; Stripe sets its own cookies on its checkout page
Provider
Stripe (partly an independent controller)
Role
Controller
Third country
USA (Stripe, Inc.; EU-US Data Privacy Framework)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
LiveKit
Type
Service
Purpose
Video coaching in the live room. Only when you enter a coaching room.
Duration
no storage of its own in your browser
Provider
LiveKit Inc. (processor)
Role
Processor
Third country
USA (LiveKit Inc.; standard contractual clauses)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR
Cloudflare Turnstile
Type
Service
Purpose
Protection against automated registrations and sign-ins. Loads only in forms that need it, and only after your choice.
Duration
no cookies on this website (according to Cloudflare)
Provider
Cloudflare, Inc. (processor; independent controller for improving bot detection)
Role
Processor
Third country
USA (Cloudflare, Inc.; EU-US Data Privacy Framework)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)
Cloudflare R2 (direct upload)
Type
Service
Purpose
Direct uploads of large files in the admin and studio area and in coaching.
Duration
no storage of its own in your browser
Provider
Cloudflare, Inc. (processor)
Role
Processor
Third country
USA (Cloudflare, Inc.; EU-US Data Privacy Framework)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

Necessary, by your own choice

Settings you make yourself, without an identifier. They are stored only once you change them.

Entries (5)

px_locale
Type
Cookie
Purpose
Your language. Only when you switch it yourself.
Duration
12 months
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR
px_nav
Type
Cookie
Purpose
Sidebar or top bar. Only when you switch the layout yourself.
Duration
12 months
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR
px-display
Type
Browser storage
Purpose
Your display settings: motion off, 3D, smooth scrolling, cursor. Only when you switch them yourself.
Duration
until you reset the setting
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR
px-fuer-dich
Type
Browser storage
Purpose
Hides the “For you” block if you chose so yourself.
Duration
until you show the block again
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR
px-player-subtitles
Type
Browser storage
Purpose
Your subtitle choice in the course player.
Duration
until you change it
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Sec. 25(2) no. 2 TDDDG (a setting you chose); Art. 6(1)(f) GDPR

Only during an attack

During an attack on the website, the firewall of our host checks that a real browser is asking.

Entries (1)

_vcrcs
Type
Cookie
Purpose
Only during an attack on the website: the firewall checks that a real browser is asking and remembers the passed check.
Duration
1 hour
Provider
Vercel Inc. (processor)
Role
Processor
Third country
USA (Vercel Inc.; EU-US Data Privacy Framework)
Legal basis
Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

Remember hints

Dismissed hints, promotions and pop-ups as well as your step in the introductory tour stay stored. Without this choice they last only until you close the tab.

Entries (4)

px_wt_step:<Konto>
Type
Browser storage
Purpose
Remembers at which step you left the introductory tour. The name contains your account identifier.
Duration
until the end of the tour
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
px_install_dismissed
Type
Browser storage
Purpose
Remembers that you dismissed the app installation hint.
Duration
until you withdraw consent or clear the site data
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
px_promo_dismissed
Type
Browser storage
Purpose
Remembers which promotions you dismissed (at most 40).
Duration
until you withdraw consent or clear the site data
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
px_popup_<id>_<v>
Type
Browser storage
Purpose
Remembers which notice windows you dismissed.
Duration
until you withdraw consent or clear the site data
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

App & offline

A service worker makes the hub installable and shows an offline page without a connection. Without this choice it is unregistered.

Entries (2)

Service Worker /sw.js
Type
Browser storage
Purpose
Makes the hub installable as an app and shows an offline page without a connection.
Duration
until you withdraw consent; it is then unregistered
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
Cache px-hub-*
Type
Browser storage
Purpose
Stores the offline page and the app icons in your browser.
Duration
until you withdraw consent; it is then deleted
Provider
Projection-X (own server)
Role
own service
Third country
no transfer
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR

Videos & 3D

Preference, not consent

Videos & 3D

Moving images and 3D from our own server. No third party, no consent; saves data.

Entries (2)

Videos from our own server
Type
Service
Purpose
Loops, films, tile, feed and course videos, clips and coaching recordings from our own server.
Duration
usual browser caching
Provider
Projection-X (own server)
Role
own service
Third country
USA (Vercel Inc. and Cloudflare, Inc. as processors; EU-US Data Privacy Framework)
Legal basis
no consent required (own server); your preference on data usage
3D stage and demo data
Type
Service
Purpose
3D stage with model, textures and program code (about 3.6 MB) and the demo data of the stages.
Duration
usual browser caching
Provider
Projection-X (own server)
Role
own service
Third country
USA (Vercel Inc. as processor; EU-US Data Privacy Framework)
Legal basis
no consent required (own server); your preference on data usage

External media

Videos and images from other providers. Each provider sees your IP address when content loads; each can be switched on its own.

Mux
Type
Service
Purpose
Streaming of course and product videos. Your browser loads the videos directly from Mux; Mux sees your IP address.
Duration
no storage of its own in your browser
Provider
Mux, Inc. (processor)
Role
Processor
Third country
USA (Mux, Inc.; EU-US Data Privacy Framework)
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
YouTube
Type
Service
Purpose
Embedded YouTube videos (www.youtube-nocookie.com) and their thumbnails. Google sees your IP address.
Duration
set by Google; this website cannot delete cookies on Google’s own domains
Provider
Google Ireland Limited (controller)
Role
Controller
Third country
USA (Google LLC; EU-US Data Privacy Framework)
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
Vimeo
Type
Service
Purpose
Embedded Vimeo videos (player.vimeo.com, with “Do Not Track”) and their thumbnails. Vimeo sees your IP address.
Duration
set by Vimeo; this website cannot delete cookies on Vimeo’s own domains
Provider
Vimeo.com, Inc. (controller)
Role
Controller
Third country
USA (Vimeo.com, Inc.)
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR
Instagram
Type
Service
Purpose
Embedded Instagram posts and their thumbnails. Meta sees your IP address.
Duration
set by Meta; this website cannot delete cookies on Meta’s own domains
Provider
Meta Platforms Ireland Limited (joint controller under Art. 26 GDPR)
Role
Joint controller
Third country
USA (Meta Platforms, Inc.; EU-US Data Privacy Framework)
Legal basis
Consent, Sec. 25(1) TDDDG; Art. 6(1)(a) GDPR; joint controllership under Art. 26 GDPR (CJEU C-40/17)