Do i need an Optin or Optout

Attention

This does not constitute legal advice.

Do I need an opt-in to use Trackboxx?

The use of an Opt-In is not necessary from our perspective.

We recognise that some privacy experts take a different view because Trackboxx temporarily processes a visitor’s IP address.

Here is a brief statement from our data protection team:

"Storing personal data does not always require consent. This requirement does not follow from the TTDSG either: Section 25 TTDSG covers cookies and similar technologies. Article 6 GDPR provides the possible legal bases, and legitimate interests may apply to Trackboxx.

Trackboxx processes the IP address solely to anonymise it, or to pseudonymise it for as long as the hash remains valid."

Nevertheless, we would like to act as data protection-friendly as possible and have therefore also provided an option to "opt-out".

This can already be found in the section for your privacy statement HERE. Additionally, it is described HERE how you can also completely manually integrate the opt-out.

How does Trackboxx work without the use of cookies?

Trackboxx provides web analytics without cookies and without storing personal data.

We use the visitor's IP address and some other parameters (not personal data) once and generate a "hash" to "track" the visitor while on the site. This hash is stored for a maximum of 24 hours and then automatically deleted. Therefore a subsequent recognition is impossible.

It is not possible to view a visitor’s history or recover an IP address from the hash.

We store only essential analytics data, such as visitor numbers, page views, traffic sources, bounce rate and device type.

Hashing and decryption explained:

We create two hash values: one for the visitor and one for the page being viewed.

User Hash: Signature Hash + IP + User Agent + SiteID + Current Day

Page hash: Signature Hash + IP + User Agent + SiteID + Hostname + Path + Current Day

The signature hash is renewed daily, ensuring that the data cannot be decrypted retrospectively.

Since there are still uncertainties here.

The term "cookie box" or "consent banner" is basically the same as an opt-in.

In the first step, a cookie box / consent banner provides information about relevant data protection issues and in the second step it "actively" requests consent in order to subsequently block or execute "services".