Cookie Policy

1. What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to store certain information about your visit and recognize your preferences.

2. Which Cookies Do We Use?

We use only technically necessary cookies for the operation of our website. We use no tracking, marketing, or analytics cookies.

2.1 Strictly Necessary Cookies

These cookies are essential for the functioning of the website and cannot be disabled in our systems.

2.2 What We Do NOT Use

Unlike many other websites, we deliberately use no:

• Tracking Cookies: No Google Analytics, no Facebook Pixel, no heatmaps
• Marketing Cookies: No advertising networks, no remarketing, no cross-site tracking
• Social Media Cookies: No social media plugins with tracking functionality
• Third-Party Cookies: All cookies originate exclusively from our domain

Privacy Advantage: We do not track your behavior and do not create user profiles.

3. Cookie Properties

3.1 Security

Our cookies are configured with the following security properties:

• httpOnly: Session cookies are only readable by the server, not by JavaScript (protects against XSS attacks)
• secure: Cookies are only transmitted via HTTPS in production
• sameSite: lax: Protection against Cross-Site Request Forgery (CSRF)

3.2 Storage Location

Session data is stored in our MySQL database on our own servers in Vienna, Austria. No data is transferred to third parties.

4. Managing Cookies

4.1 Deleting Cookies in Your Browser

You can delete all cookies in your browser at any time. Here are instructions for common browsers:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions

4.2 Effects of Deleting

If you delete our cookies:

• You will be automatically logged out and need to log in again
• Your language preference will be reset (default language: German)
• The website will continue to work fully, just without saved preferences

4.3 Disabling Cookies

You can disable cookies in your browser generally. However, please note that our website will not function without cookies, as the login function and language settings rely on cookies.

5. No Consent Required

Since we use only strictly necessary cookies, no explicit consent is required under GDPR Art. 6(1)(f) and the ePrivacy Directive.

Why?

• The cookies are absolutely necessary for providing the services you have requested
• No processing of personal data for marketing or analytics purposes
• No sharing of data with third parties
• No profiling or tracking

That's why you don't see a cookie banner on our website – we don't need one!

6. Data Transfer

Important: All cookie data is transferred exclusively between your browser and our servers in Vienna, Austria. There is:

• No transfer to third countries outside the EU
• No sharing with third-party services
• No use of cloud services outside our control

7. Technical Details

7.1 Session Management

Our session management uses:

• express-session: Node.js session middleware
• express-mysql-session: Session storage in MySQL database
• Encryption: Session IDs are cryptographically secure
• Expiration: Sessions are automatically deleted after 30 days or upon logout

7.2 Cookie Parser

We use cookie-parser for Node.js for secure reading and writing of cookies.

8. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons.

For significant changes, we will notify you through a notice on our website.

9. Questions About Cookies?

If you have questions about our use of cookies, please contact us:

SSL Fruity AI GmbH & Co KG
Inkustraße 1–7/Stiege 2/Haus C/1. OG/Top 2109
3400 Klosterneuburg
Austria

Email: info@fruitly.net
Phone: +43 650 37 50 530 (Austria) or +49 160 155 0555 (Germany)