Cookie Policy
1. Who we are
The controller of this website is DiALOGiFY AG, Gotthardstrasse 28, 6300 Zug, Switzerland (UID CHE-222.851.510), email hello@dialogify.io. This policy explains which cookies and similar technologies we use on dialogify.io. How we otherwise process personal data is described in the privacy statement.
2. What are cookies and similar technologies?
Cookies are small text files that your browser stores on your device. Similar technologies are the browser's local storage (localStorage), scripts and tracking pixels. For simplicity we say "cookies" and give the exact type in the overview.
3. Your choice
On your first visit a banner asks for your choice. We distinguish three categories:
- Necessary: always on, so the website works and your choice stays saved. No measurement.
- Statistics: with your consent; for visitors from Switzerland until they object (see below). Google Analytics 4 through our tagging server, Microsoft Clarity (session recording and heatmaps, always only with consent) and the attribution of the source of your first visit.
- Marketing: only with your consent. Measurement and personalisation of our advertising on Google (Google Ads).
"Necessary only" and "Accept all" are equal choices. Without a choice only the necessary technologies apply, with the exception for visitors from Switzerland described below. Your choice is stored for 12 months (in the entry dlg_consent), after which we ask again. You can change or withdraw it at any time: with the cookie icon at the bottom left of every page or with "Cookie settings" in the footer. Withdrawal applies for the future; processing until then remains lawful.
Visitors from Switzerland. For visitors from Switzerland, Google Analytics 4 and the attribution of the source of the first visit are on from the start, unless they object (Art. 45c(b) TCA). For them the refusal button in the banner is called "Without marketing": it refuses marketing and Microsoft Clarity, not statistics. You switch statistics off in the settings with the "Statistics" switch or with "Necessary only"; Google Analytics then stops measuring and the website deletes the statistics cookies as described below. We use Microsoft Clarity and marketing only with consent, also for visitors from Switzerland; for them Clarity starts only with "Accept all". The website recognises whether you visit from Switzerland by the time zone of your device (Europe/Zurich); this information does not leave your browser. The legal basis is our overriding private interest in measuring and improving the use of the website (Art. 31(1) FADP).
If you refuse or withdraw, the website deletes the cookies of the deselected categories as far as they can be deleted from our domain, and stops sending measurement data. Cookies that the server sets as "HttpOnly" (FPID) and cookies on third-party domains cannot be deleted by the website: they expire on their own, or you delete them in your browser settings.
4. What happens before you choose?
Until you choose, statistics and marketing set no cookies and Microsoft Clarity is not started. Exception for visitors from Switzerland (section 3): Google Analytics measures from the start and sets its cookies until they object. Two technical processes are independent of that:
- When a page is opened, your browser loads Google Tag Manager from Google servers. Technically, Google then receives your IP address and details of your browser. The tag manager is configured so that Google services neither set cookies nor use identifiers without your consent (Google Consent Mode v2, all storage permissions set to "denied"). For visitors from Switzerland only the storage for statistics is allowed, until they object; the storage for advertising stays denied.
- The page may send individual technical signals without cookies and without a visitor ID to our own tagging server in the EU (
data.dialogify.io, see section 6). Such signals are not attributed to an individual visitor.
5. Overview of the technologies used
Necessary
| Name | Provider / Type | Purpose | Duration |
|---|---|---|---|
dlg_consent | DiALOGiFY AG Local storage | Stores your choice in this banner (statistics yes/no, marketing yes/no, time). | 12 months, then we ask again |
dlg_lp_unlock:<Seite> | DiALOGiFY AG Local storage | Remembers that you unlocked a protected page with your business email. Set only after you submit the form. | Until you clear your browser data |
wk-lead | DiALOGiFY AG Local storage | Remembers in the Repurchase Check that you have already identified yourself (your form details), so you do not have to enter them again. Set only after you submit the form. | Until you clear your browser data |
Statistics (with consent; visitors from Switzerland: see section 3)
| Name | Provider / Type | Purpose | Duration |
|---|---|---|---|
_ga | Google (Analytics 4) Cookie, first party | Tells visitors apart so that returning visits can be counted. | up to 2 years |
_ga_LN1VMYDC4X | Google (Analytics 4) Cookie, first party | Stores the session state of our website measurement. | up to 2 years |
FPID | Stape (data.dialogify.io) Cookie, first party | Pseudonymous visitor ID set by our tagging server (server-side tagging). Set by the server; the website cannot delete it. | up to 400 days |
FPLC | Stape (data.dialogify.io) Cookie, first party | Links page views across domains (linker cookie of the tagging server). | 20 hours |
FPGSID | Stape (data.dialogify.io) Cookie, first party | Session ID of the tagging server. | 30 minutes |
_clck | Microsoft (Clarity) Cookie, first party | Stores the Clarity user ID and preferences so recordings are attributed to the same visitor. | up to 1 year |
_clsk | Microsoft (Clarity) Cookie, first party | Connects several page views into one session recording. | 1 day |
CLID, ANONCHK, MR, MUID, SM | Microsoft (clarity.ms) Cookie, third party | Microsoft cookies on the clarity.ms domain that Clarity can set when it loads (recognising the same browser across Clarity sites, synchronisation). | from 10 minutes to 13 months (depending on the cookie) |
dlg_ft | DiALOGiFY AG (Google Tag Manager) Local storage | Stores the source, campaign, landing page and, for ad clicks, the Google click ID of your first visit, so that a later enquiry can be attributed to the right source. | 180 days |
dlg_attribution | DiALOGiFY AG Local storage | When you submit a form, remembers the campaign details of the visit (utm_*, Google click ID) so that further enquiries are attributed to the same source. | 60 days |
Marketing (only with consent)
| Name | Provider / Type | Purpose | Duration |
|---|---|---|---|
_gcl_au | Google (Ads) Cookie, first party | May be set by the Google tag to measure conversions after a click on a Google ad. | 90 days |
_gcl_aw | Google (Ads) Cookie, first party | May store the Google click ID (gclid) after a click on a Google ad, to attribute a later enquiry to that ad. | 90 days |
IDE, test_cookie | Google (doubleclick.net) Cookie, third party | Google cookies on the doubleclick.net domain that can be set for ad measurement and ad personalisation. Only with your marketing consent. | up to 13 months |
Cookies marked "third party" live on the domains of the providers named. "May be set" means they only appear if the service actually becomes active, for example after a click on a Google ad.
6. Providers in detail
Google Tag Manager, Google Analytics 4 and Google Ads
Providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager loads our measurement services and sets no cookies itself. Google Analytics 4 measures how our website is used: page views, clicks on buttons, submitted forms and booked appointments; results are evaluated in aggregated reports. Google states that Google Analytics 4 does not log or store IP addresses. We set the retention of event and user data to 14 months. Google Signals (cross-device analyses with data from Google accounts) is switched off in our account.
If you reach us through a Google ad, Google automatically appends a click ID (gclid) to the page address. Your browser sends that address to our server like any other. The click ID is stored in your browser only when statistics are on (with your consent or, for visitors from Switzerland, until you object). It is used for Google Ads only with your consent to "Marketing": we then attribute enquiries and appointments to the ad (conversion measurement, transfer of the measurements from Google Analytics to Google Ads) and may add visitors to audiences for later re-engagement (remarketing).
Legal basis: your consent (Art. 31(1) FADP; Art. 6(1)(a) GDPR); for Google Analytics with visitors from Switzerland, our overriding private interest in measuring the use of the website (Art. 31(1) FADP), with the right to object at any time (section 3). Delivering the tag manager itself rests on our legitimate interest in operating the website and implementing your choice. More on Google's use of data: business.safety.google/privacy and policies.google.com/privacy. Ad settings: adssettings.google.com. Switching measurement off in the browser: Google's browser add-on.
Server-side tagging (Stape)
Our website no longer sends the measurements for Google Analytics directly from your browser to Google, but through our own tagging server at data.dialogify.io. It is operated on our behalf by Stape Europe OÜ (Estonia). According to Stape the server runs at Scaleway in France (EU); a content delivery network from Cloudflare (USA) forwards requests to it. After your consent to "Statistics" (for visitors from Switzerland: unless they object) the server sets the cookies FPID, FPLC and FPGSID (see overview). No new kinds of data are collected: the server forwards the measurements we already collect with Google Analytics to Google Analytics. Stape processes the data as a processor under a data processing agreement with standard contractual clauses (stape.io/eu-dpa). Legal basis: your consent; for visitors from Switzerland, our overriding private interest (Art. 31(1) FADP).
Microsoft Clarity
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA; for the EEA, the United Kingdom and Switzerland Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. With your consent to "Statistics", Clarity records how you use the website: clicks, mouse movements, scrolling, pages visited, device and browser details and your approximate location. This produces session recordings and heatmaps that we use to find usability problems. Clarity keeps recordings for 30 days; recordings marked as favorites and randomly sampled recordings are kept for up to 9 months. Without your consent Clarity does not start and sets no cookies; for visitors from Switzerland Clarity starts only with "Accept all", not with the statistics that are on by default. Legal basis: your consent. More: privacy.microsoft.com/privacystatement.
Calendly (appointment booking)
When you choose an appointment on the "Book a demo" page, the booking form of Calendly LLC, 115 E Main St, Buford, GA 30518, USA opens, depending on your device as a window on our page or in a new tab. Calendly is only loaded when you click the booking button (script from assets.calendly.com, booking window from calendly.com). Calendly then receives your IP address and may set its own cookies; the data you enter there is processed by Calendly under its own privacy policy (calendly.com/privacy). Legal basis: your request for an appointment (pre-contractual measure).
Embedded videos (YouTube, Vimeo)
A few older blog posts (English version only) show videos from YouTube (Google) or Vimeo. These videos are loaded only after you click "Load video". Only then does your browser transmit data to the provider, and the provider may set its own cookies.
What we do not use
We currently use no advertising or social media pixels (for example from Meta, LinkedIn, X or Pinterest), no HubSpot and no Intercom. The website's fonts are hosted on our own server; there is no connection to Google Fonts. Before we add a service we update the banner and this policy.
7. Countries outside Switzerland and the EEA
Google, Microsoft, Cloudflare and Calendly are based in the USA or may process data there. For these transfers we rely, where the recipient is certified under the EU-US Data Privacy Framework or the Swiss-US Data Privacy Framework, on the corresponding adequacy decision, and otherwise on standard contractual clauses with additional safeguards. The statistics measurements reach Google through our tagging server in the EU; they may be processed in the USA from there.
8. Contact and changes
Please send questions about this policy or about exercising your rights to hello@dialogify.io. We update the policy when our technology changes; the date above shows its status. The English and French versions are translations; where they differ, the German version applies.