Remember the choice.
Respect the person.

This page describes the initial implementation. It is not a substitute for the deploying operator’s privacy notice.

On a visitor’s device

The widget uses first-party local storage to remember category preferences, a site-specific random consent ID, the notice version, and an expiry of 180 days. A failed receipt submission is retained for retry. It creates no tracking cookies and does not fingerprint visitors. Local storage is still device storage and must be described in your privacy notice.

In the database

New consent payloads are encrypted with AES-256-GCM before persistence. The metadata needed for ownership, retrieval, and expiry remains readable. Each choice stores a random event ID, site-specific consent ID, website ID, categories, action, interface language, notice version, notice snapshot, and the server receipt timestamp. The consent ID is pseudonymous, not anonymous. Application records do not include IP addresses, user agents, URLs visited, or geographic location.

Retention

Website owners select 30–365 days for new records. Ambiten connects to MongoDB, where a TTL index removes expired records asynchronously. Expired records are excluded from application queries. Changing retention affects new events only. Local development filters expired records on access and removes them on the next write.

Customer accounts

We store your name, email, workspace, password hash, and subscription status. The essential HTTP-only session cookie lasts seven days. Verification links expire after 24 hours; recovery links after one hour. Password changes revoke existing sessions. Your website data is scoped to your account.

Service providers

Ambiten provides the database integration with MongoDB. Resend delivers account emails when configured. Stripe processes payments and billing; card details are not stored by PureConsent. Infrastructure providers may process request metadata in their access logs. Monthly usage records random page-view IDs, domain and workspace IDs, and the UTC month. No page URL, IP address, or persistent visitor identifier is stored with usage. IDs expire at the start of the second following calendar month, so retries can be deduplicated.

Client access and translation

Agency invitations store the client email, assigned domains, and a hashed one-time invitation token. Invitations expire after seven days. Owners can revoke access. If a customer requests automatic translation, only their analytics and marketing descriptions are sent to DeepL; visitor consent records are not sent for translation.

Your controls

Export your profile and the latest 1,000 retained receipts from Account, or export the consent ledger as CSV. You can delete your account after any paid subscription has ended. Account deletion removes its websites, sessions, and receipts; payment providers may retain financial records under their own policies.

Contact and requests

PureConsent is operated by Abinod. For account, privacy, or data requests, contact abinod@online.de. For choices submitted on another website, contact that website’s owner first; they determine the purposes and providers used on their site. Hosting in Germany is not implied by using PureConsent or Ambiten.