Cookie Policy
Last updated: October 22, 2026
The legally binding version of this Cookie Policy is the German version. Translations into other languages are provided as a courtesy only and are not legally binding.
1. Overview
This Cookie Policy explains how Capwork e.U. uses cookies and similar technologies on the Capwork platform — including the public customer portals of registered companies and the customer portals and booking widgets embedded in their websites. The platform is operated by Capwork e.U., FN 677603a (Handelsgericht Wien), Am Europlatz 2, 1120 Vienna, Austria.
Without your consent, we use only strictly necessary cookies and comparable technologies (the browser’s local storage), which do not require consent under § 165(3) TKG 2021 and Art. 5(3) of the ePrivacy Directive — including the fraud-prevention cookies of our payment provider Stripe (see section 2). Only on our own information pages, and only if you agree in the cookie banner, do we additionally use Google Ads conversion tracking (see section 3); in the application, the customer portals and the booking widgets we set no optional cookies. When you actively use the embedded Google Maps address search or map display (see section 4), Google may use its own cookies and comparable technologies.
2. Strictly Necessary Cookies
To run the platform, we use strictly necessary cookies that are essential for it to function. Under EU law (ePrivacy directive Article 5(3)) these cookies do not require your consent. They are used for:
- Authentication — keeping you signed in across pages.
- Session management — preserving your interaction state during a visit.
- Locale preference — remembering your selected language.
- Display settings — storing settings you make yourself, such as the zoom level and the width of the sidebar in the calendar.
In addition, our payment service provider Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland) sets strictly necessary cookies for fraud prevention and payment security as soon as the payment form is displayed — during registration and when managing payment methods: "__stripe_mid" (validity approx. 1 year) and "__stripe_sid" (validity approx. 30 minutes). In this process Stripe may also embed the hCaptcha bot-protection service (Intuition Machines, Inc.). These technologies serve exclusively to secure the payment process (fraud prevention and statutory obligations such as PSD2/KYC) and are not used for advertising or cross-site tracking. Details can be found in our Privacy Policy.
Besides cookies, we use your browser’s local storage (localStorage) for strictly necessary purposes: for the sign-in to a customer account in a company’s customer portal (sign-in token and the customer’s own contact details; valid for up to 30 days or until you sign out), for the color scheme (light or dark, taken over from your device’s setting on your first visit), for noting that you have closed the cookie notice, and for your choice in the cookie banner of our information pages (consent or refusal, when you made it and a randomly generated consent ID; we ask again after twelve months). This information is not used for analytics or advertising purposes. While you register, we also keep the details of an unfinished sign-up entered so far there (company and contact details, never the password), so that you can continue after confirming your email address; they are deleted when the registration is completed or the form is closed, and after seven days at the latest.
Where a business uses field work documentation in the Orders module, the field view (“My work”) stores job data, changes not yet sent and photos, signatures and voice recordings not yet uploaded in the browser’s local database (IndexedDB) for the business’s employees, so that it keeps working without a network connection. Items waiting to be sent are deleted once they have been sent successfully, everything else when the user signs out. This storage is strictly necessary for the function being used, serves neither analytics nor advertising and therefore requires no consent. The browser asks for access to the microphone and location only when the respective function is used; the location is evaluated on the device only and is not transmitted to Capwork.
3. Analytics, Marketing, and Tracking
In the Capwork application, in companies’ customer portals and in the embedded booking widgets, we do not use analytics, advertising or third-party tracking cookies and do not share data with advertising networks. The only exception is the consent-based measurement of our own advertising on our information pages (see below).
We measure usage with a cookieless, first-party statistics system: nothing is stored on or read from your device, only aggregate counts are kept (daily totals and, for 100 days, page views and newly counted visitors per 15-minute interval), and all processing takes place on our servers in the EU. Because no cookies or similar technologies are used, this measurement does not require consent under ePrivacy rules. Details can be found in our Privacy Policy; the “Do Not Track” and “Global Privacy Control” browser signals are honored. This also includes the aggregate counting of individual feature usage and coarse visit metrics (pages per visit, approximate visit duration and how far the first page of a visit was scrolled). For visits that come through an ad, we additionally count – likewise only in aggregate and without the ad's click ID – that the visit came through an ad, which of our search keywords matched and on which page the visit began.
Google Ads on our information pages (only with your consent)
On our public information pages at www.capwork.io — such as the home page, the pricing and solution pages, the example business and the legal texts, including the registration offered there — we use Google Ads conversion tracking by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), but only if you choose “Accept” in the cookie banner. It lets us measure whether a registration with Capwork – or already the opening of the registration form or a visit to our example businesses – came from a click on one of our ads on Google. We do not use personalized advertising or remarketing.
Only after you agree does your browser load the Google tag (gtag.js) from Google. Google then stores cookies on capwork.io such as “_gcl_au” and — if you came via one of our ads — “_gcl_aw” with the ad’s click identifier (each for up to 90 days), and may set or read cookies on its own domains (e.g. google.com, doubleclick.net). When you complete a registration, open the registration form or visit our example businesses, your browser reports this to Google — without your name, your email address or details of your company. For this, Google necessarily processes your IP address, browser and device information, the page visited and the time.
The legal basis is your consent (§ 165(3) TKG 2021, Art. 6(1)(a) GDPR). Google processes the data as an independent controller and may transfer it to the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission). If you reject or make no choice, the Google tag is not loaded and no data is sent to Google. Google explains how it processes data at https://business.safety.google/privacy/.
You can withdraw or give your consent again at any time with effect for the future — via “Cookie settings” in the footer of our home page or in the online version of this Cookie Policy at www.capwork.io/cookies. When you withdraw, we delete the Google Ads cookies the Google tag stored on capwork.io; the lawfulness of the processing carried out until then is not affected.
To be able to demonstrate that consent was given, we store each of your choices in the cookie banner on our servers in the EU: the randomly generated consent ID, the choice and the choice it replaces, the version of the banner, the language of the page and the time. We do not store your IP address or any other details that identify you. The banner shows you the consent ID under “Cookie settings”; with it, we can tell you on request what you chose and when. From the same entries we also count, without any personal reference, how often visitors agree and refuse. The legal basis is our obligation to be able to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). We delete the entries after three years.
4. Third-party content: Google Maps
For address capture and location-based features (e.g. address search, map and distance display), we embed Google Maps operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Maps is only loaded when you actively start it — for example by activating the address search during registration or opening a map view; no data flows to Google merely because a page is opened. The exception is the field view (“My work”) used by staff of registered businesses: opening a job there shows the map of the work site straight away, so Google Maps loads with the job; the map can be folded away. Upon activation, data is technically necessarily transmitted to Google — in particular your IP address and device-related information — even before any login; Google may use its own cookies or comparable technologies in the process. The legal basis is our legitimate interest in precise, location-data-backed address capture and map display (Art. 6(1)(f) GDPR).
You can also register entirely without Google services in your browser: during registration you may enter the address manually instead of using the address search. In that case our servers determine the geo-coordinates of the company address (server-side geocoding via Google); your IP address and browser information are not transmitted to Google. Further information is available in Google's privacy policy (https://policies.google.com/privacy).
5. Managing Cookies
You can disable cookies in your browser settings at any time. However, disabling strictly necessary cookies may make parts of the platform unusable, such as signing in.
Most browsers let you view, manage, and delete cookies. Please refer to your browser's help documentation for details.
6. Changes to This Policy
We may update this Cookie Policy from time to time. The 'Last updated' date above reflects the most recent revision. Changes are tracked by version, and you may be asked to re-accept on your next sign-in if the policy has changed materially.
7. Contact
Capwork e.U.
Inhaber: Nikolas Kain
Am Europlatz 2, 1120 Wien
FN 677603a, Handelsgericht Wien
Email: office@capwork.io