Cookies & storage technologies
Last updated: 12 October 2026
On this page, we provide information about which cookies and browser storage entries ImmoVision actually uses — on the website, on the agencies' exposés and microsites, and in the dashboard and mobile app. All of them are necessary for the function you are using or are only set at your express choice.
Current status
ImmoVision does not use any analytics, statistics, advertising or remarketing cookies or any tracking pixels — neither on the website nor on exposés and microsites.
The server only sets cookies after login to the dashboard (session, device) and during a login via an identity provider (SSO). The server does not set any cookies on public exposés and microsites; only individual entries in the browser's local storage are used there (see table).
Page statistics for the microsites are compiled on the server side without a cookie (a check value that changes daily and cannot be reversed instead of the IP address; deletion after 90 days).
Why we use storage technologies
Certain functions of our website and platform can only be provided if the browser temporarily stores information or a session is managed technically. This applies in particular to:
- secure session management,
- login and protected dashboard areas,
- protection of forms against misuse,
- technically necessary storage of the language,
- technically required state information,
- secure provision of interactive functions.
These technologies are not used for marketing, remarketing or the creation of advertising profiles.
Legal basis
Technically necessary storage is carried out on the basis of Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). Storage that you expressly choose (e.g. “Remember on this device” for the Google map) is carried out on the basis of your consent pursuant to Section 25(1) TDDDG; you can withdraw it at any time in the exposé (“Hide map”) or by deleting your browser data.
The subsequent processing of personal data is carried out, depending on the function, in particular on the basis of:
- Art. 6(1)(b) GDPR, insofar as the processing is necessary for the provision of requested functions or for the performance of pre-contractual measures or a contract,
- Art. 6(1)(f) GDPR, insofar as the processing serves system security, stability, abuse prevention and technically necessary provision.
Technical documentation
The following list corresponds to the implementation in the code (for the date, see above). New entries are added here before they are used.
| Name / Key | Type & purpose | Duration | Necessary |
|---|---|---|---|
immo_sid_tenant | First-party cookie, dashboard Storage type: Cookie (HttpOnly, SameSite=Lax, Secure) Login session in the dashboard and in the mobile app (signed session token) Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR | 14 days or until logout | Yes |
iv_geraet | First-party cookie, dashboard Storage type: Cookie (HttpOnly, SameSite=Lax, Secure) Random identifier “this browser” for the list of logged-in devices and for logging them out (security) Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR | 400 days; unused devices are logged out after 90 days | Yes |
immo_sso_state | First-party cookie, login Storage type: Cookie (HttpOnly, SameSite=Lax, Secure) Protection of login via an identity provider (SSO/OAuth, state and PKCE) Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR | 10 minutes | Yes |
immo_sid_tenant (support access) | First-party cookie, platform operator only Storage type: Cookie (HttpOnly, SameSite=Lax, Secure) Time-limited support access of the platform operator to an agency, logged Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR | 45 minutes | Yes |
immovision_user:… | Local Storage, dashboard Storage type: Local Storage Details of the logged-in person (name, role) for display, until logout Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR | Until logout | Yes |
i18nextLng, imv_lang, immovision.* (views) | Local Storage Storage type: Local Storage Selected language and operating settings in the dashboard (e.g. columns, hidden notices, read aloud on/off) Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR | Until changed or deleted in the browser | Yes |
imv_cookie_notice | Local Storage, website Storage type: Local Storage Remembers that the cookie notice has already been displayed Legal basis: Section 25(2) no. 2 TDDDG | Until deleted in the browser | Yes |
imv_form_session | Session Storage, website Storage type: Session Storage Timestamp of the contact form for protection against automated requests Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR | Until the tab is closed | Yes |
immovision_voice_visitor | Local Storage, exposés and microsites Storage type: Local Storage Random visitor identifier of the AI assistant so that your conversation can be continued and your consent or a withdrawal can be attributed; only created when the assistant is used Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(a) and (b) GDPR | Until deleted in the browser | Yes |
immovision.voice.einladung.gesehen | Local Storage, exposés and microsites Storage type: Local Storage Remembers that the invitation to the AI assistant has already been displayed so that it does not appear again Legal basis: Section 25(2) no. 2 TDDDG | Until deleted in the browser | Yes |
immovision-karte-google | Local Storage, exposés Storage type: Local Storage Only if you choose “Remember on this device”: approval of the Google map (text version) Legal basis: Section 25(1) TDDDG; Art. 6(1)(a) GDPR | Until withdrawal (“Hide map”) or deletion in the browser | No – only at your choice |
immovision-karte-besucher | Local Storage, exposés Storage type: Local Storage Random identifier under which your map approval and any withdrawal are stored as evidence (without IP address) Legal basis: Section 25(1) TDDDG; Art. 6(1)(a) and (c) GDPR | Until deleted in the browser | No – only at your choice |
immovision-vorort, immovision-notizen, immovision-bildstudio, immovision-mobile | IndexedDB, mobile app Storage type: IndexedDB Offline cache of the mobile app until content has been sent Legal basis: Section 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR | Until sent; deleted on request when logging out | Yes |
push-sw.js (service worker) + push subscription | Service worker, exposé/microsite/mobile app Storage type: Browser (service worker, browser push subscription) Delivery of notifications you have requested yourself (new properties, price changes, notices for agents); only set up in the browser after your consent Legal basis: Section 25(1) TDDDG (consent); Art. 6(1)(a) GDPR | Until you unsubscribe from notifications or revoke them in the browser | No |
Note on Stripe payments
If you access a payment process, a subscription checkout or embedded payment elements from Stripe, Stripe may use its own technically necessary cookies and similar technologies in connection with the specific payment process.
This processing relates to the respective payment process and serves in particular:
- authentication,
- fraud prevention,
- security,
- technical handling of the payment process,
- availability of the Stripe services.
These technologies are not used as general marketing tracking on our website but are related to the specific payment process accessed.
Which types of storage we use
Cookies
Small pieces of text information stored in the browser that may be required for session or security functions.
Local Storage
Local browser storage for technically necessary states or preferences, for example language settings.
Session Storage
Temporary browser storage that is deleted when the tab is closed, e.g. for protecting the contact form or for one-off counts.
IndexedDB (mobile app only)
Device storage of the mobile app for content captured without a network connection (notes, on-site photos and recordings, images queued for later) until it has been sent. When logging out, you are asked whether this data should be deleted.
No optional tracking technologies
On the general website, we currently do not use in particular:
- marketing cookies,
- analytics cookies,
- third-party statistics cookies,
- remarketing tags,
- advertising pixels,
- profile-based user tracking for advertising purposes.
Should this change in the future, this page and the privacy policy will be updated accordingly. Where legally required, separate consent will then be obtained in advance.
Your control
You can generally delete or block stored cookies and browser storage at any time via your browser settings. Please note, however, that technically necessary functions of our website or platform may thereby be restricted in whole or in part. This may in particular affect login areas, form functions, language storage or protected user areas.
Link to the privacy policy
Further information on the processing of personal data, recipients, retention periods, your rights and on hosting, contact forms, dashboard functions, AI functions and payment processing can be found in our privacy policy.
Privacy policyLegal notice
This page serves to provide transparent information about technically necessary cookies and similar storage technologies in connection with our online services and supplements our general privacy information.