COOKIE POLICY

This policy describes what WoSuch stores on your device, for what purpose and for how long. It supplements the Privacy Policy, which describes what then happens to the data.

The legal basis for storage on your device is § 165 TKG 2021; the subsequent processing is governed by the provisions of the DSGVO set out in the Privacy Policy.

A note on terminology: the app does not use cookies in the technical sense but the local storage of the operating system. Legally, both are treated the same, which is why this policy applies to the website and the app alike.

1. STRICTLY NECESSARY STORAGE

The platform does not work without these entries. They are set without consent because they are strictly necessary for the service you have expressly requested (§ 165 Abs. 3 TKG 2021).

• Sign-inPurpose: you stay signed in and do not have to enter your password againeach time. The entry is set by the authentication service.Retention: until you sign out, for no longer than 30 days.

• Your consent choicesPurpose: so that the prompt does not reappear at every start and so that themap, the AI assistant and audience measurement remain enabled or disabledaccording to your choice. One value, "yes" or "no", is stored per function.Retention: until you change the setting or uninstall the app or delete yourbrowser data.

• Device identifier for proof of consent (app only)Purpose: a random identifier generated at first launch. It serves solely todemonstrate your consent, as required by Art. 7 Abs. 1 DSGVO. It contains nodevice information and is not used to recognize you across services.Retention: until the app is uninstalled.

• Language, country selection and display modePurpose: to show the platform in the chosen language, for the chosen countryand in the light or dark appearance.Retention: until you change the setting.

• Selected locationPurpose: the city and, where applicable, the districts you chose for thesearch, per country, so that the search and the "Featured properties" rowapply to that place on your next visit. It is stored only when you choose aplace yourself; your location is not used for this. On the website as thecookie "ws_city", in the app in local storage.Retention: 90 days from your last choice, or until you remove the place.

• Recently used search termsPurpose: search suggestions when you open the search field. The terms do notleave the device.Retention: until you uninstall the app, clear the history or clear yourbrowser data.

2. MAP — ONLY WITH YOUR CONSENT

• Mapbox Inc., USAPurpose: displaying the interactive map. The map tiles are loaded fromMapbox's servers; your IP address is transmitted in the process. Inaddition, the last map area you viewed is stored locally so that the mapreopens where you left it.Without consent: the map remains disabled. The website shows a staticpreview, the app shows the list of listings. Search works in both cases.Transfer to a third country: USA, see section 6.

• Google LLC, USA — Street ViewPurpose: displaying the street-level view of a listing. It is loaded onlywhen you tap the preview; in the process your IP address is transmitted toGoogle and Google stores its own identifiers on your device.Without your action: nothing is loaded; a sample image stored by us isshown instead.Transfer to a third country: USA, see section 6.

3. AI ASSISTANT — ONLY WITH YOUR CONSENT

• Anthropic PBC, USAPurpose: evaluating your search request phrased in your own words. The textof the request is transmitted for processing.Without consent: the assistant is disabled. The rest of the search remainsavailable unchanged.Transfer to a third country: USA, see section 6.

The assistant also requires an account. Use without signing in is not provided for.

4. AUDIENCE MEASUREMENT — ONLY WITH YOUR CONSENT

Purpose: to record which listings are displayed and opened and which contact buttons are used. These metrics show commercial providers the visibility of their own listings and serve to improve the platform.

Recorded: a random session identifier, the listing identifier, the type of event, the time, the country and the platform. No user identifier is recorded.

The session identifier behaves differently on the two platforms, and we state this explicitly:

• On the website, it is kept in the browser's local storage and survivesreloading the page, so that the same visit is not counted more than once. Itremains until you delete your browser data.
• In the app, it exists only in memory and is generated anew at every restart.Nothing is stored on the device for it.

These data are pseudonymized, not anonymous: the session identifier makes it possible to link the events of one visit without our being able to attribute them to a person. We therefore do not describe them as anonymous.

Without your consent, no event is recorded and no session identifier is generated.

Retention of events: 30 days. After that, only daily totals with no reference to individual sessions are kept.

5. PUSH NOTIFICATIONS (APP ONLY)

If you enable notifications, an identifier of the push service is stored on the device, and messages are delivered to it. Delivery takes place via Expo (650 Industries Inc.) and from there via Apple (APNs) or Google (FCM), depending on the operating system.

Without activation, no such identifier is created. You can switch notifications off again at any time in the app or in your device's system settings.

6. TRANSFERS TO THE USA

Mapbox, Anthropic, Expo, Google and Apple are companies based in the USA. For the USA there is an adequacy decision of the European Commission (EU-US Data Privacy Framework); in addition, standard contractual clauses under Art. 46 DSGVO are in place with these providers.

The map and the AI assistant also require your consent and are disabled without it.

7. NO ADVERTISING OR TRACKING TECHNOLOGIES

WoSuch does not use any technologies for advertising purposes: no Facebook Pixel, no Google Analytics, no Google Remarketing, no cross-service trackers, no advertising identifiers. Should this change, your express consent will be obtained in advance and this policy will be updated.

The "Featured properties" row shows ads by providers on WoSuch. Which ads appear depends only on the chosen place and section; nothing about you is stored for this and no profile is created.

8. MANAGING AND WITHDRAWING CONSENT

You can change or withdraw your consents individually at any time:

• in the app under Profile → Legal & Privacy → Cookie Preferences;
• on the website via "Cookie Preferences" in the footer.

A withdrawal takes effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected (Art. 7 Abs. 3 DSGVO). After a withdrawal, the function concerned stays disabled until you consent again.

The strictly necessary entries from section 1 cannot be switched off, because the platform does not work without them. You can remove them by uninstalling the app or deleting your browser data. You can also remove the selected location in the search at any time.

9. PRIVACY POLICIES OF THE PROVIDERS NAMED

• Mapbox: mapbox.com/legal/privacy
• Anthropic: anthropic.com/privacy
• Expo: expo.dev/privacy
• Google: policies.google.com/privacy
• Apple: apple.com/legal/privacy

10. CONTACT AND CHANGES

Questions about this policy: kontakt@wosuch.com

The currently valid version is available in the app and at wosuch.com. If a new technology is introduced that requires consent, that consent will be obtained in advance.

The German version of this policy is binding. Translations are provided for information only.