Technical audit · 2026-05-29

bundesgerichtshof.de

German Federal Court of Justice

Germany's Federal Court of Justice — the highest instance for civil and criminal matters. 34 requests, 2 domains (both BGH — redirects). No analytics, no banner, no external dependencies. Session cookies — for navigation only, with no personal data. Full compliance.

Timeline of the leak

+0–27 ms · redirects
http://bundesgerichtshof.de/ → https://bundesgerichtshof.de/ (307) → https://www.bundesgerichtshof.de/ (301). Technical redirects only.
+1065 ms · load
CSS, images of the courtrooms and the BGH building's entrance — all from www.bundesgerichtshof.de. The federal CMS platform.
+1331 ms · fonts
BundesSansWeb (Regular, Bold, Italic) and BundesSerifWeb (Regular, Bold), in woff format (not woff2) — local, at /static/fonts/BundesSchrift/.
No analytics, no banner
Neither Matomo, nor a tracker, nor a ConsentBanner appear in the HAR. Session cookies used for navigation only — no personal data, no consent banner. Set-Cookie — zero.

Declared versus actual

Session cookies — documented as temporary, with no PII (Art. 6(1)(e) DSGVO + § 3 BDSG) — заявлен
Log files (30 days) — documented — заявлен
Video surveillance (Videoüberwachung) — documented separately — заявлен
Keine Tracking-Techniken — an explicit declaration — заявлен

Context

BGH (Bundesgerichtshof) is Germany’s Federal Court of Justice, the highest instance for civil and criminal matters. Located in Karlsruhe. It publishes court rulings, press releases, and procedural information. Sensitivity is high: the site’s visitors include parties to litigation, attorneys, journalists, and disputants. HAR: 34 requests, 2 domains.

An explicit declaration against tracking

BGH’s privacy policy contains a formula identical to BfDI’s: “Techniken, wie zum Beispiel Java-Applets oder Active-X-Controls, die es ermöglichen, das Zugriffsverhalten der Nutzer nachzuvollziehen, werden nicht eingesetzt.” This is not merely the absence of trackers — it is a documented policy of rejecting behavioral tracking. The HAR confirms it: not a single request to any analytics or tracking service.

Only session cookies — no banner

The policy classifies the use of temporary cookies for navigation as technically necessary under Art. 6(1)(e) DSGVO in conjunction with § 3 BDSG: “Beim Aufruf einzelner Seiten werden so genannte temporäre Cookies verwendet, um die Navigation zu erleichtern… Diese Session Cookies beinhalten keine personenbezogenen Daten und verfallen nach Ablauf der Sitzung.” Since only technically necessary cookies with no PII are used, a cookie banner is not required under § 25 Abs. 2 TDDDG. No Set-Cookie is recorded in the HAR.

BundesSans in woff format

BGH uses BundesSansWeb and BundesSerifWeb in the older .woff format — not .woff2. This points to an earlier version of the state font-standard package. The principle of local hosting is fully upheld.

Place within the German series

BGH rounds out the trio of Germany’s highest judicial bodies, alongside the Bundesverfassungsgericht and the Bundesverwaltungsgericht. All three run on the federal CMS platform with zero external dependency. The standard the courts apply to their own websites matches the principle they apply to violators: privacy as a right requiring no justification.

Conclusion

bundesgerichtshof.de is the thirteenth zero result in the German series. The highest court for civil and criminal matters achieves zero external dependency and an explicit rejection of tracking — with no exceptions and no debatable legal workarounds.

Evidence
Original (audit)
HAR file: de/bundesgerichtshof-de-2026-05-29.har
SHA-256: febbf7106d92c8e41ec960477675a20d5b855fa6bfed896ed2dcf33df06f2db1
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.