legal

cookie policy

last updated: 19 october 2026 · applies to roloboop.co, www.roloboop.co and app.roloboop.co

the short version

We store your cookie choice on this website. The app uses essential sign-in and security cookies, and Stripe uses payment-security cookies at checkout. Optional analytics require your consent. Change your mind anytime:

open cookie settings

1. what cookies are

Cookies are small text files stored in your browser. Similar technologies, including localStorage, can also remember information. This policy covers both. The marketing website, signed-in app and Stripe checkout use different storage for different purposes.

2. how we use them

  • Essential — sign-in sessions, security, checkout (our payment processor Stripe sets fraud-prevention cookies during payment), and remembering your cookie choice itself. These don't need consent because the service can't work without them.
  • Currency selection — the current marketing page keeps this in page memory; it is not saved as a preference cookie.
  • Analytics (optional) — the current marketing website has no optional analytics scripts configured. The banner records your choice; if optional analytics are introduced, they will require consent and this page will describe them first. Necessary operational and security logs are explained in the privacy policy.

We do not use advertising or cross-site tracking cookies, and we don't allow third parties to advertise to you through roloboop.

3. the cookies we set

roloboop-consent localStorage on the marketing website; records your choice and when it was made Valid for 12 months; an expired choice is requested again.
Auth.js session cookie app.roloboop.co; keeps you signed in. On HTTPS its name is normally __Secure-authjs.session-token (possibly split into numbered chunks). Configured lifetime: 14 days, renewed with use; cleared on sign-out.
Auth.js security and callback cookies app.roloboop.co; protects sign-in and sign-out and remembers the return URL. Names include __Host-authjs.csrf-token and __Secure-authjs.callback-url on HTTPS. Session cookies, without a fixed persistent expiry.
__stripe_mid / __stripe_sid Stripe checkout; helps prevent payment fraud. Stripe may use additional necessary security storage. Stripe lists typical durations of 1 year and 30 minutes respectively. See its cookie information.

4. managing cookies

You choose in the banner on your first visit: "accept all" or "essential only" — both are one tap, and "essential only" is never a worse experience. Change your mind anytime via the "cookie settings" link in the footer, or the button at the top of this page. You can also block or delete cookies in your browser settings; blocking essential ones may sign you out.

5. changes

If we add or change cookies we'll update this page and, where consent is needed, ask again. The "last updated" date shows the current version.

6. contact

Questions about cookies or privacy: manny@boopcat.co. More on how we handle personal data in our privacy policy.