Cookie Policy
This page explains exactly which cookies we use and how you can control them.
Last updated: April 20, 2026
What cookies do here
We use cookies and similar storage for login, security, preferences, referral attribution, and legal consent records. Analytics is loaded only if you accept it.
Necessary cookies (always active)
These are required for core functionality and security.
- Authentication/session/security cookies used by the login system.
- `rl_currency`: remembers your selected display currency.
- `rl_affiliate_ref`: keeps a referral tag when you arrive from an affiliate link.
- `rl_cookie_consent`: stores your cookie choice.
- `rl_legal_ack`: stores legal acceptance confirmation.
- Technical storage needed to render pages and prevent abuse.
Optional analytics
Google Tag Manager is loaded only after you click Accept in the cookie banner. If you reject analytics cookies, the site still works, but we get less usage data.
Cookie categories
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Necessary | Auth/session cookies, `rl_currency`, `rl_affiliate_ref`, `rl_cookie_consent`, `rl_legal_ack` | Login, security, preferences, referral attribution. | Necessary service operation and security. |
| Analytics | Google Tag Manager and any analytics tags loaded through it | Measure traffic and feature usage. | User consent. |
How long cookies may remain
- Session and security cookies may expire when the browser session ends or after the relevant login/session window closes.
- `rl_cookie_consent` is currently stored for up to 180 days.
- `rl_legal_ack` is currently stored for up to 365 days.
- `rl_affiliate_ref` and `rl_currency` may remain until expiry, replacement, or manual deletion.
- Third-party analytics cookies, if activated by consent, may follow the retention periods configured by the relevant provider.
How to change your cookie choice
- You can accept only necessary cookies or accept analytics cookies from the banner.
- You can reopen preferences from the footer link Cookie Settings.
- You can delete cookies in your browser, but that may sign you out or reset preferences.
- Blocking necessary cookies may break core features.
EU, Canada, and US privacy rules
For EEA/UK users, analytics cookies require consent under GDPR/ePrivacy. For Canadian users, consent rules apply under PIPEDA and provincial privacy laws (including Quebec Law 25 where applicable). For US state privacy laws, this page explains categories and choices for optional tracking.
Third-party services
When optional analytics consent is granted, Google services may receive technical and usage information in accordance with their own privacy terms. This site may also link to external marketplaces, authentication providers, payment or email providers, and other third parties, but those third-party cookies and technologies are governed by the policies of those providers when users move outside this site or actively use their services.
Policy updates
We may update this policy if cookies, tools, or legal requirements change. The latest version on this page is the current one.