Cookie Policy
This policy explains which cookies and similar technologies may be used on this site, why they are used, which ones are strictly necessary, and how users can accept, refuse, or later update optional cookie choices.
Last updated: March 24, 2026
How this site uses cookies
This site uses first-party cookies, browser storage, and limited third-party scripts to keep the service secure, remember user settings, manage logins, support referral and affiliate features, and, only where consent has been given, measure site traffic and product usage.
Strictly necessary cookies and local storage
These technologies are required to provide the service requested by the user or to keep the site secure. They do not require optional analytics consent under the cookie choices banner.
- Authentication, session, CSRF, callback, and security cookies used by NextAuth and the login system.
- `rl_currency`, used to remember the selected display currency.
- `rl_affiliate_ref`, used to remember a valid referral tag when a user lands on this site through an affiliate link.
- `rl_cookie_consent`, used to remember the user's cookie preference choices.
- `rl_legal_ack`, used to record that the user confirmed the legal documents during login or registration flows.
- Technical browser storage strictly necessary for rendering the site, keeping UI state stable, or protecting the service from abuse.
Optional analytics and tag management
Google Tag Manager is loaded only after the user actively accepts analytics cookies through the cookie banner. If analytics cookies are refused, the site should continue to work normally, but we may lose aggregated usage information that helps us improve the service.
Cookie categories
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Necessary | Auth/session cookies, `rl_currency`, `rl_affiliate_ref`, `rl_cookie_consent`, `rl_legal_ack` | Login, security, session continuity, user preferences, and referral attribution. | Necessary for the service requested by the user and our legitimate interest in security and basic operation. |
| Analytics | Google Tag Manager and any analytics tags loaded through it | Measure traffic and product usage at an aggregated level. | User consent. |
How long cookies may remain
- Session and security cookies may expire when the browser session ends or after the relevant login/session window closes.
- `rl_cookie_consent` is currently stored for up to 180 days.
- `rl_legal_ack` is currently stored for up to 365 days.
- `rl_affiliate_ref` and `rl_currency` may remain until expiry, replacement, or manual deletion.
- Third-party analytics cookies, if activated by consent, may follow the retention periods configured by the relevant provider.
How to manage or withdraw consent
- Users can accept only necessary cookies or accept analytics cookies from the cookie banner when it appears.
- Users can later reopen cookie preferences from the footer link labelled Cookie Settings.
- Users can also delete cookies through their browser settings, although doing so may sign them out or reset saved preferences.
- Browser-level controls may also be used to block cookies, but some features of this site may stop working correctly if necessary cookies are blocked.
Third-party services
When optional analytics consent is granted, Google services may receive technical and usage information in accordance with their own privacy terms. This site may also link to external marketplaces, authentication providers, payment or email providers, and other third parties, but those third-party cookies and technologies are governed by the policies of those providers when users move outside this site or actively use their services.
Policy updates
We may update this policy when cookies, vendors, legal requirements, or product features change. The latest version published on this page is the one that governs current use of cookies on this site.