1 The cookies we set
| Name | What it does | How long | Kind |
|---|---|---|---|
| roundout_session | Keeps you signed in. If you aren't signed in, it keeps your place while you buy or claim a key. | 2 weeks, renewed while you use the site | Necessary |
| roundout_csrf | Protects forms from requests sent by other sites. | 1 year | Necessary |
| messages | Carries a one-time notice to the next page after an action, such as "Saved". It can hold an email address, such as yours after you sign in. | Until the notice shows | Necessary |
| roundout_td | Remembers a browser you chose to trust when signing in, so it skips the two-step code. | 30 days | Necessary, only if you tick "Remember this device" |
| roundout_consent | Remembers your cookie choice. | 1 year | Necessary |
| roundout_vid | A random code that counts you as one visitor across pages and visits. It goes when you turn analytics off. | 1 year | Analytics, only if you accept |
All of them are first-party cookies: only our own site reads them.
2 What we record about a visit
- Analytics: the pages you open and for how long, the site that sent you (not its full address), your browser, operating system and type of device, the country, region and city your IP address points to, with only the network part of the address kept, and whether the visit led to a sign-up, a purchase or an activation. Never your full IP address.
- Marketing: the campaign tags in the link that brought you (such as utm_source), so we can tell which announcements work.
- Visits from people who said no, or haven't chosen yet, only add one to an hourly total, with nothing about them.
- Visitor records are deleted 90 days after the last visit; only totals remain. Nothing is shared with anyone or used for advertising.
- Your choice itself, yes or no: what you chose and when, a random code, a one-way code of your IP address and your browser, kept for 2 years as the record of your choice.
3 Counting without cookies
Our network provider also counts page views, referring sites, countries and browsers for us, in aggregate, without cookies, without storing your IP address and without identifying you. It runs whatever you choose in the cookie settings, as part of running the site.
4 Cookies set by others
- Our network-protection provider may set a strictly necessary security cookie when it needs to check a visit, for example during an attack, and its security check on the sign-up, password reset, contact, key-claim and invitation forms reads technical signals from your browser to tell people from automated programs.
- Paddle, whose checkout window opens when you buy, uses its own cookies under its policy.
- Google and Microsoft use their own cookies on their own sites if you sign in with them.
- OpenStreetMap serves the map on an airport page if you choose Show the map, under its own policy.
5 Browser storage
Besides cookies, the site keeps these two notes in your browser. Neither is sent to us or to anyone else.
- A download link. The downloads page keeps your latest link in session storage, so going back to the page doesn't use up another one. It goes when the link runs out or you close the tab.
- Pages you have seen. A note in session storage that a portal page has already played its opening motion, so it doesn't play again. Your browser deletes it when you close the tab.
6 Your choices
- Change your choice at any time with , also at the bottom of every page. Turning analytics off stops the count from the next page and takes the random code out of your browser.
- If your browser sends Do Not Track or Global Privacy Control, we treat it as a no to analytics and marketing, whatever the cookie says.
- You can also delete cookies in your browser's settings; you will then be signed out.
Our Privacy Policy explains the rest of what we do with personal data, and its update record covers this page too.