Cookie Policy
Version of 2026-10-26
1. Who we are
Ropewalk (ropewalk.ai, ru.ropewalk.ai) is operated by sole proprietor Fedor Aleksandrovich Bochkov (Russian taxpayer ID 773319203413), the controller of the data described here. Contact: team@ropewalk.ai.
2. What cookies are
Cookies are small files a website stores in your browser. We also use similar technologies — browser storage (localStorage / sessionStorage) and third-party scripts. This policy calls all of them “cookies”.
3. Categories
- Strictly necessary — the site can’t work without them: sign-in, security and bot protection, payments, language, your cookie choice, and settings you pick yourself. Always on; no consent needed.
- Analytics — Mixpanel: how features are used, so we can improve the product. Only with your consent.
- Marketing — ad measurement. On ru.ropewalk.ai we use Yandex Metrica, which is both an analytics and an advertising tool (Yandex Direct), so it runs only if you allow both Analytics and Marketing. No marketing tools run on ropewalk.ai today.
Until you make a choice, no optional cookies are set and the Mixpanel and Yandex Metrica scripts are not loaded.
4. Cookie list
| Name | Provider | Purpose | Category | Lifetime |
|---|---|---|---|---|
rw_consentrw_consent_syncedcookie, localStorage | Ropewalk (first party) | Remembers your cookie choice and the policy version it was made for (rw_consent_synced: that the choice was already saved to your account). | Strictly necessary | 12 months |
accessTokenrw_authrw_rtrw_didrefreshTokenrw_billing_browsercookie | Ropewalk (first party) | Keeps you signed in and secures your sessions: short-lived access token, sign-in hint, refresh token and device id (rw_rt / rw_did are httpOnly; refreshToken is a legacy copy being retired); rw_billing_browser binds a checkout started in our mobile app to this browser. | Strictly necessary | accessToken: minutes; the others: cookie up to 400 days, but a session ends after 60 days of inactivity or 90 days at most |
fpcookie | Ropewalk (FingerprintJS open-source library, runs locally — no data sent to FingerprintJS) | Security and fraud prevention: a device identifier checked at sign-up and sign-in to stop automated and duplicate accounts abusing free credits. | Strictly necessary | 90 days |
challenges.cloudflare.comscript / third-party | Cloudflare, Inc. (Turnstile, challenges.cloudflare.com) | Bot protection on the sign-up / sign-in forms. Loaded only on those forms. | Strictly necessary | Session – 30 minutes (set by Cloudflare) |
rw_tgrw_tg_authrw_tg_mini_appcookie, sessionStorage | Ropewalk (first party) | Telegram Mini App: keeps the app on the right domain and signed in from Telegram (telegram-web-app.js from telegram.org loads only inside Telegram). | Strictly necessary | rw_tg: 1 day; others: browser session |
referral_tokencodecookie | Ropewalk (first party) | Carries an invite / referral or early-access code you opened to the sign-up, so the bonus it promises is applied. | Strictly necessary | Browser session |
rw_armcookie | Ropewalk (first party) | Keeps the welcome offer you were shown the same through sign-up (the offer is assigned once per visitor). | Strictly necessary | 90 days |
anonymusChatIdwasChatCreatedanonymousChatsinputrw-starter-resumelastPagecookie, localStorage | Ropewalk (first party) | Lets you try a generation before signing up and keeps your draft / chat across the sign-up step. | Strictly necessary | Browser session |
pendingPaymentpendingPaymentIdtopup.autoIntenttopup.networkcryptoResubDismissedlocalStorage | Ropewalk (first party) | Payments: remembers the checkout in progress so the result page can confirm it (Stripe, YooKassa, CloudPayments and crypto checkouts open on the provider's own page and set their own cookies there). | Strictly necessary | Until the payment completes |
wagmi.*wc@2:*-walletlink:*localStorage | WalletConnect / Coinbase Wallet SDK / MetaMask (crypto wallets) | Only if you connect a crypto wallet: keeps the wallet connection. | Strictly necessary | Until cleared |
nuxt-color-modeisMutedvolumecodeSizeagentModeagentQualityPresetdisableModelSuitabilityCheckadminModeropewalk:sidebarModeadminLocaleemaillikedBlogArticlescookie, localStorage | Ropewalk (first party) | Settings you choose yourself: theme, sound, composer mode and quality, sidebar layout, dismissed hints. | Strictly necessary | Up to 12 months, or until cleared |
socket.ioscript / third-party | Ropewalk (first party) | Real-time connection (socket.io) that delivers generation results. No tracking cookie. | Strictly necessary | Browser session |
accounts.google.comoauth.yandex.ruscript / third-party | Google LLC (Sign in with Google) / YANDEX LLC (Yandex ID) | Only when you choose to sign in with Google or Yandex ID: you are redirected to their page, which sets its own cookies. Nothing loads from them before that. | Strictly necessary | Set by the provider |
mp_*__mp*mpReplay*localStorage, cookie | Mixpanel, Inc. (USA) — mixpanel.com | Product analytics: which features are used, sign-up and generation funnels, sampled session replays and heatmaps. Linked to your account ID when signed in. | Analytics | Up to 12 months, deleted when you withdraw consent |
_ym_uid_ym_d_ym_isad_ym_visorc_ym_*ym_first_gencookie, localStorage | YANDEX LLC (Russia) — Yandex Metrica, metrika.yandex.ru | Site analytics (visits, Webvisor session recordings, click maps) and advertising: measuring which Yandex Direct ads lead to sign-ups and purchases (yclid, ClientID, offline conversions). Runs only with both Analytics and Marketing allowed. ru.ropewalk.ai only | Marketing (+ analytics) | _ym_uid / _ym_d: 1 year; _ym_isad: 2 days; _ym_visorc: 30 minutes |
mc.yandex.ruyandexuidymexscript / third-party | YANDEX LLC (Russia) — third-party cookies on mc.yandex.ru / yandex.ru | Set by Yandex's own domains when Metrica loads; governed by Yandex's policy. We cannot delete them — use your browser settings. ru.ropewalk.ai only | Marketing (+ analytics) | Up to 1 year (set by Yandex) |
5. Changing or withdrawing your choice
- Open — here, in the footer, or in your profile menu. Withdrawing is as easy as consenting.
- When you switch a category off we delete its cookies on our site and reload the page so its scripts stop.
- Third-party cookies on Yandex domains (yandexuid etc.) can’t be deleted from our site — use your browser settings.
- We honour Global Privacy Control: with GPC on, Marketing stays off unless you switch it on yourself.
6. Legal basis, recipients and transfers
Necessary cookies rely on our legitimate interest in providing the service you asked for (and the exemption for strictly necessary storage under the ePrivacy Directive / UK PECR). Analytics and marketing cookies rely solely on your consent (GDPR / UK GDPR Art. 6(1)(a)), which you can withdraw at any time without affecting earlier processing. Recipients: Mixpanel, Inc. (USA) as our processor — transfers to the US rely on the safeguards Mixpanel provides (EU-US Data Privacy Framework and/or Standard Contractual Clauses); YANDEX LLC (Russia) for Yandex Metrica on ru.ropewalk.ai only.
7. California residents (CCPA / CPRA)
We do not sell personal information. We do not “share” it for cross-context behavioural advertising on ropewalk.ai; the only advertising measurement we use (Yandex Metrica on ru.ropewalk.ai) is in the Marketing category and off unless you opt in. You can opt out at any time with “Reject all”, by switching Marketing off in Cookie settings, or by enabling Global Privacy Control in your browser.
8. Proof of consent
To be able to show that consent was given, we keep a record of your choice: a random ID, the policy version, the categories you chose, the time and where you made it (banner / settings), and your account ID if you were signed in. Your IP address is not stored in this record.
9. Changes
If we add tools or purposes we will update this page and ask for your choice again.
10. Contact
team@ropewalk.ai. See also our Privacy Policy. EU/UK residents may also complain to their data-protection authority.