Home/Legal/Cookie Policy
Cookie Policy
This policy explains how ROOT VPN LTD ("we", "us", "our") uses cookies and similar technologies on the ROOT VPN website. Read it alongside our Privacy Policy. It is designed to meet our obligations under the UK Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR.
In plain terms: this website sets only the cookies it needs to work, plus a record of your cookie choice. The one optional item, remembering an affiliate link, is off until you switch it on. We run no analytics and no advertising trackers.
1. What cookies and similar technologies are
Cookies are small text files stored on your device by a website. Similar technologies include browser local storage and session storage. In this policy, "cookies" covers all of these. Cookies can be first-party (set by us) or third-party (set by another organisation), and session (deleted when you close the browser) or persistent (kept for a set period).
2. Strictly necessary vs. consent (the PECR distinction)
PECR splits device storage into two groups:
- Strictly necessary: essential to provide a service you have asked for, for example keeping you signed in or remembering your cookie choice. These are exempt from the consent requirement.
- Everything else: including analytics, functionality-enhancement and advertising. These need your prior, informed consent before they are set, and consent must be as easy to withdraw as to give.
We do not treat any non-essential storage as strictly necessary. Declining optional cookies does not stop you using the site.
3. The cookies and storage this website uses
| Name / key | Type | Purpose | Duration | Category |
|---|---|---|---|---|
rvpn refresh token | First-party cookie (HttpOnly, Secure, set by the sign-in API) | Keeps you signed in to your account | Per token lifetime (up to 30 days) | Strictly necessary |
rootvpn_consent / rootvpn_consent_v1 | First-party cookie + localStorage | Remembers your cookie choice, with a version and timestamp | Up to 180 days | Strictly necessary |
rv_welcomed | First-party localStorage | After you sign in, remembers you have seen the welcome screen (set only for signed-in users) | Until you clear it | Strictly necessary |
rootvpn_ref | First-party cookie + localStorage | If you arrive via a partner/affiliate link, remembers that link so we can credit the partner if you sign up | Up to 90 days | Marketing (consent required) |
Access tokens used while you are signed in are held in memory only. The website loads no third-party analytics scripts, advertising pixels or cross-site trackers. The affiliate item above is the only non-essential storage; it is written only after you consent to the "Marketing" category, and it is deleted if you later reject or withdraw consent.
3.1 Third-party services
If you choose "Sign in with Google" or "Sign in with Apple", or open a payment page, those providers operate under their own notices. We also list processors in our Privacy Policy.
4. How we ask for and manage consent
On your first visit a consent banner lets you Accept all, Reject all (as easy and prominent as accept), or Manage preferences by category. Strictly-necessary cookies are set without consent because they are essential; optional cookies are set only after you opt in.
We record your choice, including the date and the policy version, so we can honour it and demonstrate consent, and we will ask again roughly every six months or if our cookie use changes materially.
Changing or withdrawing consent is as easy as giving it. Reopen the panel any time using the button below or the "Cookie settings" link in the site footer.
5. Managing cookies in your browser
You can also block or delete cookies through your browser settings. Blocking strictly-necessary cookies may stop parts of the site (such as staying signed in) from working. Useful independent guidance is available from the ICO (ico.org.uk) and aboutcookies.org. Where technically supported, we honour recognised opt-out signals such as Global Privacy Control.
6. Changes and contact
We may update this policy to reflect changes in the cookies we use or in the law, updating the effective date above and seeking fresh consent where a new non-essential category is introduced.
- Cookie / privacy enquiries: privacy@rootvpn.app
- Data Protection Officer: dpo@rootvpn.app
- Supervisory authority: Information Commissioner's Office (ICO), ico.org.uk