Cookie Policy
Rolefit uses a small set of cookies to run the service, plus optional analytics that load only if you accept them. No advertising or cross-site tracking.
Last updated: 25 July 2026
Cookies we set
| Name | Purpose | Type | Expiry |
|---|---|---|---|
rf_auth | Keeps you signed in after you enter the access password. | Strictly necessary | 14 days |
rf_client | An anonymous per browser identifier used only to enforce the daily usage limit and to prevent abuse. It does not identify you personally. | Strictly necessary | Up to 12 months |
_ga, _ga_* | Google Analytics: anonymous, aggregated usage statistics. Set only after you click Accept. Your CV is never sent to Google. | Analytics (optional) | Up to 24 months |
The two rf_* cookies are set with HttpOnly, SameSite=Lax, and the Secure flag over HTTPS.
Consent
The strictly necessary cookies keep the service you asked for running and secure, so under PECR regulation 6(4) they are exempt from consent and always on.
The analytics cookies are optional and off by default. Nothing analytics-related loads until you choose Accept on the cookie banner; Reject loads nothing. You can change your choice at any time with the Cookie preferences link in the footer. Analytics is Google Analytics 4, acting as our processor; see the Privacy Notice for how data is handled and transferred.
Managing cookies
You can delete or block cookies in your browser settings. Blocking rf_auth means you cannot stay signed in; blocking rf_client may stop the daily usage limit working as intended.
Changes
We may update this policy from time to time and will change the date above.