Cookie Policy
Last updated: 24.09.2026
What Are Cookies?
Cookies are small text files that are stored on your device when you visit a website. They help the website remember your preferences and improve your experience.
Cookies We Use
We use the following categories of cookies:
Strictly Necessary Cookies
These cookies are essential for the website to function:
• sb-…-auth-token (Supabase session): keeps you signed in; up to 400 days or until you sign out.
• NEXT_LOCALE: remembers the language of the website; until you close the browser.
• rw_region: region for the cookie banner (EU, EEA, United Kingdom and Switzerland, or other countries), derived from the country of your request; 1 day.
• rw_anon: counts the free run without an account in this browser (section 5 of the Privacy Policy); 60 days.
We do not keep your cookie choice in a cookie but in your browser's local storage (rw_cookie_consent). It is valid for 12 months, then we ask again.
Not strictly necessary, but listed here for completeness:
• rw_ref (30 days) stores the referral code from a link you followed (?ref=…), so that a sign-up is credited to the person who shared it.
• referral (30 days): stores the ID of an older referral link of the form /ref/….
• rw_ref_owner (1 year) is set when you open your own referral page, so that your own link is not counted as a referral.
• The cookie rw_ccy also remembers the currency in which we additionally show prices (for example euros), derived from the country of your request; 30 days. You are always billed in US dollars.
Cookies of our own analytics
We set these cookies for all visitors, also without consent. Which data we record, on which legal basis and for how long is described in our Privacy Policy (section 6).
| Name | Purpose | Duration |
|---|---|---|
| rw_vid | Recognises your browser on later visits (random ID, stored by us only as a hash). | 13 months |
| rw_sid | Groups the page views of one visit into a session (random ID). | 30 minutes after the last activity |
| rw_utm | Remembers the first entry source (campaign parameters, domain of the referring page, type of ad click, landing page) so that we can attribute a later sign-up. Only set if there is such a source. | 30 days |
| rw_optout | Stores your objection to this analytics. | 13 months |
Objection
You can object to this analytics at any time without giving reasons. The “Object to analytics” button below sets the cookie rw_optout in this browser. After that your browser no longer sends analytics data, the cookies rw_vid, rw_sid and rw_utm are deleted, and our server discards analytics data from browsers with this cookie. We still store sign-ups, purchases and API keys as contract data, but without any link to your page views.
The objection applies to this browser. If you delete your cookies, you need to declare it again.
Analytics Cookies
Through the “Analytics” category we load Google Analytics 4 by Google to understand how visitors use our website. Google sets the cookie _ga and a cookie whose name starts with _ga_; according to Google they last up to 2 years. So that a sign-up or a purchase is not reported to Google Analytics twice, we note the report in your browser's session storage until you close the tab (rw_ga4_sign_up, rw_purchase_tracked_…).
In the EU, the EEA, the United Kingdom including Gibraltar, Jersey, Guernsey and the Isle of Man, Switzerland, and whenever your country cannot be determined, we load Google Analytics only after you agree in the cookie banner. In all other countries this category is on by default and you can object in the cookie settings.
Our own analytics is not part of this category; it is described above.
Marketing Cookies
Through the “Marketing” category we use Google Ads (conversion tracking) and the X (Twitter) pixel to measure whether our ads lead to sign-ups and purchases. Google and X set their own cookies, for Google for example _gcl_au; more on Google and X as recipients is in our privacy policy. So that a sign-up is not counted twice, we note it in your browser's local storage (rw_signup_conversion_fired); for purchases the same session-storage lock applies as for analytics cookies (rw_purchase_tracked_…).
Through the same category we show sign-in with Google One Tap. For this, your browser loads a script from accounts.google.com, and Google can read and set its own cookies. In addition, the entry google_one_tap_dismissed with a timestamp can be created in local storage; while it is less than 2 hours old, we do not show One Tap. Signing in with the “Continue with Google” button (“Sign up with Google” when registering) always works, even when marketing is switched off.
When you switch off marketing in the cookie settings (withdrawal or objection), we delete the entries rw_signup_conversion_fired and google_one_tap_dismissed as well as the cookies on our domain whose names start with _gcl_ or _twclid. We also delete a Google ad click ID (gclid) that earlier versions of our website stored as a cookie and in local storage; we no longer store it.
The same regional rule applies as for analytics cookies: in the EU, the EEA, the United Kingdom including Gibraltar, Jersey, Guernsey and the Isle of Man, Switzerland, and whenever your country cannot be determined, only after you agree; in all other countries on by default with the option to object.
Managing Cookies
You can change or withdraw your consent for analytics and marketing at any time in the cookie settings; where both categories are on by default, you object there. You open the settings with the “Open cookie settings” button at the top of this page or with the “Cookie settings” entry in the footer of our public pages and of the sign-in and sign-up pages. You object to our own analytics with the “Object to analytics” button in its section.
You can also configure your browser to block or delete cookies. If you delete all cookies, an objection to our own analytics is lost as well.
Contact
For questions about our cookie policy, contact us at info@railwail.com.