1. About this policy
Cookies are small files a website stores in your browser; local storage and session storage are similar storage in the browser. This policy lists what roasan.com and app.roasan.com store, why, and for how long. It is part of the Privacy Policy.
2. Necessary cookies
chm_sess keeps you signed in: it is set when you sign in, cannot be read by page scripts, lasts 30 days and is renewed while you use the Service, and is deleted when you sign out. chm_locale remembers the language you chose or the Turkish pages you opened, for 1 year. chm_theme remembers the light or dark theme you picked in the app, for 1 year. Cloudflare, which protects the site, may set __cf_bm (bot protection, 30 minutes) and cf_clearance (after a security check). Cloudflare Turnstile, the security check on the sign-in, sign-up and free-tool forms, runs from challenges.cloudflare.com and reads browser signals to tell people from bots. These are needed for the Service to work and to keep it secure.
3. Analytics
We use PostHog (EU cloud, Frankfurt), loaded through our own domain, to understand how the site is used. It stores a random visitor and session identifier in a cookie named ph_…_posthog on roasan.com and its subdomains, and a copy in local storage, for up to 1 year. It records page views, clicks, scrolling, performance, errors and screen recordings of visits, with every form field masked; signed-in visitors are linked to their account. roasan:first-touch keeps in local storage the referring site and campaign parameters of your first visit until you sign up, when they are saved with your account.
4. Preferences and security in browser storage
Local storage, kept until you clear it: chm_filterbar:… remembers whether a page's filter panel is open, roasan.storeColumns the order of the store list's columns, and chm_cs when your browser last sent a device signal we use to detect account sharing and scraping. Session storage, cleared when you close the tab: the position in a list you return to, the image of an image search, and the store a free tool showed you, so the sign-up page can name it.
5. Third parties
Creem's checkout and customer portal run on Creem's own domain and set their own cookies under Creem's policies. We do not use advertising cookies or advertising pixels.
6. How to control cookies
You can view, delete and block cookies and site data in your browser settings, and most browsers can block third-party or tracking storage. Blocking chm_sess means you cannot sign in. You can block analytics by blocking cookies and site data for roasan.com or with a content blocker, or object to analytics by writing to [email protected].
7. Changes
We update this policy when what the site stores changes; the date above shows the latest version.
Questions: [email protected]