Cookie Policy

Last updated: 25.04.2026

1. General

This Cookie Policy describes the use of cookies and equivalent local-storage means (localStorage, sessionStorage) on the .solutions ID service (the "Service") at https://solu.id and its sub-domains.

It supplements the Privacy Policy (https://solu.id/legal/privacy) and the Terms of Service (https://solu.id/legal/terms).

2. Operator

Sole Proprietor Kostin Gleb Yurievich INN 784001826750, OGRNIP 318784700122070 E-mail: legal@solu.id

3. What counts as a cookie

Cookies are small text files saved by the browser. "Equivalent technologies" include localStorage and sessionStorage — they serve the same purpose (remember small pieces of state between page loads) but are not technically cookies. For the purposes of this Policy, "cookies" covers all of the above.

4. Classification

Cookies used on the Service are classified into four categories:

### 4.1. Strictly necessary Required for the Service to operate. No separate consent is required (Roskomnadzor Letter of 17.07.2017). Disabling them breaks the Service.

  • `sb-<project>-auth-token` — JWT for the active session. Lifetime: 1 hour, rolling. HttpOnly, Secure, SameSite=Lax.
  • `sb-<project>-auth-token-code-verifier` — short-lived PKCE code verifier used during sign-in / magic-link.
  • `sb-<project>-refresh-token` — long-lived refresh credential. Lifetime: 7 days, rolling.
  • `solutions_pending_verification` (localStorage) — technical state of the registration flow. Lifetime: 15 minutes.

### 4.2. Functional Remember user preferences. The Service works without them, just less conveniently. Consent is implied by continued use of the Service.

  • `solutions_lang` (localStorage) — UI language (English / Russian).
  • `solutions-dark-mode` (localStorage) — selected theme (light / dark).
  • `solutions_viewer_lang` (localStorage) — language of a Visitor on a Public Profile.
  • `solutions_dopamine_pref` (localStorage) — Public Profile look preference.
  • `tg_webapp_init` (sessionStorage) — Telegram WebApp init flag. Cleared on tab close.

### 4.3. Analytics Not used. The Operator does NOT set Google Analytics, Yandex Metrica, Facebook Pixel, Hotjar, Mixpanel, Amplitude, PostHog or any other third-party counter. The only analytics collected — link-click counts on a User's Public Profile — runs server-side and does not set a cookie in the Visitor's browser.

### 4.4. Advertising Not used. The Operator does not display third-party ads and does not share Visitor data with ad networks.

5. Third-party cookies

5.1. PhotoRoom (image background removal). Loaded only when a User uses the background-removal feature. PhotoRoom may temporarily set its own cookies in the scope of the API call. The Operator does not control these cookies; see https://photoroom.com/privacy.

5.2. Embedded iframe players (YouTube, Spotify) and OpenStreetMap. Used by some Public Profile themes if a User has corresponding links. Cookies are set in the provider's domain and governed by its policy.

5.3. Telegram WebApp. When the Service runs inside Telegram's in-app browser, Telegram itself may set its own storage in its own context.

No other third-party cookies are set.

6. Cookie management

6.1. Browser controls. Use the standard privacy settings of your browser (Safari → Settings → Privacy; Chrome → Settings → Privacy and security; etc.). Clearing cookies for our domain logs you out and resets your language and theme preferences.

6.2. Do Not Track / Global Privacy Control. The Operator does not deploy advertising or analytics trackers; no cross-context tracking occurs. DNT and GPC are honoured operationally but have no additional effect because there is nothing to opt out of.

7. Subject rights

Since cookie-ids associated with an Account are recognised as personal data under Roskomnadzor practice, all rights set out in arts. 14, 20, 21 of 152-FZ apply (see section 10 of the Privacy Policy).

8. Changes

The Operator may amend this Policy. The new version is published at https://solu.id/legal/cookies. Material changes are also shown to Users on the next sign-in.

9. Language versions

This Policy is published in Russian and English. The Russian version is the legally authoritative one for users in the Russian Federation.

Last revised: 28 April 2026.

All legal documents