RootBounty is not a registered company yet. For now it is a website run by its founder as an individual. When the company is incorporated, this document will be updated with its legal name, tax ID and registered office, and you will be asked to accept the new version. Until then, the rights and obligations described here are those of the person who runs RootBounty.
RootBounty stores as little as possible in your browser. Nothing is used for advertising, profiling or cross-site tracking, and no third-party analytics are loaded. This page meets article 22.2 of the Spanish Law 34/2002 (LSSI) and the guidance of the Spanish Data Protection Agency.
Strictly necessary (always on, no consent needed)
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
__Host-rb_session |
cookie, first party | Keeps you signed in (encrypted, HTTP-only, secure). | Until you sign out, up to 30 days |
__Host-rb_login |
cookie, first party | Remembers a sign-in in progress between the password and the second factor. | 15 minutes |
__Host-rb_staff, __Host-rb_staff_login |
cookie, first party | The same for the staff panel (staff only). | As above |
rb_consent |
cookie, first party | Remembers your choice about optional error reports. | 6 months |
rb_lang |
cookie, first party | Remembers the language you chose. | 1 year |
rb.nimbus.tours, rb.nimbus.hinted |
local storage | Remembers which guided tours and tips you have already seen. | Until you clear it |
Optional: anonymous error reports
Only if you accept them, the site sends an anonymous error report when something breaks in your browser: the error, the page path and your browser version — never your cookies, what you typed or your IP address. They go to our own error tracker, on our own server, and are not shared with anyone. This sets no cookie.
Your choice
You can accept or reject the optional reports in the banner shown on your first visit, and change your mind at any time with Cookie settings at the bottom of every page. Rejecting them does not limit anything on the site. You can also delete cookies from your browser's settings; if you delete the session cookie you are signed out.
Cloudflare, which carries the traffic to our server, may set strictly necessary security cookies (such as __cf_bm) to tell people from bots. They are described in Cloudflare's cookie policy.