Cookie Policy · Rosance
Revision v2.7.0·Published on October 10, 2026
Cookie, Local Storage and Tracking Policy
Version: 2.7.0 Effective Date: October 6, 2026 Supersedes: version 2.6 of September 5, 2026
Because Rosance is built differently, we handle tracking differently. We do not use third-party advertising cookies, we do not perform cross-site or cross-app tracking, and we do not sell your behaviour to data brokers.
This policy covers both our website (rosance.com) and our mobile applications. Article 5(3) of the ePrivacy Directive applies to information stored on any terminal equipment — a browser or a phone — so we treat the two the same way.
1. Strictly Necessary Storage (No Consent Required)
These items are stored on your device, or in first-party cookies, because the service cannot function without them. Under Article 5(3) of the ePrivacy Directive, strictly necessary storage does not require consent.
| Item | Where | Purpose | Lifetime |
|---|---|---|---|
| Session / refresh token | Encrypted device keychain (app) · first-party cookie (web) | Keeping you securely signed in | 30 days, rotated on every use |
| DM encryption keys | Device keychain (app) · browser database, stored so it cannot be read back out by any script (web) | End-to-end encryption of your direct messages | Until sign-out or app data reset. On the web you choose whether to keep it on the device at all |
| Contact key fingerprints | Local storage (web) · device storage (app) | Warning you when someone's encryption key changes, which can mean a new device or an intercepted conversation | Until sign-out |
| Message read markers | Local storage (web) · device keychain (app) | Knowing which conversations you have already read, so the unread dot is accurate | Until sign-out |
| Recent share recipients | Local storage (web) · device storage (app) | Putting the people you send posts to most often at the top of the share list, so you do not have to search for them each time | Until sign-out or app data reset |
| Theme, language and display quality preference | Local storage (web) · encrypted device keychain (app) | Remembering dark mode, your language, and whether you asked the app to draw its lighter-weight graphics on this device. The display quality setting describes the phone, not you: it is chosen per device, never attached to your account, and never leaves the device | Until changed or cleared |
| Media cache | App cache directory | Smooth playback and offline thumbnails | Automatically pruned (LRU) |
| Decrypted DM media cache | App cache directory (app) · memory only, never written to disk (web) | Displaying encrypted media you have received | Pruned automatically; wiped on sign-out |
| Security and anti-abuse signals | First-party cookie / device storage | Rate limiting, fraud and bot prevention | Short-lived |
| Consent record | Local storage / your account | Remembering your analytics choice | Until changed |
| Viewer key for visitors who are not signed in | Local storage (web) | When you watch the public feed without an account, a random key that lets us count your view of a post once, and stop the same ad being shown to you, or charged to its advertiser, again and again. The key is random, is never linked to an account and contains no information about you or your device; the signed token around it is renewed every 24 hours. Not used once you sign in | Until you clear your browser's site data |
| Your answers to "Was this helpful?" in the help center | Local storage (web) · device storage (app) | Not asking you the same question twice. Only which answers you rated and how; nothing about you is sent with it | Until you clear site data or sign out of the app |
| Friends found from your contacts | Device storage (app) | Showing the people from your address book who are on Rosance without asking for your contacts again each time. Only their public profiles are kept, never a phone number | Until sign-out |
| App update files and an install identifier | App-private storage (mobile app) | Receiving fixes and improvements to the app without waiting for a store release. The identifier is a random number the app generates for itself; it is not linked to your account, and we never receive it | Until the app is uninstalled or its data cleared |
Push notification tokens are not cookies, but they are device identifiers: if you enable push notifications, we store a token issued by Google (Firebase Cloud Messaging) so we can deliver them; on iPhone, Apple delivers them on Google's behalf. You can revoke this at any time in your OS settings or in Settings → Notifications.
2. Analytics (OpenPanel — Self-Hosted, First-Party)
We use OpenPanel to understand how the app performs: video load times, feature usage and similar performance measurements.
- Self-hosted: OpenPanel runs entirely on our own EU infrastructure. No analytics data is shared with, or accessible to, any third party.
- First-party only, no cross-site or cross-app tracking: we measure activity inside Rosance only. We do not track you across other apps or websites, and we do not build advertising profiles.
- Pseudonymised: analytics events are keyed to internal identifiers, not to your name or email, and are used solely to improve stability, performance and user experience.
Your choice
- In our mobile apps: analytics are subject to a one-tap opt-out — turn them off at any time in Settings → Privacy → Analytics. The switch takes effect immediately on your device, is saved to your account, and applies on every device you sign in to.
- Crash reports and diagnostic logs are separate, with their own one-tap opt-out at Settings → Privacy → "Diagnostic and crash reports". Turning analytics off does not turn those off, and turning those off does not turn analytics off. Like analytics, they are received and stored only on our own EU servers and are never sent to any third party. See the Privacy Policy for what they contain.
- On our website: analytics storage is not strictly necessary, so we ask for your consent through a cookie banner before it is set. You can decline, and you can change your mind at any time via the "Cookie settings" link in the site footer. Declining has no effect on the parts of the site you can use.
3. What We Do Not Do
- No third-party advertising or ad-measurement SDKs. Rosance shows ads from other Rosance users, chosen by us; advertisers receive totals only (see Privacy Policy Section 4a).
- No cross-app or cross-site tracking, no advertising identifiers (IDFA/GAID) used for tracking.
- No data brokers, no sale or sharing of personal data for advertising.
- No social plug-ins that phone home to another company from our pages. A few features do load something from another company when you use them — the Google and Apple sign-in buttons, GIF search (Giphy), text styles in the website's Creator Studio (Google Fonts) and some camera lenses (GitHub). They receive your IP address and that request, not your account; see Privacy Policy Section 3.
App-store note. Because we do not track you across apps or websites owned by other companies, Rosance does not display Apple's App Tracking Transparency prompt — there is no cross-app tracking to consent to. Our Google Play Data Safety declaration and Apple Privacy Nutrition Label reflect the same first-party-only posture.
4. Managing Your Preferences
- Turn off analytics (app): Settings → Privacy → Analytics — immediate, account-wide, no email required.
- Change your web cookie choice: "Cookie settings" in the footer of rosance.com, or delete/block first-party cookies in your browser (signed-in features will then stop working).
- Clear local data: you can clear the app's local data at any time through your iOS or Android device settings. This signs you out and removes locally stored encryption keys — make sure key backup is enabled first, or older encrypted messages may become unreadable.
- Revoke device permissions: camera, microphone, photo library, contacts and notifications can be revoked at OS level at any time.
- Anything else: privacy@rosance.com.
5. If the Provider Changes
Rosance is currently operated by an individual. We intend to transfer the operation of the service to a Romanian limited liability company (societate cu răspundere limitată) that we incorporate and control.
If that happens, this Policy transfers with it unchanged and we notify you in the app at least 15 days beforehand. Your stored preferences — including your analytics choice — are unaffected and are not shared more widely as a result of the transfer. Our Privacy Policy describes how a change of data controller is handled.