Cookie notice

Your choice comes first

Optional analytics and session replay remain off unless you allow them. Our public pages count visits without cookies (below). Rejecting optional technologies does not limit the website or product. You may accept, reject, or change the choice later.

Privacy choices

Necessary storage

Necessary storage supports a service or preference you request and cannot be disabled through the privacy controls:

• Authentication: the secure, HTTP-only session cookie carries an opaque session identifier.
• Privacy choice: rolt:privacy-preferences:v1 in local storage remembers whether you accepted or rejected optional analytics until you change the choice or clear browser storage.
• Theme: the difftool-theme cookie remembers light or dark (none follows your device), on rolt.ai so the site and the app share it, for a year. It is not used for tracking.
• Interface state: local storage may remember collapsed navigation, the places you opened recently in the command menu (pull request titles among them, cleared when you sign out), and session-refresh coordination.

Analytics and session replay — optional

If you allow this category, PostHog helps us understand page visits, feature usage, navigation, device and browser characteristics, performance, and errors. PostHog may also record a replay of browser interactions for troubleshooting.

On marketing pages, page text may remain readable in a replay. On the authenticated product, inputs are masked and page text is masked. Story, file diffs, and the Memory page (learned guidelines) are excluded from recording. Product page URLs are stored as route templates, not as organization slugs or pull-request identifiers. We do not send source code, prompts, findings, repository names, or email addresses to PostHog.

Rolt does not use visitor-identification services.

PostHog uses first-party cookie and local-storage names beginning with ph_, plus session storage, loaded through a same-origin proxy. Persistent identifiers may remain for up to 365 days. Withdrawing this category stops capture and removes Rolt's PostHog persistence from the browser.

Cookieless visit counts

Until you choose, and if you decline, the home page, these legal pages, the sign-in pages and the pages of free public reviews count your visit through PostHog without cookies or any other browser storage. PostHog identifies a visit by a hash it makes on its servers from your IP address and browser with a salt it changes every day, so the count does not follow you from one day to the next. It records the pages you view, how long you stay, what you click and the campaign parameters of the link that brought you (such as utm_source); on a public review's page, only its route and what you do there (arriving from a pasted or swapped link, asking for a review, its end, reading it, sharing it, and clicking the offer to install Rolt), never its repository or code. There is no replay, and nothing inside the product is counted. Global Privacy Control and Do Not Track stop the count.

The same pages are also counted, whatever you choose, by Vercel Web Analytics, from Vercel, which already hosts our website. It uses no cookies and stores nothing in your browser; Vercel tells visits apart by a hash of your request that it discards after 24 hours. It records the page's address (for a public review, only its route; of the address's query, only campaign parameters such as utm_source and ad click identifiers such as gclid), the website that linked you here (its address by origin alone, such as github.com), the time, the country, region and city your IP address points to, and your browser, operating system and device type. Nothing you click and nothing inside the product is sent to Vercel. Global Privacy Control and Do Not Track stop this count too.

Browser and device controls

You can also delete or block cookies and local storage through your browser. Blocking necessary storage may prevent login or saved preferences from working. Rolt treats Global Privacy Control as an opt-out from optional analytics and from the cookieless counts.

Questions

For questions, access, or deletion requests, email our privacy contact. We will revise the updated date when these practices materially change.