Legal
Cookie Policy
Last updated: October 11, 2026
This Cookie Policy explains how Cookie Tech (PANCHENKOV & LAHAV Ο.Ε., Promitheos 2, 166 73 Voula, Attica, Greece; VAT EL802636558; ΓΕΜΗ 179986658000; contact: hello@cookie-tech.com) uses cookies and similar storage technologies on roadmap-roi.com. It is aligned with Article 5(3) of the ePrivacy Directive as transposed into Greek law (Law 3471/2006), the GDPR, and the Hellenic Data Protection Authority's Guidance 2/2020 on cookies and trackers.
1. What are cookies?
Cookies are small text files a website stores on your device. We also use similar technologies such as localStorage and sessionStorage; in this policy we refer to all of them collectively as "cookies".
2. Categories we use
- Strictly necessary. Required to deliver the service (sign-in, security, payments). Exempt from consent under Article 5(3) ePrivacy.
- Functional. Remember your interface preferences (e.g. active calculator tab, dismissed banners).
- Analytics. Aggregated, first-party product analytics used to improve the funnel. Requires consent.
- Marketing. We do not currently use marketing or advertising cookies. No third-party ad networks are embedded.
3. Cookies we set
| Name | Purpose | Provider | Duration | Category |
|---|---|---|---|---|
| sb-<project>-auth-token | Keeps you signed in to your workspace. | Supabase (first-party) | Session or up to 1 year (if 'Remember me' is ticked) | Strictly necessary |
| auth.ephemeral | Remembers that you did NOT tick 'Remember me' so we sign you out on next browser start. | Road map ROI (first-party, localStorage) | Until sign-out | Strictly necessary |
| auth.heartbeat | Timestamp shared by open tabs so a session without 'Remember me' ends only after the browser has been closed. | Road map ROI (first-party, localStorage) | Until sign-out | Strictly necessary |
| calc.activeTab.<orgId> | Remembers which ROI calculator tab you had open. | Road map ROI (first-party, localStorage) | Persistent (until cleared) | Functional |
| mandate.dismissed | Hides the CEO-mandate banner after you dismiss it. | Road map ROI (first-party, localStorage) | Persistent (until cleared) | Functional |
| rr_sid | Random session identifier for first-party product events (page views, funnel steps). No third-party trackers. | Road map ROI (first-party, sessionStorage) | Browser session | Analytics |
| Stripe (__stripe_mid, __stripe_sid) | Not active during the beta. Payments are paused, so Stripe sets no cookies. | Stripe (third-party) | Session to 1 year | Strictly necessary |
4. Your choices
- You can block or delete cookies at any time through your browser settings. Blocking strictly-necessary cookies will prevent sign-in and payments from working.
- For analytics you may clear
sessionStorageto stop the current session identifier. A dedicated in-app consent manager is on our roadmap; until it ships, analytics events collect no directly identifying information.
5. Third-party cookies
During the beta we embed no third-party trackers. Payments (Stripe) are not active. Fonts are loaded from Google Fonts (fonts.googleapis.com), which receives your IP address when the font files are requested. We do not embed advertising or social-media tracking pixels.
6. Complaints
You have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr, Kifissias 1-3, 115 23 Athens, Greece).
7. Changes
We will update this Cookie Policy when we add or change cookies. The "Last updated" date at the top reflects the current version.