Cookie Policy

1. Purpose

This Policy supplements the Personal Data Processing Policy and applies to gerwin.ai and its subdomains (the Resources).

A cookie is a small piece of data stored by a website in a browser. Similar technologies include local storage, session storage, pixels, SDKs, and other device or session identifiers. If the information directly or indirectly identifies a user, we treat it as personal data.

2. Operator

The Resources are operated by Individual Entrepreneur Ksenia Andreevna Khramtsova, Taxpayer No. 560705615950, Primary State Registration No. 322565800038690.

Questions may be sent to team@gerwin.ai.

3.1. Essential

Essential technologies support:

page delivery and load balancing;
creation and protection of a user session;
cross-site request forgery and attack prevention;
account sign-in and authentication state;
language, theme, and accessibility preferences;
storage of the user's cookie choice;
payment flow, fraud prevention, and security.

Without them, a Resource or requested feature may not work correctly. They are used only to provide requested functionality and cannot be disabled in our preference center. A browser may remove them, but this can sign the user out or reset preferences.

3.2. Analytics

Analytics helps us understand popular pages, referral sources, errors, and possible interface improvements. The corporate site and journal may use Yandex Metrica.

Analytics is enabled only after “Accept all” is selected or the category is enabled in settings. The analytics script does not load before consent. Refusing analytics does not prevent access to the core content.

3.3. Marketing

As of this Policy version, Gerwin AI does not use a separate advertising-cookie category for cross-site profiling. Before introducing such technology, we will update the notice and request prior consent where required.

4. Technologies used

Exact names may change with infrastructure updates, but the purpose and category remain as described.

Technology or example	Provider	Purpose	Typical duration
`gerwin_cookie_consent`	Gerwin AI	records the version, selected categories, and time the choice was saved	up to 1 year
session and authentication cookie, for example `sessionid`	Gerwin AI	sign-in, session continuity, and security	session or authentication term
request-protection cookie, for example `csrftoken`	Gerwin AI	cross-site request forgery protection	session or up to 1 year
`fpt` and similar security identifiers	Gerwin AI	abuse prevention and technical state	session or limited persistent term
language or theme preference	Gerwin AI	remembers interface settings	up to 1 year
`_ym_*`, `_yasc`, `yandexuid`, and related identifiers — only after consent	Yandex	aggregated traffic and performance statistics	session to 2 years depending on the cookie

Actual retention may be shorter because of browser settings, private mode, or manual deletion. Yandex describes Metrica cookies in its documentation.

5. Legal basis

Essential cookies support operation and security, actions requested by the user, and the Operator's rights and legitimate interests in delivering a secure service, provided the user's rights and freedoms are not infringed.

Analytics and other non-essential technologies rely on prior consent. Consent is voluntary and may be withdrawn at any time without affecting features that do not require the technology.

6. Preference choices

On a first visit, the notice provides equally accessible choices:

“Accept all” — enable essential and analytics technologies;
“Necessary only” — retain essential technologies only;
“Customize” — choose categories separately.

The choice is stored for the current domain. A separate subdomain may ask again when browser security settings isolate its cookies.

A new choice may be requested if a new non-essential purpose is added or a provider or retention term changes materially.

Select “Cookie settings” in the footer and save the new preference. After withdrawal:

new analytics events stop being sent;
analytics cookies accessible to the website are removed;
third-party cookies stored on a provider domain may need to be removed directly in the browser.

Withdrawal does not affect processing performed lawfully before it. Cookies can also be blocked, limited, or deleted through browser controls.

8. Third parties

After consent, Yandex may receive an IP address, device and page information, interaction events, and may set its own identifiers. Yandex processes that data under its own documents and the role established by its agreement with us.

External links do not mean that Gerwin AI controls cookies on those websites. Users should review the external website's policy.

Login and payment providers may set essential cookies on their own pages for authentication, fraud prevention, or transaction processing. Those cookies are governed by the provider's documentation.

9. Minimization and security

We seek to:

prevent non-essential scripts from loading before consent;
send analytics only the necessary event set;
never place passwords or full prompt text in cookies;
apply Secure, HttpOnly, and SameSite attributes where technically appropriate;
limit cookie duration and scope;
periodically review connected technologies.

10. Changes and contact

We update this Policy when technologies or law change. A material expansion of optional processing is not applied to an earlier choice without renewed consent where required.

For cookie and privacy questions, contact team@gerwin.ai.