Cookies Policy

Last updated: November 8, 2026

This page lists everything Rablem stores in your browser, what it is for, which category it belongs to and whether it needs your consent, under article 22.2 of the Spanish Law 34/2002 (LSSI-CE), the ePrivacy Directive and the GDPR. It covers cookies and similar technologies such as local and session storage.

1. Your choice

The first time you visit Rablem (with or without an account) a notice at the bottom of the page asks for your choice. You can Accept all, Reject all (both work the same way and are equally easy) or Customize. Nothing optional is used until you choose. Rablem works the same if you reject.

Strictly necessary (always active): needed for Rablem to work and to keep it safe. They do not need consent.
Preferences (off by default): remember options of the interface.
Measurement (off by default): count the impressions and clicks of ads for the advertisers' statistics and limit how often you see the same ad, with a first-party cookie.
Personalized ads (off by default): let ads use your interests, age, gender and activity in Rablem. Without it, ads are chosen only by your country and language. This category does not store anything in your browser: it only allows Rablem's server to use data Rablem already has.

You can change your mind at any time with “Cookie settings”, at the bottom of the page, in the legal center and in Settings → Privacy and safety. Withdrawing a consent deletes the cookies and stored data of that category right away. Your choice is saved with its date and the version of this policy; if you have an account it is also saved in the account, so it applies on all your devices. We ask again after 12 months or if this policy changes in a way that needs a new choice. See the Privacy Policy for the record we keep of your choices.

2. What Rablem stores

This is the complete list of what Rablem stores. There are no other cookies, and no IndexedDB or service workers. All of it belongs to Rablem (first party): there are no third-party cookies. The cookies for signing in with Google, for confirming a sensitive action and for two-factor login only exist for a few minutes, and only if you use those features.

Name	What it is for	Category	How long	Party
`rablem_consent` Cookie, SameSite Lax (Secure in production), readable by the page	Remembers your cookie choice (the version of this policy, the date and what you allowed), so we do not ask on every visit and so the web knows what it may use.	Strictly necessary	12 months, then we ask again	First party
`token` Cookie, HttpOnly, SameSite Lax (Secure in production)	Keeps you logged in after you sign in.	Strictly necessary	Until you close the browser or log out; it stops working after 1 day	First party
`google_oauth_state` Cookie, HttpOnly	Protects the “Continue with Google” sign-in against forged requests. Only set if you use it.	Strictly necessary	10 minutes	First party
`google_signup` Cookie, HttpOnly	Holds, in signed form, the email, identifier and name Google sent, while you choose your username. Only set if you sign up with Google.	Strictly necessary	10 minutes	First party
`google_next` Cookie, HttpOnly	Remembers the page you were on when you pressed “Continue with Google”, so you come back to it. Only set if you use it.	Strictly necessary	10 minutes	First party
`google_reauth` Cookie, HttpOnly	Marks that Google is being used to confirm a sensitive action (not to log in). Only set in that case.	Strictly necessary	10 minutes	First party
`rablem_lang` Cookie, SameSite Lax (Secure in production), readable by the page	Remembers the language you chose (English or Spanish), so the web, the emails and the notices come in it. It is only set when you choose a language, when you open a link that asks for one (?lang=) or when you sign in with an account that has one. It is an interface customization you ask for, so it does not need consent.	Strictly necessary	12 months	First party
`rablem_lang_sync` Cookie, HttpOnly, SameSite Lax (Secure in production)	Prevents the page from redirecting you again right after your browser's language has been matched to your account's. Only set when you are signed in and your account's language differs from the browser's; it holds no personal data.	Strictly necessary	30 seconds	First party
`/sw.js` and push subscription Service Worker and Push API (browser storage)	Only if you turn on push notifications: the service worker receives the notifications and opens the right page when you tap one, and your browser keeps the subscription that lets Rablem send them. It is not used to track you, and it holds no cookie. You ask for it by turning it on, and you can turn it off in Settings → Notifications or in your browser.	Strictly necessary (requested by you)	Until you turn it off, sign out on that device or clear your browser data	First party
`delete_reauth` Cookie, HttpOnly, only sent to the route of that action	Signed proof that you have just confirmed your identity with Google to allow deleting your account. Only set after you confirm.	Strictly necessary	5 minutes	First party
`username_reauth` Cookie, HttpOnly, only sent to the route of that action	Signed proof that you have just confirmed your identity with Google to allow changing your username. Only set after you confirm.	Strictly necessary	5 minutes	First party
`twofa_reauth` Cookie, HttpOnly, only sent to the route of that action	Signed proof that you have just confirmed your identity with Google to allow changing your two-factor authentication. Only set after you confirm.	Strictly necessary	5 minutes	First party
`twofa_login` Cookie, HttpOnly, only sent to the two-factor routes	Keeps your login pending between your password and the code of your authenticator app. Only set if you have two-factor authentication on.	Strictly necessary	5 minutes	First party
`viewed:<creation>` Session storage	Remembers that you already viewed a creation in this tab, so its view counter does not go up twice. It holds no personal data.	Strictly necessary	Until you close the tab	First party
`rablem:verify-email` Session storage	Passes, from the sign-up page to the next one, whether the verification code email was sent, so the “We sent you a code” window opens. It is deleted as soon as it is read.	Strictly necessary	Until it is read, or until you close the tab	First party
`rablem:hide-complete-profile:<username>` Local storage	Remembers that you closed the “complete your profile” reminder. Only saved when you close it while logged in.	Preferences	Until you clear your browser data or withdraw the consent	First party
`emoji-mart.frequently` Local storage, saved by the emoji picker library (emoji-mart)	Remembers the emojis you use most, so the emoji picker shows them first. Only saved when you use the emoji picker.	Preferences	Until you clear your browser data or withdraw the consent	First party
`emoji-mart.last` Local storage, saved by the emoji picker library (emoji-mart)	Remembers the last emoji you picked, shown in the emoji picker. Only saved when you use the emoji picker.	Preferences	Until you clear your browser data or withdraw the consent	First party
`emoji-mart.skin` Local storage, saved by the emoji picker library (emoji-mart)	Remembers the skin tone you chose in the emoji picker. Only saved when you use the emoji picker.	Preferences	Until you clear your browser data or withdraw the consent	First party
`rablem_measure` Cookie, HttpOnly, SameSite Lax (Secure in production)	A random identifier with no meaning, used to limit how often you see the same ad and to count impressions and clicks for the statistics advertisers see. Never shared with anyone. Only set if you allow “Measurement”.	Measurement	13 months, or until you withdraw the consent	First party

3. What Rablem does not use

Rablem does not use third-party analytics, advertising or tracking cookies, social-media buttons or pixels, and it does not share anything stored in your browser with other companies. Everything in the list above is Rablem's own. If this ever changes, we will update this page and ask for your consent first.

The security check (captcha) uses no cookies and stores nothing in your browser: nothing in local storage, session storage or IndexedDB. It is Rablem's own check, based on the open-source ALTCHA, and it runs from our server. To solve it, the page starts a few temporary background workers (small programs that use your device's processor for a moment); they are not stored and disappear when the check ends. The result is sent to Rablem in the request itself, and is not kept in your browser. See the Privacy Policy for what the server processes.

4. Other companies

Profile pictures, header images and the images of creations and messages are kept with our storage provider (Supabase), but they are always loaded through Rablem's own image service, on our domain: your browser asks Rablem, and Rablem gets the image from Supabase, so your browser never connects to Supabase and Supabase does not see your IP address. Rablem does not set cookies there.
If you choose “Continue with Google”, you leave Rablem and go to a Google page, which has its own cookies and policy. Rablem does not load any Google script or button on its pages.
The fonts and the intro video used by Rablem are served by Rablem itself, not loaded from other companies. The same goes for the security check (captcha): its code is part of Rablem and nothing is loaded from a captcha company.
If you turn on push notifications, the messages travel, encrypted, through the push service of your browser's company (for example Google for Chrome, Mozilla for Firefox, Apple for Safari or Microsoft for Edge). Rablem sends them nothing but the encrypted message, and they cannot read it.
Rablem is hosted by Vercel, which receives your requests and sees your IP address in its server logs (see the Privacy Policy).

5. How to control or delete them

Besides “Cookie settings”, you can delete or block cookies and stored data in your browser settings. If you block the session cookie, you will not be able to log in; if you block the consent cookie, Rablem cannot remember your choice and will ask again. Logging out removes the session cookie. More about how we handle your data is in the Privacy Policy; questions about cookies: legal@rablem.com.

Questions? Contact legal@rablem.com