In short
Cookies are small records a website leaves in your browser. Your browser keeps similar records in its own storage (localStorage and sessionStorage). This page lists everything the gridlap.club website and the Gridlap Mini App in Telegram set, why and for how long.
- Essential cookies – sign-in, games without signing in, language and your choice on the banner. The site doesn’t work without them, so we don’t ask for consent to them.
- Functional records – the colour theme, your place in a race replay, practice and other settings. The records themselves live only in your browser and don’t reach us; the Mini App theme and language are copies of settings in your profile, which the server keeps too.
- Statistics – Yandex Metrica – and Webvisor work only after your consent, each with its own switch; the ‘Allow statistics’ button doesn’t switch on Webvisor. Declining is as easy as accepting: the ‘Essential only’ button.
- Your choice is kept for 12 months. You can change your mind at any time – ‘Cookie settings’ at the bottom of the website’s pages.
- We also count website visits with our own counter – without cookies.
Who the controller is
The controller of the personal data collected by Gridlap’s cookies is Private Unitary Enterprise ‘Naladim-studiya’ (ChP ‘Naladim-studiya’), Republic of Belarus, UNP 194052034; registered office: ul. Leshchinskogo 33, korp. 2, kv. 69, 220140 Minsk, Belarus; email: owner@naladim.by. The Gridlap server is in Belarus. Who else processes Gridlap’s data and on what basis is in the privacy policy.
Essential cookies
Without them sign-in, games without signing in and the language choice don’t work. The law doesn’t require consent for them, and you can’t switch them off on the banner – only in your browser settings, but then sign-in and games without signing in stop working.
__Host-gridlap_web
- Where
- gridlap.club
- What for
- You’re signed in on the website. Page scripts can’t see it
- How long
- 30 days or until you sign out
__Host-gridlap_hint
- Where
- gridlap.club
- What for
- A hint to the page that it’s worth asking the server who you are
- How long
- 30 days or until you sign out
__Host-gridlap_login
- Where
- gridlap.club
- What for
- While signing in through the bot is in progress
- How long
- 5 minutes
__Host-gridlap_guest
- Where
- gridlap.club
- What for
- Games without signing in: so today’s game isn’t lost
- How long
- 30 days after the last move
__Host-gridlap_lang
- Where
- gridlap.club
- What for
- The website language you chose with the ‘EN / RU’ switch. Until you choose, the site follows your browser’s language – we read it on every visit and don’t store it
- How long
- 1 year
gridlap_session
- Where
- Mini App (gridlap.naladim.by)
- What for
- You’re signed in to the Mini App
- How long
- 30 days
__Host-gridlap_admin and __Host-gridlap_confirm
- Where
- Admin panel (gridlap.naladim.by)
- What for
- The controller’s sign-in to the admin panel and its confirmation; never set for visitors
- How long
- Up to 7 days
gl-consent (browser storage)
- Where
- gridlap.club
- What for
- Your choice on the cookie banner: what is allowed, when, and the receipt number
- How long
- 12 months, then the banner asks again
Functional browser records
These are settings and page memory. The records themselves live only in your browser, aren’t sent to us, and we don’t recognise you by them. The Mini App theme and language are copies of settings in your profile: the server keeps them too (privacy policy, ‘What we keep – in detail’), and the browser holds a copy so the Mini App opens the right way straight away. No consent is needed for these records: they don’t collect data about you for us.
gl-site-theme
- Where
- gridlap.club
- What for
- The colour theme – light or dark
- How long
- In your browser until you clear the site’s data; not sent to us
gl-lang-hint
- Where
- gridlap.club
- What for
- You pressed ‘Stay’ on the hint about the Russian version
- How long
- In your browser until you clear the site’s data; not sent to us
gl-replay-speed, gl-replay-layout and gl-replay:<season>:<round>:<session>
- Where
- gridlap.club
- What for
- Race replay: speed, screen layout and where you stopped
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.intros
- Where
- gridlap.club
- What for
- Which ‘How to play’ screens you’ve already seen without signing in
- How long
- In your browser until you clear the site’s data; not sent to us
gl-hint-ok
- Where
- gridlap.club
- What for
- You confirmed a hint paid for with Laps and don’t want to confirm again
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.practice.keys.<game> and gridlap.practice.era.<game>
- Where
- gridlap.club and Mini App (gridlap.naladim.by)
- What for
- Practice: which puzzles you’ve already seen and which era you picked
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.practice.<game> (sessionStorage)
- Where
- gridlap.club and Mini App (gridlap.naladim.by)
- What for
- The practice game – so it isn’t lost on reload
- How long
- Until you close the tab or the Mini App
gridlap.site.pitstop and gridlap.site.reaction
- Where
- gridlap.club
- What for
- Your latest results in ‘Pit stop’ and ‘Reaction’ on this device
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.locale
- Where
- Mini App (gridlap.naladim.by)
- What for
- The Mini App language – a copy of the language from your profile, so the sign-in screen speaks it straight away
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.theme
- Where
- Mini App (gridlap.naladim.by)
- What for
- The Mini App colour theme – a copy of the choice from your profile, so the screen doesn’t flash on launch
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.home.features.hidden and gridlap.home.newcomer.hidden
- Where
- Mini App (gridlap.naladim.by)
- What for
- You hid the hints on the home screen
- How long
- In your browser until you clear the site’s data; not sent to us
gl-hint-confirmed
- Where
- Mini App (gridlap.naladim.by)
- What for
- You confirmed a hint paid for with Laps and don’t want to confirm again
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.review-draft.<round>
- Where
- Mini App (gridlap.naladim.by)
- What for
- A draft race review until you send it: until then the text goes nowhere, not even to us
- How long
- Until you send or erase the draft
gridlap.guess.patterns
- Where
- Mini App (gridlap.naladim.by)
- What for
- Pattern mode in ‘Word’ – a setting of this phone
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.guess.career.best.<level>
- Where
- Mini App (gridlap.naladim.by)
- What for
- Your best result in ‘Career’ on this device
- How long
- In your browser until you clear the site’s data; not sent to us
gridlap.xp.day
- Where
- Mini App (gridlap.naladim.by)
- What for
- XP for the daily puzzles – to show ‘+N’ in a result opened later
- How long
- Until the next day
gl-friend-streaks-seen and gl-league-result-seen
- Where
- Mini App (gridlap.naladim.by)
- What for
- Which congratulations on friends’ streaks and league results you’ve already seen
- How long
- In your browser until you clear the site’s data; not sent to us
gl-tz-synced (sessionStorage)
- Where
- Mini App (gridlap.naladim.by)
- What for
- The time zone has already been checked with the server in this launch
- How long
- Until you close the Mini App
Statistics: Yandex Metrica
It turns on only if you pressed ‘Allow statistics’ on the banner or switched on ‘Statistics (Yandex Metrica)’ under ‘Customise’. Then the Yandex Metrica counter sets its own cookies and collects statistics without names: which pages are opened, where people come from, on which devices and browsers; it receives the IP address, like any website. The same events our own counter keeps – follow-through to the bot, 3D, finished articles, searches without the search text – go to Metrica as goals. We need this to understand which pages are useful and where the site is awkward.
Yandex sets the cookies itself: some on the gridlap.club domain, some on Yandex domains. The list and terms follow Yandex’s help page on the use of cookies:
_ym_uid, _ym_fa, _ym_ucs
- Where
- gridlap.club
- What for
- Tell one visitor from another
- How long
- 1 year
_ym_d
- Where
- gridlap.club
- What for
- Date of the first visit
- How long
- 1 year
_ym_isad
- Where
- gridlap.club
- What for
- Whether the browser has an ad blocker
- How long
- 20 hours
_ym_metrika_enabled
- Where
- gridlap.club
- What for
- Check that the other Metrica cookies were set correctly
- How long
- 60 minutes
_ym_hostIndex
- Where
- gridlap.club
- What for
- Limit the number of requests to Metrica
- How long
- 1 day
_ym_debug and _ym_sup_debug
- Where
- gridlap.club
- What for
- The counter’s debug mode; not set for ordinary visitors
- How long
- Until the end of the visit / 1 day
i, yandexuid, yuidss, ymex, usst
- Where
- Yandex domains
- What for
- Tell a visitor apart and match their identifiers across Yandex domains
- How long
- 1 year
yabs-sid
- Where
- Yandex domains
- What for
- Visit number
- How long
- Until the browser is closed
gdpr, is_gdpr, is_gdpr_b
- Where
- Yandex domains
- What for
- Mark visitors to whom the GDPR applies
- How long
- Up to 2 years
Webvisor
Separate from statistics: it turns on only if you separately switched on ‘Session recording (Webvisor)’ under ‘Customise’ – the ‘Allow statistics’ button doesn’t switch it on. Webvisor doesn’t work without statistics. Webvisor records how people use the pages – scrolling, clicks, mouse movement and taps – so we can see where the site is awkward.
Input fields, names and usernames on the page are masked: Webvisor sees asterisks or blurred text instead, so what you type and other people’s names in tables don’t get into the recording.
_ym_visorc_*
- Where
- gridlap.club
- What for
- Webvisor recording
- How long
- 30 minutes
Our own counter – without cookies
We also count how many people open the website ourselves, on our own server in Belarus: this counter sets no cookies and stores nothing in the browser. It takes the page address, the referring site, the device type and a day fingerprint – your IP address and browser encrypted with a random key of the day, which lives only in the server’s memory and is wiped the next day; it doesn’t store the IP address or the browser themselves. Fingerprints live for 35 days, and once the day is over they can’t be linked to anyone. Details are in the privacy policy, ‘Our own website visit counter’.
Yandex as processor, transfer to Russia
Metrica and Webvisor data is processed by Yandex on our behalf: Yandex LLC, 16 Lva Tolstogo St., Moscow 119021, Russia; terms – yandex.ru/legal/metrica_termsofuse. So the data goes to Russia. Russia is on the list of countries with an adequate level of personal data protection (the countries of the Eurasian Economic Union and the parties to Council of Europe Convention No. 108), so no separate permission for the transfer is needed. The basis for both Metrica and the transfer is your consent on the banner.
Yandex processes the data under its Metrica terms: they list the actions with the data, confidentiality and protection measures – under Russian law. Yandex also uses aggregated data without people for its own purposes, and sets its own cookies on Yandex domains as well (see the table above). If the GDPR applies to you (you are in the EU), the party to the Metrica terms instead of Yandex LLC is Air Smart Advertising Solutions FZ-LLC (UAE), and a separate Yandex data processing agreement applies.
Metrica reports and Webvisor recordings are kept in Gridlap’s Metrica account. Yandex doesn’t publish how long it keeps them there, so we set the term ourselves: once Gridlap stops using Metrica, we’ll delete the counter with all its data within 30 days. You can have data about yourself deleted earlier by request – see ‘Your rights’.
How to accept, decline and change your mind
On your first visit the site shows the banner and sets no optional cookies until you choose. The banner says who the controller is, where the data goes and how long your choice lasts, and has two buttons that look the same – ‘Allow statistics’ (switches on statistics only) and ‘Essential only’ (essential cookies only) – and ‘Customise’ below them with the ‘Statistics (Yandex Metrica)’ and ‘Session recording (Webvisor)’ switches. Webvisor is switched on only with its own switch. The switches stay off until you turn them on yourself. The site works even before you choose.
Your choice is kept for 12 months – then the banner asks again.
We also record your choice on the server – as a receipt without a name: a random number (also kept in your browser next to your choice), what was allowed, when and with which version of the banner. The receipt contains no IP address or browser. We keep it for 2 years so we can prove the consent if checked.
Changed your mind? Press ‘Cookie settings’ at the bottom of the website’s pages and turn the switch off. That is withdrawing consent: the counter won’t start again, and we’ll wipe its cookies on gridlap.club. Cookies on Yandex domains are deleted in your browser settings.
If you decline, the site works fully: every page, games, sign-in and the account. We just won’t see your visits in Metrica.
Age
Consent to optional cookies can only be given from the age of 16: for anyone younger it is given by a parent or another legal guardian. If you’re under 16, press ‘Essential only’.
Cookies in your browser settings
Every browser lets you view and delete cookies and site data and block them. If you block essential cookies, website sign-in and saving games without signing in stop working; the rest keeps working.
You can block Metrica and Webvisor on all websites at once with Yandex’s own browser extension, the Yandex Metrica blocker, for Chrome and Firefox – Yandex describes it at yandex.ru/support/metrica/general/opt-out.html. The site won’t break.
Your rights
You can find out what data of yours we process, correct it, delete it and withdraw consent at any time: write to owner@naladim.by. Reply times and how to submit a request are in the privacy policy, ‘Your rights and how to use them’ and ‘How to submit a request’. You can complain to the National Personal Data Protection Center of the Republic of Belarus (cpd.by).
If the cookie policy changes
A new version means a new date at the top of the page. If a new kind of optional cookie appears, the site will ask for consent to it again.