Cookie Policy
Effective November 14, 2026
This Cookie Policy explains how JustRoadmap (“JustRoadmap”, “we”, “us”, or “our”) uses cookies and similar technologies when you visit our website at justroadmap.io and use the JustRoadmap app (together, the “Service”). It explains what these technologies are, why we use them, and how you can control them. It goes with our Privacy Policy.
What are cookies?
Cookies are small data files placed on your computer or mobile device when you visit a website. Websites use them to work, to work more efficiently, and to provide reporting information.
Cookies set by the website owner (here, JustRoadmap) are called “first-party cookies.” Cookies set by other parties are called “third-party cookies.” We also use your browser's local storage and session storage, which keep small pieces of information on your device. This policy covers those too.
How we use cookies
We use two kinds of cookies:
- Strictly necessary cookies, which the Service needs in order to work: keeping you signed in, protecting sign-in from bots and abuse, remembering a share-link password you entered, and remembering your cookie choice. These are always on.
- Analytics cookies, which tell us how people use our public website pages so we can improve them. These are used only if you agree. We ask every visitor first, and Google Analytics doesn't load until you click Accept.
We don't use advertising cookies, advertising pixels, or social-media cookies, and we don't sell your personal information.
Types of cookies we use
Strictly necessary cookies
These cookies are needed for the Service to work and can't be switched off in our systems. They are set in response to things you do, such as signing in, entering a share-link password or choosing your cookie preferences. Our authentication provider, Clerk, sets the sign-in cookies. Some are set on our sign-in subdomain (clerk.justroadmap.io), including two bot-protection cookies from Cloudflare, which Clerk uses.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
__session and __session_<id> | Clerk (justroadmap.io) | A short-lived, signed token that proves you are signed in on each request | About 1 minute, renewed while you use the Service |
__client_uat and __client_uat_<id> | Clerk (justroadmap.io) | Records when your sign-in was last updated, so the Service can tell whether you are signed in | Up to 1 year (your browser may limit this to about 13 months) |
__client | Clerk (clerk.justroadmap.io) | Keeps your sign-in session on our sign-in service. Can't be read by scripts. | Up to 1 year, or until you sign out; your sign-in session itself ends sooner |
__refresh_<id> | Clerk (justroadmap.io) | Used to renew the short-lived sign-in token | Lasts as long as your sign-in session |
__clerk_handshake, __clerk_handshake_nonce, __clerk_redirect_count | Clerk (justroadmap.io) | Briefly used while confirming whether you are signed in, and to stop redirect loops | Seconds |
__cf_bm | Cloudflare, for Clerk (clerk.justroadmap.io) | Tells people from bots to protect sign-in | 30 minutes |
_cfuvid | Cloudflare, for Clerk (clerk.justroadmap.io) | Rate limiting to protect sign-in from abuse | Until you close your browser |
jr_share_<link id> | JustRoadmap | After you enter the password for a password-protected share link or embed, remembers that for that one link only. It holds a one-way hash, never the password. For embeds on other sites it is partitioned, so it only works inside that site's frame. | 12 hours |
jr_consent | JustRoadmap | Remembers your cookie choice so we don't ask again on every page | 12 months, then we ask again |
Analytics cookies (only with your consent)
If you click Accept, we use Google Analytics, loaded through Google Tag Manager, on our public website pages (the home page, Features, Contact, Privacy, Terms and this Cookie Policy). It tells us which pages people visit, how they found us, and which devices and browsers they use. Google Analytics doesn't run in the JustRoadmap app, on sign-in pages, or on shared, embedded or invitation links.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga | Google Analytics (justroadmap.io) | Tells visitors apart so we can count visits | Up to 2 years (your browser may limit this to about 13 months) |
_ga_5EWKXXRL1C | Google Analytics (justroadmap.io) | Keeps track of your visit (session) for our analytics property | Up to 2 years (your browser may limit this to about 13 months) |
We do not send your name, email address, account ID, roadmap content or any Google user data from sign-in to Google Analytics or Tag Manager, and we do not use analytics data for advertising. Google processes analytics data as described in How Google uses information from sites that use its services.
Local storage and session storage
These stay on your device and are not sent to us.
| Key | Purpose | How long |
|---|---|---|
jr-theme | Your light or dark theme choice (no entry means “match my device”) | Until you change it or clear site data |
jr-announcement-… | Whether you dismissed the announcement bar on the home page | Until you clear site data |
jr.riskView.<user>.<roadmap> | Whether the Risk view is on for each roadmap | Until you clear site data |
jr.next (session storage) | Where to take you back to after sign-in | Until sign-in finishes or you close the tab |
__clerk_environment, __clerk_protect_* (set by Clerk) | Sign-in settings and bot protection for our sign-in service | Until you clear site data |
Third-party cookies
The only third parties that set cookies through the Service are Clerk (sign-in, with Cloudflare for bot protection), which is strictly necessary, and Google (Google Analytics, through Google Tag Manager), only if you accept analytics.
How to control cookies
You have the right to decide whether to accept or reject analytics cookies. Use (also at the bottom of every page) to accept or reject them, or to change your mind at any time. If you turn analytics off after accepting it, we stop Google Analytics and delete the _ga cookies we can reach.
Strictly necessary cookies can't be turned off in Cookie settings because the Service needs them. You can also control cookies in your browser settings. If you block strictly necessary cookies, you won't be able to sign in or open password-protected share links.
You can also opt out of Google Analytics on every website with the Google Analytics opt-out browser add-on.
California residents and Global Privacy Control
We don't sell your personal information and we don't “share” it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act. If you are a California resident, you can turn off analytics cookies at any time with . If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and keep analytics off for that browser. For your other California privacy rights, see our Privacy Policy.
Updates to this policy
We may update this Cookie Policy from time to time, for example when the cookies we use change, or for other operational, legal or regulatory reasons. We will change the date at the top. If we add a new kind of optional cookie, we will ask for your consent again.
Contact us
If you have questions about how we use cookies or similar technologies, email us at contact@justroadmap.io.