Legal

Cookie policy

Last updated: April 22, 2026 · Effective: April 22, 2026

This Cookie Policy explains how Roushan, Inc. (a Delaware corporation, Dover, Delaware; operator of the AIgateway and AI Gateway brand) uses cookies and similar technologies on aigateway.sh and related subdomains.

1. What a cookie is

A cookie is a small text file placed on your device by a website. Similar technologies include local storage, session storage, IndexedDB, and pixel tags. For simplicity we refer to all of them as “cookies” in this policy.

2. Our approach — minimal by default

We keep cookies to the minimum required to run the site. We do not use third-party advertising cookies. Our product analytics (Cloudflare Web Analytics) is cookieless — it records aggregate page-load statistics without any identifier on your device.

3. Categories of cookies we use

Name	Purpose	Type	Duration
`session / next-auth.session-token`	Keep you signed in and protect against CSRF	Strictly necessary	Session + 30 days
`__cf_bm / cf_clearance`	Cloudflare bot management + DDoS protection	Strictly necessary	30 minutes – 1 year
`aig-theme`	Remember light/dark mode selection	Functional	1 year (local storage)
`aig-playground-*`	Restore playground state (chosen model, chat history)	Functional	Local storage
`aig-cookie-consent`	Remember your cookie-banner choice (EU/UK visitors)	Strictly necessary	1 year
`stripe_mid / __stripe_sid`	Secure payments + fraud detection on checkout	Strictly necessary	Session / 1 year

4. Strictly necessary vs. functional

Strictly necessary cookies are required for the site to function — authentication, anti-CSRF, load-balancing, and payment security. They are set regardless of consent because you cannot use the Service without them. Functional cookies remember your preferences (theme, playground state). In the EU/UK we only set functional cookies after you accept the banner.

5. Third-party cookies

Cloudflare — bot management and DDoS protection (__cf_bm, cf_clearance). Strictly necessary.
Stripe — only set on billing/checkout pages to secure payments and prevent fraud.

We do not run Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any advertising-network pixels.

6. Managing cookies

Most browsers let you view, delete, or block cookies. See the help pages for Chrome, Firefox, Safari, or Edge. Blocking strictly-necessary cookies will break sign-in and checkout.

7. Do Not Track + Global Privacy Control

Because we do not use cross-site tracking cookies, there is no cross-site tracking to disable. We nonetheless honor the Global Privacy Control (GPC) signal as an opt-out under CCPA/CPRA and equivalent state laws.

8. Changes

We will update this Cookie Policy as we add or remove technologies. Material changes are announced with 30 days' notice via the changelog.

9. Contact

Questions: privacy@aigateway.sh
Mailing address: Roushan, Inc., 1111b S Governors Ave, STE 55131, Dover, DE 19904, USA.