Cookies
Version dated 13 October 2026. Strictly necessary technologies support security and requested functions; optional analytics, including AERA first-party Web Vitals, requires a separate visitor choice. The Russian text controls.
Cookies are small browser records that a website can receive with later requests. AERA can also use sessionStorage/localStorage for local interface state. These technologies do not give the website access to all data on the device.
Service cookies support sign-in, protected-session renewal, abuse prevention and language choice. Some account features cannot work without them. Authentication cookies use Secure, HttpOnly and SameSite protections where applicable. Blocking them in the browser may prevent sign-in.
AERA may keep UTM tags, the first visited page, referrer and pending email-verification state in sessionStorage. It belongs to the current tab and is normally cleared after the tab is closed. It is used for navigation and enquiry attribution.
Optional analytics runs only after the visitor selects “Allow analytics”. External Google Analytics 4 and Yandex Metrica are not configured by default and can be enabled only through explicit build-time configuration. AERA also supports first-party Web Vitals for LCP, INP and CLS; production client sampling and server ingestion both default to 0. If Web Vitals is enabled, the browser sends only metric name, numeric value and canonical public route to the same-origin `/api/rum` endpoint. Query strings, URL fragments, referrers, names, email addresses, CRM content, message content, tokens and arbitrary fields are not part of that payload.
Visitors can allow or reject optional analytics. The choice is stored locally. Use “Cookie settings” here or in any page footer to reopen the controls. “Necessary only” stops new external analytics events and unmounts the first-party Web Vitals observer; for Google Analytics, AERA also attempts to remove _ga cookies accessible to the site. This cannot undo data already sent to a provider before withdrawal. The preference is synchronized between open tabs. Strictly necessary cookies are not disabled by this control.
AERA first-party Web Vitals uses AERA’s own same-origin endpoint and does not require a third-party analytics SDK. Google Analytics 4 (Google) and Yandex Metrica (Yandex), where explicitly configured and consented to, may receive technical information about use of public pages and set their own analytics identifiers under their respective terms. Telegram and connected CRM systems operate on their own domains. YooKassa applies only to payments already made. Payment happens on the T-Bank page, so any payment cookies are set by the bank on its own domain, not by AERA. Cloud.ru is called from the AERA server and does not set browser cookies.
Cookie lifetime depends on its purpose. Session records last until the session ends or the server-defined expiry. A consent preference may be kept longer to remember the choice. If first-party Web Vitals RUM is enabled, the server stores aggregates only: default retention is 35 days and the configured maximum is 90 days. AERA periodically reviews and removes technologies that are no longer needed.
Questions about cookies and analytics: support@aera-platform.ru.