Legal

Cookie Policy

Last updated: 2026-10-05 · Contact: [email protected]

ProofKit sets no cookies of its own and uses no advertising. The site keeps a few items in your browser’s storage so that it works, and loads Google Analytics only if you agree. This page lists all of it, including the requests your browser makes to other services.

01 /Storage the site needs (always on)

These items live in your browser’s localStorage (or session storage, where noted). Unlike cookies, your browser does not attach them to requests by itself. The site cannot work without them, so they need no consent:

  • pk_tokens — your sign-in tokens. Removed when you sign out.
  • pk_user — your profile as shown in the dashboard (email, role, wallet). Removed when you sign out.
  • pk_consent_v1 — your cookie-banner choice and when you made it.
  • ton-connect… — your wallet connection, kept by the TonConnect library. The connection is cleared when you disconnect the wallet or sign out.
  • pendingInviteToken, and invitedNodeHint in session storage — hold a private-node invitation while you sign in.
  • pk_return_to, in session storage — the page you were on when you had to sign in, so signing in takes you back to it. Read once, forgotten after an hour, never a note link.
  • claim_sent_… — marks payout claims an operator has already sent.
  • pk_onb_v1, pk_sub_app, op-nodes-…, op-links-… — the getting-started checklist, the VPN app you picked for your subscription URL, and operator dashboard filters and views.
  • In the Telegram Mini App, pk_tab and pk_sort — the last tab you opened and your sort order.

02 /Analytics (optional, consent required)

If you click Accept analytics, we load Google Analytics (measurement ID G-1EDJYWZDS3). It sets two cookies on proofkit.org, _ga and _ga_1EDJYWZDS3, which let Google recognise repeat visits from the same browser. They last up to two years; some browsers cut that to about 13 months. Analytics is off by default: it loads only after you opt in.

You can change your choice at any time in Cookie settings. Switching to Essential only stops Google Analytics from the next page you open. The two cookies it already set stay in your browser until they expire or you delete them.

03 /Requests to other services

Some pages load files from other services. We set no cookies through them, but each one sees your IP address and browser details:

  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — the site’s fonts, on every page.
  • jsDelivr (cdn.jsdelivr.net) — a chart library on the home page and the dashboard, and Swagger UI on the Partner API explorer.
  • Cloudflare — sits in front of every page and may set a short-lived security cookie of its own, for example when it checks that a visitor is not a bot. The Speedtest page also asks Cloudflare which country your connection comes from; the answer stays in your browser.
  • TonConnect — in the dashboard (and in the Mini App when you tap Deposit) the wallet library fetches a wallet list from config.ton.org; while connecting to your wallet it contacts wallet relay servers and sends usage events to analytics.ton.org.
  • Telegram — the Mini App loads Telegram’s script from telegram.org.

More on each service is in the Privacy Policy.

04 /No advertising

We do not use advertising networks, marketing pixels, or cross-site ad trackers.

05 /Managing your choice

The cookie banner appears on your first visit. You can reopen it at any time with the Cookie settings link, which is also in the footer. You can clear this site’s storage and cookies in your browser settings; that also signs you out. We don’t read the browser’s “Do Not Track” setting: analytics stays off for everyone until they opt in.

06 /Contact

[email protected].