Cookies are small text files stored on your device when you visit a website. They help the website remember information about your visit, such as keeping you signed in, and help us understand how the platform is being used so we can improve it.
In addition to cookies, we use similar technologies like local storage for session management. This policy covers all such technologies collectively.
2. Cookies We Use
Essential cookies (required)
These cookies are strictly necessary for the platform to function. They manage your authentication session and keep you signed in between pages. You cannot opt out of essential cookies while using an authenticated session on the platform.
sb-access-token: Supabase authentication token; required to identify your session server-side
sb-refresh-token: Used to refresh your session without requiring you to sign in again
These tokens are stored in httpOnly cookies and are not accessible to JavaScript running in your browser, which reduces the risk of token theft.
Analytics (privacy-preserving, no personal tracking)
We use Vercel Analytics and Vercel Speed Insights to understand how visitors interact with the platform: for example, which pages are most visited, where users encounter issues, and how quickly pages load. These tools are designed without traditional tracking cookies: they do not set a persistent identifier cookie, do not track you across sites, and do not build a personal behavioral profile.
Data collected through Vercel Analytics is aggregated and cannot be used to identify individual users.
Error tracking (Sentry)
We use Sentry to detect and diagnose technical errors on the platform. Sentry may set a session identifier to group related errors from the same session, which helps our engineering team reproduce and fix issues. This session identifier is not linked to your account or personal information.
Bot protection (Cloudflare Turnstile)
On some forms, Cloudflare Turnstile runs a quick check in your browser to tell people from bots. Cloudflare uses what it collects only to run this check, as described in its Turnstile privacy addendum.
3. What We Do Not Use
We do not use:
Advertising or retargeting cookies (no ad networks, no remarketing pixels)
Third-party social media tracking pixels (no Facebook Pixel, no Twitter/X Pixel)
Cookies that build personal behavioral profiles or track you across other websites
Fingerprinting technologies intended to identify you without a cookie
4. Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Common browsers and their cookie settings:
Please note: Blocking essential authentication cookies will prevent you from signing in to the platform. Anonymous browsing of public listings does not require any cookies.