Cookie Policy
Draft for legal review. This describes how the platform works today and will be replaced by the approved text before launch.
We use cookies and browser session storage only to keep you signed in and to make the Service work. All of the items below are strictly necessary. We do not use advertising, analytics or tracking cookies, and no other company sets cookies on our pages. If you choose “Continue with Google”, Google’s sign-in library keeps its own state in your browser, under Google’s policies.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| pa_rt | Cookie | Keeps you signed in (a refresh token that renews your short-lived session). HttpOnly, Secure, SameSite Strict, sent only to our sign-in endpoints. | 30 days, or until you sign out |
| pa_did | Cookie | Recognises your device so we can warn you about sign-ins from a new device. A random identifier, no personal data. | 400 days |
| pa.signin.phone, pa.signin.channel | Session storage | Remembers the number and channel while you enter your sign-in code. | Until you close the tab |
| pa.join.passcode | Session storage | Carries an auction passcode between the join steps. | Until you close the tab |
| pa.pendingBid | Session storage | Keeps the bid you were placing while you pay the bidding fee. | Until you close the tab |
Your choices
You can delete or block cookies in your browser settings, but then you cannot stay signed in and parts of the Service will not work. Clearing site data signs you out.