Cookie Policy

1. Cookie & Local Storage Regulatory Compliance

This Cookie Policy explains how CarWebb uses cookies and local browser storage technologies on our website in compliance with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR.

Under UK law, storing information on a user's terminal equipment or accessing information stored upon it requires clear and comprehensive information, and—except for strictly necessary technical storage—prior informed consent.

2. Distinction Between Cookies and Browser Storage

• HTTP Cookies: Small data files placed on your browser by our web server that are transmitted back with subsequent web requests.
• Local Storage (`localStorage`): Persistent key-value storage within your web browser that enables fast client-side performance, preference persistence, and uninterrupted session management without transmitting data in HTTP request headers.

Both mechanisms are governed by PECR Regulation 6, and CarWebb applies the same rigorous privacy standards to all local storage technologies.

3. Storage Schedule & Category Inventory

A. Strictly Necessary Storage (Consent Exempt)

These items are essential for technical operation, user authentication, and basic security. They cannot be disabled:

• sb-*-auth-token (Local Storage / Cookie): Supabase authentication token required to maintain secure user login sessions.
• theme (Local Storage): Stores interface color mode preference (light or dark).
• sidebar_state (Cookie): Remembers navigation sidebar collapse state for 7 days.
• carwebb_cookie_consent (Local Storage): Records your explicit PECR cookie and storage consent choices.

B. Functional Storage (Enhanced Usability)

These items enhance user convenience across browsing sessions:

• favourites (Local Storage): Stores vehicle IDs saved to your guest shortlist before account creation.
• carwebb_compare (Local Storage): Retains up to 3 selected vehicles in the floating comparison drawer.

C. Performance & Analytics Storage (Requires Explicit Opt-In)

• apex:sid (Local Storage): Anonymous session identifier used strictly for internal navigation diagnostics and conversion funnel monitoring. This identifier is disabled by default and is only generated if you explicitly opt in to analytics.

4. No Third-Party Tracking or Advertising Pixels

CarWebb operates on a privacy-respecting business model:

• We do not sell user behavioral profiles to data brokers.
• We do not embed third-party advertising cookies, retargeting pixels (such as Meta Pixel or TikTok Pixel), or commercial cross-site tracking scripts.

5. How to Manage and Revoke Your Consent

You can review and modify your storage preferences at any time:

• Click the Manage Cookie Preferences button below or in our site footer.
• Alternatively, you can configure your browser settings to block or delete cookies and clear local storage data. Please note that blocking strictly necessary storage may prevent you from logging in or using marketplace reservation features.