Cookies Policy

Cookies are small text files that a website asks your browser to store. Local storage is a similar mechanism with a larger capacity. Pixels are tiny image requests used for analytics. We refer to all of these collectively as “cookies” on this page.

• Essential.Always on — without them the Service can't function. These keep you signed in, remember your shopping cart of dates, secure forms against cross-site request forgery, and load balance traffic. Examples: Supabase auth cookies, CSRF tokens, the cookie that remembers whether the navbar is in light or transparent mode.
• Functional. Off-by-default in regions that require consent; on-by-default elsewhere. These remember non-essential preferences — recently viewed listings, the saved search filters, language and currency.
• Analytics.Off-by-default in regions that require consent; on-by-default elsewhere. We use PostHog to understand how features are used so we can improve them. We aggregate this data and don't use it to target advertising.
• Operational third parties. Some providers we rely on set their own cookies when their widgets render — Stripe (payment integrity, fraud prevention), the map-tile provider (rate limiting), Sentry (error correlation). These are essential to the features they support.
• Marketing.Currently not used. If we add marketing cookies in the future, we'll update this page and ask for consent first.

If you live in a jurisdiction with cookie-consent requirements (the EEA, UK, or others), the cookie banner that appears on first visit lets you accept or reject non-essential cookies. You can change those choices any time by clearing your saved preference and reloading.

Outside those jurisdictions, you can still control cookies through your browser's settings — most browsers let you block all cookies, block third-party cookies only, or clear them on exit. Note that blocking essential cookies will prevent the Service from functioning.

We honor Global Privacy Control (GPC) signals where applicable. We currently don't respond to legacy Do-Not-Track headers, since the standard was never widely adopted.

Questions about cookies? privacy@getwheelhouse.com.