Cookie Policy

1. Introduction

This policy lists every cookie CarAuctions24 stores on your device — not the categories that might apply, but the ones that actually do. There are few of them. See also the Privacy Policy and the Terms of Service.

2. What cookies are

Cookies are small text files a site stores in your browser and reads back on later requests. They carry the things a URL cannot remember on its own — that you are signed in, for instance.

3. The cookies we use

3.1 NEXT_LOCALE — your chosen language

Remembers whether you read the site in Polish or English, and expires after a year. We write it when you switch languages. It holds nothing but a two-letter language code and cannot identify you.

3.2 Session cookies — only once you sign in

Signing in stores a session token (better-auth) valid for 30 days, plus a short-lived copy of your session data that expires after 5 minutes and saves a database query on every click. Both are unreadable by scripts in the browser (httpOnly) and, over HTTPS, are sent only on an encrypted connection. Signing out deletes them. Signing in with Google adds one short-lived cookie that secures the redirect itself; it is gone as soon as you are signed in.

4. What we do not do

We use no analytics, advertising or profiling cookies. There is no Google Analytics here, no advertising pixel, no cross-site tracker. We store nothing in local storage or session storage either — we checked this against the built site. Because all we store is what is strictly necessary plus the language you asked for, the law does not require a cookie consent dialog here, which is why there is not one.

5. Third-party content

The delivery map in the footer fetches its tiles from CARTO's servers (basemaps.cartocdn.com). CARTO sets no cookie in the process, but — like any server your browser fetches a file from — it sees your IP address and browser type. Apart from that one case, the site fetches nothing from other companies' servers.

6. How long they last

• 01NEXT_LOCALE — one year from the last language change.
• 02Session token — 30 days, refreshed daily while you use your account.
• 03Session data copy — 5 minutes.
• 04Google sign-in security cookie — until the sign-in completes.

7. Managing them

You can inspect and delete every cookie in your browser's settings. Deleting NEXT_LOCALE means we take the language from the URL instead. Deleting the session cookies signs you out. Blocking cookies entirely still lets you browse auctions and work out costs, but not sign in.

8. Changes to this policy

If we add any cookie at all, we will describe it here before it starts running. The date at the top of the page shows the last change.

9. Contact

Questions about cookies go through the Contact page.