On this page
The plain-English version
- We use the bare minimum: a session cookie to keep you signed in, and a few preference cookies.
- No advertising cookies. No third-party tracking pixels.
- Analytics is privacy-first and aggregated — we never sell or share it.
- You can disable non-essential cookies in your browser at any time.
This summary is for clarity — the full sections below are what legally apply.
The cookies we use
We split our cookies into three plain-English categories:
Essential
Required for the site to work. Keep you signed in, prevent CSRF attacks, remember your cookie choice. Can't be turned off in-product.
Functionality
Remember your preferences — theme (light/dark), location, recent searches. Make the platform feel like yours.
Analytics
Aggregated, privacy-first measurement of which pages and features get used. Used to fix bugs and prioritise improvements — never sold.
Cookie inventory
The full list of cookies we currently set, what they do, and how long they last:
| Name | Purpose | Type | Expiry |
|---|---|---|---|
sb-access-token | Keeps you signed in during a session | Essential | 1 hour (rotates) |
sb-refresh-token | Refreshes your session so you stay signed in | Essential | 7 days |
gotapal-theme | Remembers light or dark mode | Functionality | 1 year |
gotapal-location | Remembers your last-used location for search | Functionality | 30 days |
gotapal-analytics-id | Anonymous ID for aggregated product analytics | Analytics | 1 year |
Third-party cookies
Some pages embed content from trusted third parties (for example, a Google Map showing a business location). When that happens, those services may set their own cookies — we don't control them. They include:
| Provider | When it loads | More info |
|---|---|---|
| Google Maps | Only on listing pages with a map embed | Google Privacy |
| YouTube (privacy-enhanced) | Only when a video is embedded | Google Privacy |
Managing cookies
You can clear or block cookies in your browser settings. The exact steps differ by browser:
- Chrome — manage cookies and site data
- Safari — manage cookies and site data
- Firefox — manage cookies and site data
- Edge — manage cookies and site data
For a general guide, see aboutcookies.org. Note that disabling essential cookies will mean you can't sign in.
Do Not Track & Global Privacy Control
We honour the Global Privacy Control (GPC) signal where your browser sends one, and treat it as opting out of non-essential analytics cookies. The legacy "Do Not Track" header is also respected on the same basis.
Updates to this policy
We'll update this page whenever the cookies we set change. The "Last updated" date at the top will tell you when. For material changes that affect what data we collect, we'll let registered users know by email.