Cookie Policy
Last updated: 1 October 2026
1. What cookies are
Cookies are small files a website stores in your browser. We also use similar technologies: local and session storage in the browser, and SDKs and device identifiers in the apps. This Policy calls all of them "cookies".
2. Essential
Needed for the site to work; they cannot be switched off. • Sign-in session (auth_token, refresh_token, session_token, user_data in local storage; login_bridge): keeps you signed in. • NEXT_LOCALE, LOCALE_CONFIRMED, COUNTRY_PREFERENCE, CURRENCY_PREFERENCE: language, market and currency, up to 12 months. • Draft listing (draft_session_id, pending_listing_data): keeps an unfinished listing while you sign in.
3. Functional
Remember your choices. • carpulse_favorites, carpulseSearchFilters, listings-view-mode, cp_loc_confirm_dismissed, sidebar: saved cars, filters and display choices, stored until you clear them.
4. Analytics
• PostHog (ph_* cookie and local storage) and cp_aid: anonymous visitor IDs and usage events. PostHog is hosted in the EU and its cookie lasts up to 12 months. • cp_replay_sampled_v1 (session storage): whether this visit is in the sample that gets a session recording; deleted when you close the tab. • Google Analytics 4 (_ga, _ga_*) and Google Ads (_gcl_*): traffic measurement and ad conversions, up to 24 months.
5. Advertising and attribution
• Meta pixel (_fbp up to 90 days, _fbc up to 12 months): measures which Facebook and Instagram ads lead to visits, sign-ups and purchases. See the Privacy Policy, section 4, for the Conversions API and Custom Audiences. • cp_first_touch_ctx (365 days): the first page you landed on, the external site that sent you and the Facebook click ID, so we know which campaign brought you. • cp_first_touch_utm, cp_first_touch_fbclid (365 days): the campaign parameters and click ID of your first visit. • cp_ref (15 days): a referral code from a partner or creator link.
6. Managing cookies
You can change your choices in the cookie banner and delete or block cookies in your browser settings. Blocking essential cookies will break sign-in and some pages. In the apps, use the privacy options of your device. To opt out of Meta advertising audiences, write to privacy@carpulse.al.
7. Changes
We update this Policy when the cookies we use change, and show the date at the top.
For legal inquiries, contact us at:
privacy@carpulse.al