Cookies
Crumbs, not
surveillance.
Every cookie we set, why it's there, and how to turn it off.
Effective
Mar 1, 2026
Last Updated
Apr 2, 2026
Version
2.0.1
Jurisdiction
California, USA
Reading Time
5 min
Summary
The version
in human words.
- 01We use 6 cookies total. Three are strictly necessary, three are optional.
- 02We don't use third-party advertising cookies. We don't have any to begin with.
- 03Analytics is privacy-friendly, first-party only, and you can switch it off at the banner.
- 04Your choice is stored for 12 months, then we ask again.
- 05Block cookies in your browser if you prefer the nuclear option — the site still works, mostly.
01/The Primer
What a cookie is
A cookie is a small text file your browser stores when you visit a site. The site can read its own cookies on subsequent visits. We also use a couple of related technologies — local storage and session storage — and we lump them all together as "cookies" in this document for clarity.
02/Full Inventory
Every cookie we set
The complete list. If we add a cookie, we update this section and ask for consent again where required.
Strictly necessary — always on
- lk_session
- Authentication token. Expires when you log out or after 30 days of inactivity.
- lk_csrf
- Cross-site request forgery defense. Session-only, cleared on tab close.
- lk_consent
- Your cookie preferences. 12 months. Always required to remember 'no thanks.'
Optional — off until you opt in
- lk_locale
- Preferred language / currency on the marketplace. 12 months. Saves you a click.
- lk_seen
- Listings you've viewed, used to power 'recently browsed.' 30 days.
- lk_metric
- Anonymous analytics ID (Plausible-style). No fingerprinting, no cross-site tracking.
03/Outside Code
Third-party cookies
We don't set third-party advertising or social cookies. We don't run Google Tag Manager. We don't run Facebook Pixel. We don't run any of the usual suspects.
Two operational exceptions: Stripe sets cookies during checkout to prevent payment fraud, and Cloudflare may set a security cookie (__cf_bm) to distinguish browsers from bots. Both are scoped to specific actions and lifetimes; both are covered by their respective providers' policies, which we link to in our subprocessor list.
04/Your Switches
Your controls
You have three layers of control. Each one is stronger than the last; all three are honored.
- Banner
- On first visit, you can accept all, reject all, or pick by category. Stored for 12 months.
- Footer
- A 'Cookie preferences' link in the footer reopens the same dialog at any time.
- Browser
- Browser-level blocking. We respect Global Privacy Control automatically.
Do Not Track & Global Privacy Control
We honor the Global Privacy Control (GPC) signal as a binding opt-out of optional cookies. Browsers that send a Do Not Track header are treated identically. You don't need to do anything else.
05/Change Log
Changes
If we add or change a cookie, we update this page and re-prompt for consent on the affected categories. Material changes are also announced by email to active accounts.
Related Documents
Questions, takedowns, requests
Tweak your cookie choice any time.
The cookie preferences panel lives in the footer of every page. You can also email us — the privacy desk and the cookie desk are the same desk.