Cookie Policy

Overview

This Cookie Policy explains what cookies and similar storage List Maro uses, why, and how you can control them. It should be read with our Privacy Policy.

We use essential cookies for sign-in, and optional Google Analytics cookies only after you accept them in our consent banner. We do not run advertising cookies or ad pixels.

Essential cookies we set

• better-auth.session_token (name may appear with a __Secure- prefix over HTTPS) — essential session cookie that keeps you signed in after Google OAuth. Maximum age is seven days. Without it, sign-in does not persist and account features (voting, submitting, dashboard) will not work.

We do not configure a separate session-data cookie cache. OAuth state for sign-in is stored server-side (database) rather than as a long-lived client cookie for that purpose.

Optional analytics (Google Analytics 4)

When you click Accept on the consent banner, we load Google Analytics 4 so we can understand how the directory is used (pages viewed, searches, listing views, outbound clicks, and key actions such as sign-in and submit). Google may set cookies on Google-controlled domains as part of that measurement. Until you accept — or if you reject — analytics storage stays denied under Google’s Consent Mode.

Your choice is stored in the browser under the key cookie_consent so we do not ask again on every visit. Clearing site data resets that choice. You can also block cookies in your browser; rejecting analytics does not affect sign-in or core features.

Local storage (not a cookie)

• theme — stores your light/dark preference in the browser so the UI matches your choice on later visits. It is not used for advertising or cross-site tracking. Clearing site data resets the preference to the default.
• cookie_consent — stores whether you accepted or rejected analytics cookies (granted or denied).

Third-party cookies during sign-in

When you sign in with Google, Google may set cookies on Google’s own domains as part of its authentication flow. Those cookies are controlled by Google and governed by Google’s policies. We do not control them.

First-party measurement without cookies

Separately from Google Analytics, listing views and outbound clicks are recorded on our servers with a salted daily digest of IP and user agent. That process does not set a cookie and does not depend on the consent banner. See the Privacy Policy for details.

How to control cookies

You can delete or block cookies in your browser settings. Blocking the session cookie will sign you out and prevent staying signed in. Browser help pages for Chrome, Firefox, Safari, and Edge describe how to manage cookies and site data for a specific site.

To change analytics consent later, clear site data for listmaro.com (or remove the cookie_consent key) and reload — the banner will appear again.