Cookie Policy

Cookies are small values stored by your browser and sent with requests. Local storage keeps information on your device without sending it automatically with each request. Both can fall within the rules for storage and access technologies.

This policy covers the technologies in Swipe Drive's current implementation. Some internal names retain our earlier Motor Match name so existing sessions and saved cars continue working.

• motor-match-access-token: an HTTP-only login cookie used for authenticated requests. Its expiry follows the session lifetime, normally about one hour.
• motor-match-refresh-token: an HTTP-only cookie used to renew your session, set for up to 30 days. Signing out clears the website's login cookies.
• motor-match-delete-failures and motor-match-delete-cooldown: security cookies used after failed password checks during account deletion. They last up to 10 minutes and one minute respectively.
• Supabase's browser client on password-recovery pages may store a recovery session under sb-<project-ref>-auth-token, and a temporary code-verifier value when required. These support the password-reset flow and remain subject to session expiry and browser clearing.

• motor-match-liked-cars and motor-match-passed-cars: local storage containing vehicle IDs for saved cars, skipped cars and matching preferences. Local storage has no automatic expiry; it remains until cleared by the app or your browser.
• motor-match-listing-view-<listing-id>: local storage containing the last counted listing-view time, used to avoid repeatedly counting a view within 12 hours. The value itself remains until browser storage is cleared.

swipe-drive-visitor-id is a first-party, HTTP-only analytics cookie set for up to one year. It connects page views and recorded interactions such as swipes, searches, filters, saves and dealer contact clicks. Events can include a signed-in user ID, vehicle ID, page path, referral category, device category and time.

This is separate from login and is not required to authenticate or sell a car. The current service records individual events and does not provide an in-site analytics consent or opt-out control. Clearing the cookie alone does not prevent it being set again on a later tracked visit. Browser blocking can prevent storage, but is not the same as an in-site consent choice.

Contact swipe.drive@outlook.com about your analytics information or to raise an objection. This policy describes the current implementation; it does not treat continued browsing as consent to non-essential storage.

Swipe Drive includes Vercel Web Analytics for traffic statistics. Vercel describes this product as cookie-free, using short-lived request-derived identifiers and aggregated information about pages, referrers, device, browser, operating system and approximate location. This is distinct from Swipe Drive's own visitor cookie.

Payment takes place on Stripe's hosted checkout and customer portal. Stripe may use its own cookies or storage there for payments, fraud prevention and security, as explained in Stripe's Cookie Policy. Swipe Drive does not embed Stripe.js for collecting card details on its pages.

Instagram and TikTok links are ordinary external links, not embedded tracking pixels. The current project contains no Google Analytics, Meta/Facebook Pixel, TikTok Pixel, Hotjar or Microsoft Clarity integration. External sites may use their own technologies after you follow a link.

You can view, block or delete site cookies and storage in your browser settings. Removing login or recovery storage can sign you out or interrupt a password reset. Clearing local storage removes locally saved and skipped cars; it does not by itself delete saves stored in your account.

Use the Liked page to manage saved cars and Account tools for email notification preferences. Email marketing choices are separate from analytics storage choices. See the Privacy Policy for personal-data requests.