Cookie Policy
This Cookie Policy explains how W3 EDGE, LLC d/b/a Auctollo ("Auctollo," "we," "us," or "our") uses cookies and similar tracking technologies on app.auctollo.com and within the Indexation WordPress plugin settings interface. This policy supplements our Privacy Policy.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They allow the site to recognize your device, remember your preferences, and maintain your authentication state. Similar browser storage technologies (localStorage, sessionStorage) serve analogous functions in web applications.
2. Cookies We Use
2.1 Strictly Necessary Cookies
These cookies are required for the Service to function securely. You cannot opt out of them without losing access to authenticated features.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
sb-[ref]-auth-token | Supabase | Stores your encrypted session JWT to keep you signed in | Session / auto-refreshed (≤1 hour) |
sb-[ref]-auth-token-code-verifier | Supabase | Stores the PKCE code verifier during the OAuth sign-in flow | Session |
These cookies are set only after you sign in. They use HttpOnly, Secure, and SameSite=Strict attributes where browser support permits.
2.2 Analytics Cookies (Opt-In Only)
We use Google Tag Manager (GTM) with Google Analytics 4 (GA4) to understand how users interact with the Service. These cookies are only loaded after you give explicit consent via the "Help improve the software by sharing anonymous usage data with the developers" checkbox in your WordPress admin under Indexation → Settings. You can withdraw consent at any time by unchecking that option.
In the web app (the dashboard at app.auctollo.com) the same tools load only on the dashboard pages you open while you are signed in, and only after you turn on Product analytics under Privacy & data. It is off until you turn it on. We never load it for visitors who are not signed in, and not while our support staff view an account on its owner's behalf. You can withdraw consent at any time by turning it off: we stop loading it, remove these cookies from your browser, and reload the page.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes unique visitors using a randomly generated client ID | 2 years |
_ga_[ID] | Google Analytics 4 | Stores and counts page views for the current session | 2 years |
_gid | Google Analytics | Distinguishes users within a 24-hour period | 24 hours |
When analytics cookies are active, IP addresses are anonymized before transmission to Google per GA4's default settings.
2.3 Payment Cookies
Stripe.js is loaded on billing-related pages (checkout and billing portal). These cookies are set by Stripe only when you navigate to a billing page.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
__stripe_mid | Stripe | Fraud detection — device/browser identifier | 1 year |
__stripe_sid | Stripe | Fraud detection — session identifier | 30 minutes |
2.4 Browser Notifications (Opt-In Only)
Browser notifications are not cookies, but they keep something in your browser, so they are listed here. They are off until you turn them on, with the Enable notifications button in the notifications menu or on the Notifications page, and your browser asks for your permission first. Once you have agreed, your browser keeps:
| What | Kept by | Purpose | Until |
|---|---|---|---|
| Notification permission for app.auctollo.com | Your browser | Records that you allowed (or blocked) notifications from this site | You reset it in your browser's site settings |
Service worker (/sw.js) | Your browser | A small script that lets your browser show a notification when no tab is open | You turn notifications off, sign out or delete your account, or clear this site's data |
| Push subscription | Your browser, and a copy on our servers | The address and keys we use to send a notification to this browser | You remove the device, turn notifications off, sign out or delete your account in that browser (both copies go). If our copy goes another way (you remove the device or delete your account from another browser), your browser forgets its own at the next page load while you are signed in |
None of this is a cookie, and we write nothing to localStorage or sessionStorage for it. A notification is delivered through the push service that runs your browser, which is the browser maker's (for example Google, Mozilla, Apple or Microsoft); our Privacy Policy says what that service can see.
3. What We Do Not Use
We do not set or permit:
- Advertising or behavioral retargeting cookies — we do not run ad networks or retargeting pixels.
- Cross-site tracking pixels — we do not embed third-party tracking pixels that follow you across websites.
- Social media cookies — we do not embed social sharing widgets that set persistent cookies.
- Browser fingerprinting — we do not use fingerprinting scripts for tracking purposes.
4. How to Manage Cookies
4.1 Plugin Analytics Opt-Out
To stop analytics cookies from being set:
- Go to Indexation → Settings in your WordPress admin.
- Uncheck "Help improve the software by sharing anonymous usage data with the developers".
- Save settings.
4.2 Browser Settings
You can configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from signing in to app.auctollo.com.
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
4.3 Google Analytics Opt-Out
To opt out of Google Analytics across all websites, install the Google Analytics Opt-Out Browser Add-on.
4.4 Browser Notifications
To stop notifications on one browser, use Turn off on the Notifications page, or remove that device from the list there. You can also change the Notifications permission for app.auctollo.com in your browser's site settings. In-app notifications (the bell) are not browser notifications and stay either way.
4.5 Dashboard Analytics Opt-Out
To stop analytics cookies from being set while you use the dashboard, open Privacy & data and turn off Product analytics in the Cookies & tracking card. The change is saved at once, and Auctollo removes the cookies listed in 2.2 from your browser and reloads the page. You can also leave it off, which is how it starts.
5. Changes to This Policy
We may update this Cookie Policy to reflect changes in our practices or applicable law. We will update the "Last updated" date at the top of this page. For material changes, we will notify you via email or a dashboard notice.
Cookie questions: privacy@auctollo.com
W3 EDGE, LLC d/b/a Auctollo