Last updated 2026-07-24
Cookie Policy
This page lists every cookie and tracking technology Listd uses, what it does, and how to turn off the non-essential ones.
Essential cookies (required, cannot opt out)
Without these, the site doesn’t work. There’s no way to opt out and keep using Listd.
| Cookie/Storage key | Set by | Purpose | Lifetime |
|---|---|---|---|
| sb-*-auth-token | Supabase | Signed-in session. If you delete it, you’re logged out. | 1 hour rolling |
| sb-*-auth-token-refresh | Supabase | Refresh token — extends your login. | 30 days |
| cf-turnstile* | Cloudflare Turnstile | Bot protection on forms (login, feedback, concierge). | Session |
| listd_cookie_consent | Listd (localStorage) | Remembers whether you accepted or declined analytics cookies, so we don’t re-nag you every pageview. | Until cleared |
Analytics cookies (opt-out via the banner)
These help us see which listings people find, where they get stuck, and how fast the site loads. Decline them at the banner and we won’t send identifiable events. If you already accepted and want to change your mind, clear the listd_cookie_consent entry from your browser’s storage and the banner will reappear on next visit.
| Cookie/Tracker | Set by | Purpose | Lifetime |
|---|---|---|---|
| ph_* | PostHog | Product analytics — pageviews, clicks, funnel drop-off. Identifies you by Supabase user ID once you sign in. | 365 days |
| Beacon requests to /_vercel/insights | Vercel Speed Insights | Anonymous performance timing (page load, Core Web Vitals). No cookies set, but the beacon includes your IP + user agent. | N/A (no cookie) |
| visitor_id (localStorage) | Listd (own analytics) | Random UUID that lets us group your pageviews across a session in our visitor_pageviews table. Not linked to your email or name. | Until cleared |
Third-party cookies we do NOT set
For transparency, here’s what other platforms use that we deliberately don’t:
- No Facebook Pixel
- No Google Analytics
- No advertising cookies (Google Ads, TikTok Pixel, Twitter Ads)
- No cross-site tracking or data brokers
- No sale of your data to third parties (see “Do Not Sell” below)
Do Not Sell or Share My Personal Info (CCPA)
California residents have the right to opt out of the “sale or sharing” of personal information under the California Consumer Privacy Act.
Listd does not sell your personal information. We also do not share it for cross-context behavioral advertising. That means there’s nothing to opt out of on the sale side. If you want to stop analytics tracking, decline the cookie banner or email us and we’ll flag your account.
To exercise your CCPA rights (right to know, right to delete, right to correct, right to opt-out), email austin@listdmarket.com with the subject “CCPA Request” or use the self-service Delete My Account flow. We respond within 45 days per statute.
Browser controls
You can also disable cookies globally in your browser settings. If you do that, essential cookies will be blocked too, which means signed-in features (posting a listing, saving searches, messaging) won’t work.
See also: Privacy Policy · Subprocessors · Terms of Service