Cookie Policy

Our current practice

Outthrone does not use advertising cookies, analytics cookies, tracking pixels, or identifiers in localStorage or similar browser storage. We use Vercel Web Analytics, a cookie-free aggregate analytics service described below. The only first-party cookie is a strictly necessary listing-management session set after you verify access by email. There is currently no optional device-storage technology to accept or reject, so we do not display a consent banner.

Strictly necessary listing session

After a listing owner redeems an expiring email link or code, Outthrone sets an HttpOnly, Secure, SameSite session cookie named __Host-outthrone_session. It contains a random identifier, not an email address or listing content, and expires after 12 hours. The corresponding server record is also time-limited and can be revoked by signing out. This cookie is necessary to authenticate editing requests and cannot be used for advertising or cross-site tracking.

Server requests are not cookies

Like any website, Outthrone and its hosting provider receive request information such as IP address, user agent, URL, and timestamp to deliver pages, protect the Service, and diagnose errors. Outthrone also uses pseudonymous keys to rate-limit bid and access-link attempts and count at most one outbound click per listing per visitor each hour. These controls do not write an identifier to your device. See the Privacy Policy.

Cookie-free Web Analytics

The Vercel Web Analytics script sends a page-view event containing the page path, route, referrer, timestamp, coarse location (country, region, and city), browser, operating system, and device type. Outthrone strips every query string and URL fragment before an event is sent, including the Stripe Session identifier on a checkout return URL. We do not send custom-event properties.

Vercel identifies a visitor using a hash derived from the incoming request rather than a cookie. Vercel states that the hash resets every 24 hours, is not associated with an IP address in analytics reporting, and cannot track a visitor across days or websites.

Stripe Checkout and external sites

When you choose to pay, your browser leaves Outthrone for Stripe’s hosted checkout. Stripe may use cookies or similar technologies that are necessary for checkout, fraud prevention, and security under Stripe’s own notices and controls. When you click a paid listing, the destination site may use its own technologies. Outthrone does not control cookies set on those separate domains.

If this changes

We will update this inventory before deploying another analytics provider, advertising, session replay, non-essential personalization, or analytics that stores or accesses device information. Where law requires consent, the technology will remain off until the user makes a clear choice, rejection will be as easy as acceptance, and a persistent preferences control will be provided.

Contact

Questions: legal@outthrone.com · Outthrone