Legal
Cookie Policy
Last updated: 2026-08-08
What are cookies?
Cookies are small text files stored in your browser. They let us recognise you on return visits, keep you logged in, remember your language, and (with your consent) measure how the site is used. We use cookies as well as localStorage and Service Worker storage.
Categories we use
Under UK PECR/ePrivacy rules, we group browser storage into four categories: strictly necessary, functional, analytics and marketing. Necessary storage is always on; the other categories follow your consent choices.
1. Strictly necessary (no consent required)
| Name | Purpose | Lifetime |
|---|---|---|
auth_session | Login session (Lucia) | 30 days |
PARAGLIDE_LOCALE | Selected language (en/tr/de) | 400 days |
__cf_bm | Cloudflare bot management | 30 min |
gst_csrf | CSRF protection token | session |
gst_consent | Your cookie preferences (this banner) | 180 days |
2. Functional (no consent required, you can opt out)
| Name | Purpose | Lifetime |
|---|---|---|
gst_recent_searches (localStorage) | Personal search history dropdown | until you clear |
gst_anon_free_search_v1 (localStorage) | Last server-confirmed anonymous search allowance | ignored after the UTC day changes; removed on your next visit |
gst_saved_listings_v1 (localStorage) | Your browser-local shortlist of sale listings | until you clear |
gst_currency_pref | Selected display currency (EUR/USD/GBP) | 180 days |
gst_unit_system | Metric or imperial (US visitors default imperial) | 180 days |
push_endpoint (IndexedDB) | Web Push subscription handle | until unsubscribe |
3. Analytics and marketing (consent required)
If you accept analytics or marketing cookies, the following may be set:
| Cookie / signal | Provider | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 (analytics only if integrated) | Aggregated traffic | 2 years |
_fbp | Meta Pixel (marketing only) | Ad conversion tracking | 90 days |
_linkedin_* | LinkedIn Insight Tag (marketing only) | Ad conversion + Matched Audiences | 180 days |
gst_attribution | First-party | UTM source tracking | 30 days |
If you do not accept analytics or marketing, none of these optional analytics or advertising pixels are set. Global Privacy Control (GPC) signal — when your browser sends GPC, we automatically treat it as a "reject" and never set category 3 cookies.
Changing your preferences
Click to update your choice at any time. Withdrawing consent will not affect the lawfulness of processing already carried out on the basis of consent before withdrawal (GDPR Article 7(3)).
Browser-level controls
You can also clear or block cookies in your browser settings. See All About Cookies for help by browser. Note: blocking strictly-necessary cookies will break login.