POLICY CENTRE
Cookie & storage policy
Necessary storage supports the service. Google Analytics is optional and off until you allow it.
Sign-in cookies
Supabase authentication uses first-party session cookies, typically named sb-<project-reference>-auth-token (possibly split into chunks). They allow the server to recognise and refresh your sign-in. They are needed for account features; cookie lifetime and refresh behaviour follow the active session/provider settings rather than a fixed duration promised here.
Your privacy preference
The localStorage key carsocial-privacy-v1 records your analytics on/off choice, the notice version and the time you saved it. Earlier off-only preferences remain off; they do not grant analytics permission. It is stored on this browser and is not an account-wide consent audit trail. You can review it in Profile or using Privacy preferences in the footer. Clearing browser storage makes the notice appear again.
Optional tracking
Google Analytics (measurement ID G-JVLY7JPP7W) measures visits and site use only after you choose Allow analytics. Before permission, the Google tag is not loaded and this integration sends no analytics requests. Analytics may use first-party _ga and _ga_* cookies to distinguish visitors and sessions. Google lists a default two-year lifetime; browser restrictions and property settings can shorten or change it. Choose Keep analytics off in Profile or footer Privacy preferences to stop future collection by this integration and remove its accessible first-party analytics cookies. Withdrawal does not erase information already sent to Google. Advertising consent stays denied and advertising signals are disabled in this integration; Google property-level settings and retention require operator verification. Google documents these cookies in its Analytics Help cookie-usage guide.
Browser controls
You can block or delete cookies and local storage in browser settings. Blocking necessary cookies can prevent sign-in and account features. Public catalogue browsing does not require an account. Hosting security mechanisms may also use technical storage; their actual configuration needs verification by the operator.
Personal-data choices are separate
Rejecting optional cookies does not delete an account or withdraw every purpose of personal-data processing. Profile offers public-garage visibility controls, while account-wide requests go to admin@themidnight.in for manual handling. This browser preference panel is not a registered Consent Manager under the DPDP Act.
Midnight Digital Private Limited
Privacy, grievance and support: admin@themidnight.in