Cookie Policy
Effective: October 14, 2026 | Last updated: October 20, 2026
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They make websites work efficiently and provide information to site owners.
When you visit PleaseStart, we send cookies to your browser. Your browser stores them on your device and sends them back on future visits, helping us recognize you and remember your preferences.
2. Types of Cookies We Use
Essential Cookies (Always Active)
These cookies are necessary for the website to function and cannot be switched off. They handle tasks like keeping you signed in and preventing fraud.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| dh_public_access_token | Maintains your signed-in marketplace session | Short-lived session | First-party, HTTP Only, Secure |
| dh_public_refresh_token | Renews your marketplace session without storing tokens in browser storage | Longer-lived session | First-party, HTTP Only, Secure |
| XSRF-TOKEN | Protects state-changing requests through the matching X-XSRF-TOKEN header | Session | First-party, Secure, readable by JavaScript for double-submit CSRF protection |
| ps_session_renewal_uncertain | Stops a second session renewal while one is in progress or its result is unknown, because sending it twice could end your sessions on every device | Until the renewal finishes. If its result is unknown, until you sign in again, up to 30 days | First-party, readable by JavaScript |
| ps_session_renewal | Lets your open tabs renew your session one at a time | Until the renewal finishes, or until you sign in again | First-party local storage |
| cookie_preferences | Remembers your optional cookie preferences | Until cleared | First-party local storage |
Convenience Cookies and Local Storage
These items support convenience features. Some preferences stay in your browser. When you sign in, guest favorites are added to your account and stored on our servers. These features operate independently of the analytics and advertising preferences below. You can remove browser-stored data at any time through your browser's site-data controls.
| Name | Purpose | Duration | Where |
|---|---|---|---|
| preferredView | Remembers your search-results view (grid or list) | 1 year | First-party cookie |
| authIntent | Carries your in-progress action (for example, contacting a seller) across sign-in, then is cleared on use | 5 minutes (cookie); current tab (session-storage mirror) | First-party cookie + session storage |
| favoriteVehicles / guestFavorites | Local cache of your favorited vehicles (your account is authoritative when signed in; guest favorites are held locally until you sign in) | Until cleared or sign-out | Local storage |
| recentlyViewedVehicles | Powers the recently-viewed vehicles shelf on your device | Until cleared or sign-out | Local storage |
| recent-searches / ps:recent-searches | Your recent search terms, for quick re-search on this device | Until cleared or sign-out | Local storage |
| ps:search | Restores your most recent search state within the current tab | Current tab session | Session storage |
| preferredViewMode | Syncs your view preference across open tabs | Until cleared | Local storage |
| pleasestart_saved_calculations | No longer used. Earlier versions of the car payment calculator saved results here; the calculator now deletes any copy left on your device | Removed on your next visit to the car payment calculator, or at sign-out | Local storage |
| ps_messaging_tips_dismissed / ps-seller-onboarding-completed | Remember that you dismissed the messaging-tips banner or completed seller onboarding | Until cleared or sign-out | Local storage |
| ps:docs-panel:<listing id> | Remembers whether you expanded a listing's documents panel | Until cleared | Local storage |
The site also uses per-tab session storage for transient plumbing — sign-in round-trips, CSRF-token
caching, your current search filters, and in-progress listing, message, and offer drafts (ps:draft:*).
Your browser discards session storage when the tab closes. Authentication tokens are never stored in local or
session storage; they live only in the HTTP-only cookies listed under Essential Cookies.
When you sign out, we proactively clear non-essential local data (favorites cache, recently viewed, recent
searches, saved calculations, and similar convenience items) from your browser while preserving your cookie-consent
choice. Saved searches and favorites as account features are stored on our servers and are covered by the
Privacy Policy. If a ps_anon_id cookie is present, the
cookie-preference controls clear it when analytics or advertising consent is off.
Analytics Cookies (On by Default — You Can Turn Them Off)
On www.pleasestart.com we use Google Analytics to count visits, see which pages and searches bring people to the site, and measure how long they engage, so we can improve it. Analytics is on unless you turn it off below or your browser sends a Global Privacy Control signal (see Section 6).
We set Google Analytics up for measurement only: Google signals and ads personalization are off, location is
limited to country and region, and event-level data is deleted after two months. Page addresses are sent
without their query strings, apart from campaign tags such as utm_source. We never send your name,
email address, phone number, a VIN, or a seller's contact details. We do not sell this information or share it
for cross-context behavioral advertising.
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
| _ga | Distinguishes one browser from another | 2 years | Google Analytics |
| _ga_* | Keeps session state, so visits and engagement time are counted once | 2 years | Google Analytics |
Advertising Signals (Optional — No Advertising Cookies Set)
PleaseStart is funded by listing fees and displays no third-party advertising, so we set no advertising
cookies of our own. The "Advertising" preference below exists because our analytics provider (Google)
supports consent-mode signals for ad-related storage (ad_storage, ad_user_data,
ad_personalization): those signals are denied by default and remain denied unless you
enable this preference. If you enable it, Google may use ad-related storage as described in
its privacy policy,
although PleaseStart still displays no advertising. Leaving it off changes nothing about how the site works.
3. Third-Party Cookies
In addition to our own cookies, we use third-party cookies for analytics and authentication:
- Google Analytics — Performance reporting (Privacy Policy)
- Google OAuth — Sign in with Google (Privacy Policy)
4. How to Control Cookies
Site Cookie Preferences
These controls affect Analytics and Google advertising consent signals for this browser. The convenience storage listed above operates independently of both toggles and is not affected by this setting.
Your browser is sending a Global Privacy Control signal, so Analytics and Advertising are off for this browser and cannot be turned on here. To change that, turn off Global Privacy Control in your browser.
Through Your Browser
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
Analytics Opt-Out Tools
Note: Blocking all cookies may prevent access to certain features.
5. Mobile Devices
iOS (iPhone/iPad): Open Settings → Safari → Privacy & Security → Manage "Block All Cookies"
Android: Open Chrome → Menu → Settings → Site settings → Cookies → Choose preferred settings
6. Global Privacy Control and Do Not Track
We honor Global Privacy Control (GPC). When your browser sends a GPC signal, we treat it as an opt-out: Google Analytics does not load, and Google advertising consent signals stay denied, whatever is saved on this page.
We do not currently respond to Do Not Track (DNT) signals due to a lack of industry standards. You can still manage cookies using the controls described above.
7. Updates and Contact
We may update this Cookie Policy from time to time. Material changes will be communicated via the site or email.
Prune IO LLC (DBA PleaseStart)
Attn: Privacy Team, Lititz, PA 17543 (Lancaster County)
Email: privacy@pleasestart.com