Cookies and local storage

• Strictly necessary — Sign-in, security and abuse-prevention cookies needed for features you request. Always on.
• Product analytics — Optional first-party aggregate counters. They run only if the operator has separately approved them, and store no identifiers, no search text and no URLs.
• Detailed analytics (not currently used) — Optional first-party detailed analytics: approximate country/region/city when the network provides it, referrer site, campaign tags, device class, and a first-party id re-hashed every day. Never your IP, never page URLs, and never cross-site tracking.
• Marketing pixels (not currently used) — Third-party marketing pixels. Not currently used — no pixel is installed. Your choice is recorded in case that ever changes.
• Advertising storage (not currently used) — Storage for advertising purposes. Not currently used — advertising storage is not enabled on this service.
• Marketing email (not currently used) — Marketing email preference. Not currently used — we only send emails you explicitly request, such as sign-in links and saved-search alerts you set up.

Change your choices below at any time. Browser Do Not Track and Global Privacy Control signals are honoured as a refusal of every optional category, whatever is stored.

• fmc_session — Secure sign-in and access control. Retained up to 7 days (10 minutes while admin mfa is pending).
• fmc_check_actor — Pseudonymous abuse prevention for free vehicle checks. Retained 30 days.
• fmc_reveal_actor — Pseudonymous anti-harvesting limits for seller phone reveals. Retained 30 days.
• fmc_takedown_actor — Pseudonymous abuse prevention for public takedown requests. Retained 30 days.
• fmc_voice_actor — Pseudonymous rate limits for requested voice search. Retained 30 days.

These support security and services you request. Blocking them can prevent sign-in or free checks from working.

• fmc_analytics_consent — Records the optional analytics choice (legacy; superseded by fmc_consent_v2). Retained 180 days.
• fmc_consent_v2 — Signed record of your per-category consent choices. Retained 180 days.
• fmc_admin_locale — Remembers the admin console interface language (staff only, /admin scope). Retained 365 days.

The service may store your theme, a client-side mirror of session display data, compare choices and other saved UI state in your browser. You can clear this data in browser site settings; doing so resets local choices.

No analytics event is sent by default. The optional first-party product counter requires both documented operator approval and your explicit choice above before it can run. If both gates pass, it accepts only fixed aggregate event names and coarse counts. It stores no search or voice text, URL, IP, account, session, dealer, listing or device identifier, and honours browser Do Not Track and Global Privacy Control signals. Third-party marketing analytics remains off.

Your consent choices are stored for up to 180 days in the signed fmc_consent_v2 cookie. An older fmc_analytics_consent cookie is still honoured for the analytics category until you make a v2 choice. You can change choices above or use your browser's site-data controls to delete cookies and local storage. Supplier inventory and an automated storage scan remain launch controls.