Cookie Policy

Part of the Privacy Policy.

Short version: we do not run advertising trackers, and we do not run third-party analytics. Nothing on this service reports your behaviour to Google, Meta, TikTok or an advertising network, because none of them is here. What we do store is listed below, in full.

---

1. What we store on your device

Name	Type	Set by	What it does	Lasts
gm_refresh	Cookie, httpOnly, Secure, SameSite	Us	Keeps you signed in between visits and lets the application obtain a new access token without asking for your password again. It cannot be read by any script in your browser.	30 days, refreshed as you use the service
gm_prefs	Local storage	Us	Your own interface choices — the tools you have open, the layout you picked, a draft you have not sent. Stays in your browser.	Until you clear it
gm_waitlist	Local storage	Us, on gtamarket.store	Remembers that you already submitted the form, so we do not show it to you again	Until you clear it

Your access token is held in memory only and disappears when you close the tab. It is never written to storage, because anything written to storage can be read by an injected script.

That is the whole list. No advertising identifiers. No pixels. No third-party analytics. No fingerprinting scripts from anyone else.

2. Why we do not ask you to accept cookies

The three entries above are what the law calls strictly necessary, or are settings you asked for yourself by using a feature. They exist to sign you in, to keep you signed in, and to remember what you chose. Consent is not required for those, so we do not interrupt you with a banner asking for something we are not doing.

If that ever changes — if we add analytics, or measurement of any kind that is not strictly necessary — we will ask for your consent first, through a banner where refusing is exactly as easy as accepting, with per-purpose switches, nothing pre-ticked, and a way to change your mind later that is as easy as the first choice. We will update this page before it happens, not after.

3. Device signals used for fraud prevention

This is separate from the table above, and we would rather explain it than let you find it in a privacy policy.

When you use the service, our fraud prevention records characteristics of your connection and browser and derives an identifier from them. It uses that to notice when one person is running several accounts, when a buyer and a seller in the same order are the same person, and when someone who is not you has got into your account.

This does not follow you off GTAMarket, it is not shared with anyone for advertising, and it is not used to build a profile of your interests. It exists because a marketplace holding other people's money in escrow that cannot tell two colluding accounts apart will be emptied by the people who notice first.

The legal basis, the data involved and your right to a human review of any decision it triggers are set out in Sections 3, 4 and 8 of the Privacy Policy.

4. Controlling it yourself

Every browser lets you see, block and delete cookies and local storage, per site. Blocking gm_refresh will sign you out each time you close the tab; everything else will keep working.

Browsers also send Do Not Track and Global Privacy Control signals. We have nothing to switch off in response to them, but if that changes we will honour them.

5. Questions

privacy@gtamarket.store