Your cookie choices
Necessary technologies are always on. Analytics: off; marketing: off; preferences: off. No optional consent has been recorded.
1. How consent works
For UK, EU, EEA and Swiss visitors, Google's certified consent management platform is the primary advertising-consent interface. Folex Auto Market does not place its own primary banner over that interface. Google advertising remains blocked until the platform reports the required IAB TCF consent; analytics and functional choices remain separately controlled through Cookie Preferences. Strictly necessary technologies remain available because they support authentication, security, MFA, payments, consent records and requested account functions. Consent choices are also reflected in a first-party record containing the selected categories, a timestamp, a random pseudonymous consent identifier and this policy version. Scrolling, closing a window or continuing to browse is not treated as consent. Where reliable country information is unavailable, the safer restricted-region treatment applies. Only country-level location already supplied by our hosting provider is used; the Platform does not request precise location.
2. Technologies currently used
Folex Auto Market does not currently load Google Analytics, Meta Pixel, TikTok Pixel, Hotjar, PostHog or Plausible. Google AdSense is limited to three manual homepage placements and is consent-gated where required.
| Name/category | Provider | Purpose | Classification | Duration |
|---|---|---|---|---|
| Supabase auth cookies (sb-<project-ref>-auth-token, including chunked variants) | Supabase | Authentication, token refresh, MFA and protected account sessions | Strictly necessary | Session/token lifetime; refreshed while signed in |
| folex_pending_signup_role / folex_pending_signup_mode | Folex Auto Market | Preserves the selected role and sign-in mode across Google OAuth | Strictly necessary | 10 minutes |
| folex_login_redirected_* and OAuth sessionStorage | Folex Auto Market | Prevents authentication redirect loops and completes the requested login flow | Strictly necessary | Browser tab session |
| folex_cookie_consent | Folex Auto Market | Stores a random pseudonymous consent identifier, category choices, timestamp and consent-policy version | Strictly necessary | 180 days |
| Cookie consent audit event | Folex Auto Market / Supabase | Keeps minimal append-only evidence of consent choices and later changes | Strictly necessary compliance record | 24 months under the current retention policy |
| IAB TCF consent record | Google European Regulations CMP | Records advertising-consent choices for Google services in the UK, EU, EEA and Switzerland | Strictly necessary consent mechanism | Managed through Google's consent interface |
| theme | Folex Auto Market | Remembers a user-selected light, dark or system display mode | Strictly necessary functional preference | Until cleared or changed |
| Aggregate listing view / contact interaction counters | Folex Auto Market | Counts listing views and WhatsApp/call interactions so sellers see traffic evidence for their own listings. No browser cookie is set for this purpose. Deduplication uses a rotating one-way hash of request IP and user-agent that expires with a 30-minute salt rotation; no raw IP or persistent visitor identifier is stored. | Core marketplace statistics (no optional consent required) | Ephemeral dedupe hash rotates and is pruned within one hour; pseudonymous count rows have no identifier attached |
| First-party advert impression/click events | Folex Auto Market | Measures sponsored placement performance for advertiser reporting | Optional marketing/advertising | No browser cookie; server records follow the applicable retention policy |
| Deeper behavioural analytics (visitor journeys / saved-search behaviour) | Folex Auto Market | Reserved category. Nothing of this kind runs today and any future implementation will be added only under this consent category. | Optional analytics | Not currently used |
| Manual responsive advertising units | Google AdSense | Displays advertising in three controlled homepage placements where the required consent is available | Optional marketing/advertising | Google-managed; no Folex Auto retention period |
| recently_viewed account records | Folex Auto Market / Supabase | Shows signed-in buyers their recently viewed listings | Optional preferences/functional | Until replaced, removed or the account data is deleted |
| folex_last_cars_url | Folex Auto Market | Returns a visitor to their previous vehicle search | Optional preferences/functional | Browser tab session |
| folex_intro_offer_dismissed_at | Folex Auto Market | Remembers dismissal of the introductory-offer popup | Optional preferences/functional | 7 days |
| folex-v1 Cache Storage / service worker | Folex Auto Market | Provides the offline fallback page | Optional preferences/functional | Until withdrawn, replaced or cleared |
3. Core marketplace statistics (no optional consent required)
Folex Auto Market provides sellers with basic traffic evidence for their own listings: a listing view count, a dealer total, a top-listings ranking and WhatsApp/call interaction counts. These are core marketplace statistics comparable to a shop counting footfall, and they are recorded for every visit regardless of optional-analytics choice. The Platform stores no raw IP address, no user-agent string, no browser cookie for this purpose, no cross-site identifier and no persistent per-visitor identifier. Duplicates within a short window are suppressed using a rotating one-way hash of the request's IP and user-agent; the salt rotates every 30 minutes so the same visitor's next view is naturally counted as new. The hash is computed server-side, never returned to the client, and cannot be reversed to the source information without the server secret and even then only within the 30-minute salt window. The dedupe rows are pruned within one hour. Owner and admin self-views are excluded on the server before recording so a seller cannot inflate their own counts. Nothing here supports advertising attribution, remarketing or behavioural profiling.
3a. Optional analytics
A separate optional-analytics category is reserved for any future deeper behavioural analysis such as visitor journeys or saved-search behaviour. Nothing of this kind runs today. If such measurement is introduced it will require explicit analytics consent, will remain first-party, and will never double-count the core statistics above.
4. Marketing and advertising measurement
Sponsored placements may be displayed without tracking a visitor. With marketing/advertising consent, first-party counters record advert impressions and clicks. These counters are blocked before consent and after withdrawal. The Platform does not use behavioural remarketing pixels. Google AdSense is configured only for three manual responsive homepage units; Auto Ads are not enabled. For UK, EU, EEA and Swiss visitors, AdSense is blocked unless Google's certified consent management platform reports a valid IAB TCF decision for the required purposes and vendor. Folex Auto Market stores the resulting category choice but does not store the Google TC string in its Supabase consent audit trail.
5. Preferences and functional storage
With preferences consent, the Platform may remember recently viewed listings, the previous vehicle-search URL, intro-offer dismissal and an offline fallback cache. Withdrawing consent prevents future optional functional storage and removes the registered offline service worker/cache. Authentication and core account actions remain available.
6. Payments and infrastructure
Paystack is opened when a user chooses to make a payment and may use technologies required for payment processing, fraud prevention and security under its own policies. Supabase supplies authentication and database infrastructure. Vercel hosts the Platform and processes request-level information needed to deliver and secure the service. These providers are not loaded as optional advertising trackers by this site.
7. Changing or withdrawing consent
Use the permanent “Cookie Preferences” link in the footer or the button near the top of this page. In restricted regions it provides separate access to Folex Auto analytics/functional choices and Google's advertising-consent controls without displaying two primary banners. Rejecting optional categories is as direct as accepting them. A new choice replaces the browser record used to control future optional technologies. Meaningful initial choices, updates and withdrawals create separate minimal server-side audit events so the history is not overwritten or spammed on navigation. Browser settings can also clear site data, but clearing Supabase authentication cookies will sign you out.
8. Minimal consent audit record and retention
To evidence consent choices, Folex records a random pseudonymous consent identifier, the enabled or disabled categories, policy version, date and time, action type, and country code where our hosting provider supplies one. The record does not contain a raw IP address, email address, name, full user agent, device fingerprint or precise location. We do not currently link this audit record to an authenticated account. The initial retention policy is 24 months. No automatic deletion is enabled until a deliberate, reviewed cleanup mechanism is introduced.
9. Contact
FOLEX AUTO MARKET LTD, company number 9602136, 7 Tarred Road (Federal Road), Off LASU Road, Egbeda, Lagos, Nigeria. Privacy enquiries: privacy@folexautomarket.com. Support and data-rights requests are available through the Contact Support and Data Request pages.