Cookies | TreeBay

Cookies we set

These are set by TreeBay; each row says when. The site cannot work without them, except tb_near, which is set only if you ask us to remember your area, and tb_internal, which only our own staff use.

__Secure-next-auth.session-token
What it does
Keeps you signed in on this browser
How long
90 days, renewed each time you visit
__Host-next-auth.csrf-token
What it does
Protects the sign-in and sign-out forms from forgery
How long
Until you close your browser
__Secure-next-auth.callback-url
What it does
Remembers which page to take you back to after you sign in
How long
Until you close your browser
__Host-tb_save_search
What it does
Set when you tap “Save this search” before signing in. Remembers the search you asked to be emailed about while you sign in, then is cleared once used
How long
Up to 25 hours
tb_device
What it does
Recognises a browser you've signed in with before, so we can email you if someone signs in from a new one
How long
Up to a year
__Host-tb_near
What it does
Set only when you tap “Use my location”. Remembers your postcode district, like CH7, never your exact position, so listings show how far away they are and the tip-sites search starts from it. Used for nothing else. “Forget my location” removes it
How long
1 year
tb_jobtoken
What it does
Set when you post a job advert, open your Referrals page, or list something after joining through a member’s link or naming a member. Used only to stop free offers and referral credits being misused (fraud prevention). Never used for analytics or marketing
How long
2 years
tb_internal
What it does
Only on TreeBay's own staff and test browsers, set by the staff member themselves, so their visits aren't counted as listing views. Members never get it
How long
400 days

Cookies set by TreeBay
Cookie	What it does	How long
`__Secure-next-auth.session-token`	Keeps you signed in on this browser	90 days, renewed each time you visit
`__Host-next-auth.csrf-token`	Protects the sign-in and sign-out forms from forgery	Until you close your browser
`__Secure-next-auth.callback-url`	Remembers which page to take you back to after you sign in	Until you close your browser
`__Host-tb_save_search`	Set when you tap “Save this search” before signing in. Remembers the search you asked to be emailed about while you sign in, then is cleared once used	Up to 25 hours
`tb_device`	Recognises a browser you've signed in with before, so we can email you if someone signs in from a new one	Up to a year
`__Host-tb_near`	Set only when you tap “Use my location”. Remembers your postcode district, like CH7, never your exact position, so listings show how far away they are and the tip-sites search starts from it. Used for nothing else. “Forget my location” removes it	1 year
`tb_jobtoken`	Set when you post a job advert, open your Referrals page, or list something after joining through a member’s link or naming a member. Used only to stop free offers and referral credits being misused (fraud prevention). Never used for analytics or marketing	2 years
`tb_internal`	Only on TreeBay's own staff and test browsers, set by the staff member themselves, so their visits aren't counted as listing views. Members never get it	400 days

When you pay

Payments happen on Stripe's checkout page (checkout.stripe.com). Stripe sets its own cookies there to take the payment and prevent fraud. They are needed for the payment and are covered by Stripe's cookie policy.

Stored on your device

A few things are kept in your browser's own storage. They are not cookies, and they stay on your device: nothing here is sent to us, except a form when you send it and your browser's notification address when you turn notifications on.

Notifications
What it does
Set only when you turn on notifications and allow them in your browser. Your browser then gives us an address for this device, which we use only to tell you when you get a message or a reply on TreeBay. To stop them, turn off notifications for treebay.uk in your browser's settings
How long
Until you turn notifications off, or your browser ends it
push_denied_atpush_denied_permanent
What it does
Remembers that you said no to notifications, so we don't keep asking
How long
Until you clear your browser data
Light or darktreebay-theme
What it does
Remembers that you chose Light or Dark, at the bottom of every page or, when you're signed in, in the menu. Set only when you pick one of them. Pick Device to remove it, and the site follows your device's own setting again. Used only to set the look on this device, never sent to us
How long
Until you pick Device or clear this site's data in your browser (local storage)
Unsent postscommunity-draft:*
What it does
Keeps what you have typed in a thread or reply if you leave the page before sending it
How long
Until you send it or close the tab (session storage)
Unfinished listingtreebay-sell-draft-v2:*treebay-sell-draft-v1
What it does
Keeps a copy of the listing you're writing, for your account only, so nothing is lost if you lose signal or leave the page before it's saved to your account
How long
Until you publish or delete the listing, or sign out (local storage). The copy for this tab (treebay-sell-draft-v1) also goes when you close the tab (session storage)
Recently viewedtreebay-recent-v1:*treebay-recent-v1treebay-recent-off
What it does
Remembers the last 12 listings you opened on this device, so you can find them again. Only the listings' ids, never sent to us. Clear it or turn it off on the list itself; treebay-recent-off remembers that you turned it off
How long
Each listing is forgotten 90 days after you last opened it. Your account's list goes when you sign out. Without an account, it stays on this device until you clear it or its 90 days are up (local storage)
Message to a sellertreebay:contact-draft:*
What it does
Keeps a message you typed to a seller if you turn out to be signed out when you press Send, so it is still there after you sign in
How long
Removed when you open the message again; ignored after 24 hours
This tab onlytb-more:*treebay-seller-status-later
What it does
Remembers how far down a list of listings you had got, so going back from a listing returns you there, and that you chose “Not now” on the dashboard question about your listings
How long
Until you close the tab (session storage)
umami.disabled
What it does
Remembers that you asked us not to count your visits on this device.
How long
Stays until you clear your browser's data or choose to be counted again.
Offline copy
What it does
Keeps copies of the home page, the listings page, a page that says you're offline, and each public page you open, with the site's own code and icons, so TreeBay still opens with a poor signal or none. Pages that show your own details, such as your messages and dashboard, and listing photos are never kept. Used only on this device, never sent to us. Turn it off below the table; that choice is remembered on this device
How long
Each copy is replaced when you open that page again with a signal. Pages are deleted when you sign out (the site's code and icons stay), and everything goes when you clear this site's data in your browser

Browser storage used by TreeBay
Name	What it does	How long
Notifications	Set only when you turn on notifications and allow them in your browser. Your browser then gives us an address for this device, which we use only to tell you when you get a message or a reply on TreeBay. To stop them, turn off notifications for treebay.uk in your browser's settings	Until you turn notifications off, or your browser ends it
`push_denied_atpush_denied_permanent`	Remembers that you said no to notifications, so we don't keep asking	Until you clear your browser data
Light or dark`treebay-theme`	Remembers that you chose Light or Dark, at the bottom of every page or, when you're signed in, in the menu. Set only when you pick one of them. Pick Device to remove it, and the site follows your device's own setting again. Used only to set the look on this device, never sent to us	Until you pick Device or clear this site's data in your browser (local storage)
Unsent posts`community-draft:*`	Keeps what you have typed in a thread or reply if you leave the page before sending it	Until you send it or close the tab (session storage)
Unfinished listing`treebay-sell-draft-v2:*treebay-sell-draft-v1`	Keeps a copy of the listing you're writing, for your account only, so nothing is lost if you lose signal or leave the page before it's saved to your account	Until you publish or delete the listing, or sign out (local storage). The copy for this tab (treebay-sell-draft-v1) also goes when you close the tab (session storage)
Recently viewed`treebay-recent-v1:*treebay-recent-v1treebay-recent-off`	Remembers the last 12 listings you opened on this device, so you can find them again. Only the listings' ids, never sent to us. Clear it or turn it off on the list itself; treebay-recent-off remembers that you turned it off	Each listing is forgotten 90 days after you last opened it. Your account's list goes when you sign out. Without an account, it stays on this device until you clear it or its 90 days are up (local storage)
Message to a seller`treebay:contact-draft:*`	Keeps a message you typed to a seller if you turn out to be signed out when you press Send, so it is still there after you sign in	Removed when you open the message again; ignored after 24 hours
This tab only`tb-more:*treebay-seller-status-later`	Remembers how far down a list of listings you had got, so going back from a listing returns you there, and that you chose “Not now” on the dashboard question about your listings	Until you close the tab (session storage)
`umami.disabled`	Remembers that you asked us not to count your visits on this device.	Stays until you clear your browser's data or choose to be counted again.
Offline copy	Keeps copies of the home page, the listings page, a page that says you're offline, and each public page you open, with the site's own code and icons, so TreeBay still opens with a poor signal or none. Pages that show your own details, such as your messages and dashboard, and listing photos are never kept. Used only on this device, never sent to us. Turn it off below the table; that choice is remembered on this device	Each copy is replaced when you open that page again with a signal. Pages are deleted when you sign out (the site's code and icons stay), and everything goes when you clear this site's data in your browser

Visit statistics

We count visits with our own statistics tool, on our own server. It uses no cookies and doesn't identify you: it gives each visit a code that changes every day, so visits can't be linked from one day to the next, and it doesn't keep your IP address. We use the counts only to improve the site.

If this changes

If we ever want to use a cookie that isn't strictly necessary, we will ask you first and add the choice to this page. More about how we handle your data is in our Privacy Policy. Questions: hello@treebay.uk.