Last updated: April 26, 2026
A cookie is a small text file stored on your device when you visit a website. We use cookies and similar technologies (local storage, web beacons) for the purposes described below.
1. Categories of cookies we use
Strictly necessary
Required for the site to function. You cannot disable these without breaking core features (sign in, cart, checkout, fraud prevention).
__Host-next-auth.session-token: keeps you signed in.cart_id: links your cart to your session.csrf_token: prevents cross-site request forgery.- Stripe session cookies set during checkout.
Functional
Remember preferences so you do not have to re-enter them.
theme: light or dark mode preference.zip: your last-entered ZIP for installer lookup.vehicle: your saved year/make/model selection.
Analytics
Help us understand how visitors use the site so we can improve it. Aggregated, never sold. You can opt out at any time.
- First-party page-view counters (no third-party trackers in MVP).
- Sentry error monitoring (anonymized stack traces).
2. Third-party cookies
When you check out, Stripe sets its own cookies for fraud prevention and BNPL underwriting. When you use the installer map, Google Maps may set cookies under its own privacy policy. We do not control these cookies; refer to Stripe’s privacy policy and Google’s privacy policy.
3. Manage your preferences
Open the cookie preferences panel to update which categories we may set on your device. Your choice is remembered for 365 days.
4. How to control cookies
- Browser settings:all major browsers let you block or delete cookies. See your browser’s help docs (Chrome, Safari, Firefox, Edge).
- Global Privacy Control (GPC): we honor GPC signals as an opt-out of analytics and a do-not-sell request.
- Account settings: sign in to your account to manage email and notification preferences.
Blocking strictly necessary cookies will break sign in, cart, and checkout. Blocking functional cookies means we cannot remember your theme or vehicle. Blocking analytics has no impact on functionality.
5. Do Not Track
We do not respond to DNT browser signals because there is no consistent industry standard for them. We do honor Global Privacy Control (GPC).
6. Changes
We may update this policy. Material changes will be announced by email or a site banner.
7. Contact
Privacy questions: [email protected]. Read our full Privacy Policy.