This Cookie Policy explains how Simple Lend Marketplace uses cookies and similar technologies on simplelend.co. A cookie is a small text file a site asks your browser to store and reads back on later requests. Not everything the site remembers is a cookie: your truck comparison list, a saved sell-your-truck draft, and the banners and tooltips you have dismissed are kept in your browser's local storage, which stays on your device rather than travelling with every request.
Simple Lend Marketplace sets one cookie of its own, connect.sid. It identifies your browser's session so you stay signed in from page to page, and the token that protects our forms against cross-site request forgery is held in that session rather than in a separate cookie. It lasts 40 days, cannot be read by JavaScript, is restricted to same-site requests, and is sent only over HTTPS in production. It carries an identifier, not your personal details. This is the complete list of cookies we set ourselves regardless of your choice; our optional campaign, ad-click and analytics cookies are described below.
How we ask depends on where your device says you are. If your device's time zone is in the United States, there is no cookie banner: the optional analytics and advertising tools described here run by default, and you can opt out at any time with the Your Privacy Choices control in the footer of every page. Session recording is the exception: it never runs by default, in the United States or anywhere else, and is switched on only if you choose Accept All. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and keep those tools off without asking. Everywhere else, and whenever we cannot read your device's time zone, a banner asks first and nothing optional runs until you choose Accept All. In what follows, optional tools are on for you after you accept, or by default in the United States unless you have opted out or your browser sends Global Privacy Control; otherwise they are off.
While optional tools are on for you, Simple Lend uses an optional browser-session cookie, sl_campaign, to remember the first tagged campaign that brought you here and connect its source, medium and content labels with an enquiry you submit. It has no fixed expiry and is removed when you opt out or withdraw consent; browsers may retain session cookies when restoring a session. Other optional cookies come from third-party providers. Google Tag Manager, the Meta Pixel, Microsoft Advertising and the PostHog analytics tool are not loaded at all while optional tools are off for you. Microsoft Clarity, a session-recording tool, is loaded only if you choose Accept All, and never by default: once it is running it records session replays and heatmaps of clicks and scrolling. PostHog is product analytics only, and receives just the specific events we send it, such as which listings and filters are used and where a journey stops; it neither watches your screen nor captures your clicks automatically. Sentry is our error-monitoring tool: it loads on every page to capture the technical details of any crash or bug so we can fix them, which places no advertising or tracking cookies. Sentry can also record a visual replay of a session — a small sample of sessions, about 10%, plus any session in which an error occurs — to help us diagnose and fix problems, and, like Microsoft Clarity, that session replay is recorded only if you choose Accept All, never by default; otherwise Sentry reports errors but records no replay. Google Analytics and Google Ads are the exception: they load on every page under Google Consent Mode, with storage denied while optional tools are off for you, so in that case they place no cookies or advertising identifiers on your device. Each provider sets its own cookies and decides how long they last, so we point you to their documentation rather than restate values we do not control.
Another optional cookie is ours rather than a provider's: if you arrived from a Google ad, the link carries a click identifier (Google calls it a gclid, gbraid or wbraid), and while optional tools are on for you, whether because you chose Accept All or by default in the United States, we keep that identifier and the time it was captured in a first-party marketing cookie named sl_ad_click, with a copy under the same name in your browser's local storage for browsers that drop cookies, so that a later enquiry or phone call can be credited to the ad that brought you. It lasts 90 days, the longest window Google allows for matching. While optional tools are off for you, the identifier is not written to your device or attached to enquiries or phone taps. Otherwise it may be stored with your enquiry or phone-tap record and forwarded to our CRM for ad attribution. If you opt out, reject or withdraw your consent, the browser copies are removed and future requests stop carrying it. Opting out does not delete records already submitted. It contains an identifier issued by Google, not your personal details. A second cookie of ours is for analytics rather than advertising: while optional tools are on and our product analytics loads, a first-party cookie named sl_ph_did stores that tool's own visitor identifier — no personal details — so the events measured in your browser, such as viewing a truck, and the events our server records, such as submitting an enquiry, are counted as one visit rather than two people. It lasts one year, is not written to your device while optional tools are off, is never used for advertising, and is removed when you opt out, reject or withdraw your consent.
Cookies and tags on our site fall into the three categories the consent banner shows. Strictly necessary covers the session cookie described above: it keeps you signed in and protects forms from abuse, and the site cannot work without it, so it is not something you can switch off. Analytics covers measuring page views and journeys so we can see which listings and pages are useful. Marketing covers measuring which ads brought you here and letting those networks show our ads to comparable audiences. There is no preference or personalisation category, and no cookie on this site remembers a setting or a browsing choice for you.
Outside the United States, the first time you visit, a banner lets you accept or reject the optional categories. Optional tools are switched on and off together: we do not currently offer per-category selection, so if you want one but not the other, the honest answer is to reject or opt out and we will load none of them. A choice you make, whether Accept All or Reject All on the banner or opting out or back in with Your Privacy Choices, is recorded with the time you made it in your browser's local storage under the key cookie_consent, not in a cookie, and it takes priority over the United States default and over a Global Privacy Control signal; the default itself is never stored. It is stored per browser and does not follow you to another browser or device; if you are signed in to your account, an opt-out is also saved to your account for the server-to-server transfers described below. When an enquiry or phone-tap request carries an ad identifier, it also tells our server that optional tools are on for you.
You can change your decision at any time with Your Privacy Choices in the footer of any page. In the United States it lets you opt out of the optional tools, including sharing information with advertising partners for targeted advertising, and opt back in later; elsewhere it offers the same Accept All and Reject All choices as the banner. Opting out reloads the page so the optional tags stop running immediately rather than continuing until your next page view; anything you have typed but not submitted will be lost. When you opt out we also delete the Google Analytics and Google Ads cookies set on this site. Other cookies a provider has already placed on your device belong to that provider, so use your browser's settings to inspect or remove those. Your Privacy Choices controls the tools that run in your browser. Once you have opted out, forms you submit from the browser where you opted out are also kept out of the server-to-server transfers to Meta and PostHog described in our Privacy Policy. Outside the United States, and whenever we cannot read your device's time zone, forms you submit before choosing Accept All, including while the banner is still unanswered, are kept out of those transfers too. If you are signed in to your account when you opt out, or when you submit a form that carries your opt-out, we also record the opt-out on your account: forms you submit while signed in are then kept out of those transfers from any browser or device, until you opt back in or choose Accept All while signed in. The tools that run in another browser still follow that browser's own setting. Otherwise your choice is stored only in that browser, so it does not cover forms you send from another browser or device while you are not signed in, or enquiries you sent before opting out. In either case it does not yet stop the server-to-server transfers to Google Ads; you can ask us to exclude your details from any of those through our contact page.
Your browser can also block or delete cookies on its own. If your browser or an extension sends a Global Privacy Control signal, we honor it automatically as a request to opt out, as described above. We do not respond to the older do-not-track setting, which has no agreed meaning. Blocking the strictly necessary cookie described above will prevent you from signing in or submitting a form securely. We will update this policy when the cookies or providers we use change. If you have questions about how we use cookies, or about the choices available to you, please reach out through our contact page.