1The cookies we set
| Name | What it is for | How long |
|---|---|---|
| caravela_session | caravela_sessionKeeps you signed in as a member. Holds a random token; the matching record on our side is stored only as a hash.30 days, or 90 if you ticked “Keep me signed in”. Removed when you log out. | 30 days, or 90 if you ticked “Keep me signed in”. Removed when you log out. |
| caravela_currency | caravela_currencyThe currency you chose to see prices in.One year. | One year. |
| caravela_locale | caravela_localeThe language you chose to read Caravela in — English or Arabic.One year. | One year. |
| caravela_page_size | caravela_page_sizeHow many listings you chose to see on each list page (for example 48 on Browse). Only the numbers, nothing else.One year. | One year. |
| caravela_admin | caravela_adminKeeps a Caravela administrator signed in to the admin portal. Members never receive it.12 hours. | 12 hours. |
| caravela_admin_half | caravela_admin_halfRemembers, for a few minutes, that an administrator entered the right password and still owes the two-factor code.Five minutes, or ten when the code is sent by email. | Five minutes, or ten when the code is sent by email. |
| caravela_admin_recovery | caravela_admin_recoveryHolds an administrator’s one-time recovery codes between setting up two-factor sign-in and the page that shows them once. Members never receive it.Ten minutes at most; removed as soon as the codes have been shown. | Ten minutes at most; removed as soon as the codes have been shown. |
All of them are strictly necessary: without the first, nobody could stay signed in; without the second, prices would switch back to the default currency on every page. They are sent only to Caravela, over an encrypted connection, and the sign-in cookies cannot be read by scripts on the page.
2Videos on listings
A seller can add a YouTube or Vimeo video to a listing. Nothing is loaded from YouTube or Vimeo when you open the listing — you see a play button instead. Only when you press it does the provider’s player load (YouTube in its privacy-enhanced mode, Vimeo with its “do not track” setting), and from then on that provider may store its own cookies or similar data in your browser under its own policy.
3Turning them off
You can block or delete cookies in your browser’s settings. If you block caravela_session, you will not be able to sign in; everything else will carry on working.
What we do with the information you give us is in the privacy policy.