Cookie policy

What a cookie is

A cookie is a small text file a website asks your browser to store and send back on later requests. It is how a site remembers that you are signed in between one page and the next.

The same rules in this policy apply to comparable technologies such as browser local storage and session storage.

The cookies we set

All of these are strictly necessary — the site cannot keep you signed in without them, so they do not require consent under the Personal Data Protection Act B.E. 2562.

• Authentication session — set by our authentication provider, Supabase, when you sign in. It holds your session token so you stay signed in between pages, and it is removed when you sign out. Names begin with "sb-".

• Sign-in verifier — a short-lived cookie created only during a sign-in or password-reset flow, to protect the exchange against interception. It is deleted as soon as the flow completes.

What we deliberately do not set

• No analytics cookies. There is no Google Analytics, no tag manager and no session-recording tool on this site.

• No advertising or retargeting cookies, and no cross-site tracking identifiers.

• No social media pixels. If we embed anything from a third party in future, it will be behind a click-to-load placeholder.

• No language cookie. Each language has its own URL — English on the bare path, Thai under /th — so your choice is in the address, not in a cookie.

• No fonts loaded from a third party. Our typefaces are served from our own domain, so no font provider receives your IP address.

Rate limiting and your IP address

When you submit a form we derive a one-way hash from your IP address, combined with a secret and the current date, and use it to stop the same caller from flooding the form. The address itself is never stored, and yesterday's hash cannot be matched to today's. This is not a cookie and does not identify you.

Controlling cookies

Every major browser lets you view, block and delete cookies, usually under Privacy or Site settings. You can also use a private browsing window, which discards cookies when you close it.

If you block the cookies listed above you can still browse the marketplace, use the valuation tool and read everything on the site — but you will not be able to stay signed in.

If this changes

If we ever add a cookie that is not strictly necessary — for product analytics, for example — we will ask for your consent before it is set, offer a genuine per-purpose choice, make refusing as easy as accepting, and update this page first.

Contact

Questions about this policy: info@dealflowmarket.com.