Last updated: 13 September 2026
The short version
What a cookie is here
A cookie is a small piece of text your browser stores and sends back to the site that set it. Every cookie listed below is first-party, meaning it is set by TowSitePros and read by TowSitePros. None of them follows you to another website.
Every cookie we set
| Cookie | What it does | Kind | How long it lasts |
|---|---|---|---|
| Supabase authentication session | Keeps you signed in to your account and identifies you to the server on every request. | Strictly necessary | Until you sign out, or the session expires. |
| csrfSecret | Stops a form on another website from submitting to ours as if it were you. It holds a random value and nothing about you or your visit. | Strictly necessary | Until you close your browser. |
| tsp_attr | Remembers which campaign link brought you here (the campaign parameters and the referring site) so a sign-up can be attributed to the outreach that produced it. Read only by our servers, never by scripts in your browser. | First-party analytics | 30 days from your last campaign visit. |
| tsp_preview | Carries the site preview you came from into sign-up, so onboarding can fill in your company name, phone number and address instead of asking again. It holds a preview reference and nothing else, and it grants no access. | Functional | 30 days. |
| theme | Remembers whether you chose the light or dark version of the site, so the server can render it the right way round before any script runs. | Functional | One year. |
| sidebar:state | Inside your account only: remembers whether you left the navigation sidebar open or collapsed. | Functional | One week. |
What we deliberately do not set
- No advertising or retargeting pixels.
- No third-party analytics cookies, and no cross-site trackers.
- No fingerprinting, and no attempt to identify you across devices.
- Nothing that identifies a motorist on the tracking page they open, or on a site preview: no advertising cookie, no analytics cookie, no account and no sign-in. The only cookie either page can set is the cross-site-forgery one above, which says nothing about who is reading.
Analytics on a published operator site are recorded server-side without a tracking cookie, and the visitor's IP address is hashed before it is stored. What that records is set out in the Privacy Policy.
Browser storage
Your light or dark choice is also kept in your browser's local storage by the theme library, alongside the cookie, so the page does not flicker while it loads. It never leaves your browser.
Turning them off
Every browser can block or delete cookies, usually under settings named privacy or site data. Two of them do a job you would miss: blocking the authentication cookie means you cannot stay signed in, because that is the cookie that signs you in, and blocking the cross-site-forgery cookie stops forms on this site from being accepted. Blocking the other four costs you nothing except being asked the same questions twice.
Changes to this list
If we add a cookie, it goes in the table above on the day it ships and the date at the top changes. If we ever add anything that requires consent, we will ask for it before it is set rather than after. Questions: support@www.towsitepros.com.
Who you are dealing with
TowSitePros is a brand of Preferred Data Corporation.
1208 Eastchester Drive, Suite 131High Point, NC 27265United Statessupport@www.towsitepros.com