OpenLot

Legal

Cookie Policy

Effective November 1, 2026 · Last updated November 1, 2026

This policy explains the cookies and similar technologies OpenLot uses and how you can control them.

What cookies are

Cookies are small text files a website stores in your browser. Similar technologies, such as local storage, let a site remember information on your device. We refer to all of these as “cookies” in this policy.

Cookies we use

OpenLot uses only strictly necessary cookies. They keep you signed in, secure your account, and make core features work. Because the service can’t function without them, they don’t require consent, but you can still block them in your browser (see below).

Essential cookies
NamePurposeDuration
insforge_access_tokenKeeps you signed in and authorizes your requests to OpenLot.Until it expires or you sign out
insforge_refresh_tokenRenews your sign-in session without asking for your password again.Until it expires or you sign out
insforge_csrf_tokenProtects your session against cross-site request forgery.Up to 7 days
insforge_code_verifierSecures Google or GitHub sign-in while you complete it.10 minutes
openlot_oauth_nextReturns you to the right page after Google or GitHub sign-in.10 minutes
openlot_auth_nextReturns you to the page you were on after signing in or verifying your email.1 hour
openlot_pending_profileHolds your chosen role and display name between sign-up and email verification.1 hour
openlot_login_atRecords when you last signed in so we can highlight new messages and bids since then.Up to 400 days
openlot_prev_login_atRecords your previous sign-in for the same purpose.Up to 400 days

We also use one browser local storage item:

Local storage
NamePurposeDuration
openlot_unread_toast_loginPrevents the unread-messages notice from repeating during the same sign-in.Until you clear browser data

What we don't use

OpenLot does not use analytics, advertising, social-media, or cross-site tracking cookies, and we don’t let advertisers place cookies on OpenLot.

Third-party cookies

  • When a CSR subscribes or manages billing, they are sent to Stripe Checkout or the Stripe customer portal, which may set its own cookies for payment processing and fraud prevention under Stripe's privacy policy.
  • If you choose to sign in with Google or GitHub, those providers may set cookies on their own sites during sign-in.

Managing cookies

Most browsers let you view, block, and delete cookies in their settings. If you block or delete OpenLot’s essential cookies, you’ll be signed out and won’t be able to use features that require an account. Signing out removes your session cookies.

Changes to this policy

If we ever add non-essential cookies, such as analytics, we will update this policy and ask for your consent where required before setting them. For more about how we handle personal information, see our Privacy Policy.

Contact us

Wilson IT Solutions LLC
4041 Grove Park Circle, Birmingham, AL 35242
Email: info@wilsonitsolutions.com
Phone: (866) 678-9487