Cookie policy
This page explains the cookies and similar technologies listedlocal.io uses: small files or scripts that store or read information in your browser.
Our approach
- We use only what the site needs to work and to keep bots out. The full list is below.
- We measure our Google ads with Google's conversion tag, and only if you click "Accept" in our cookie banner, in every country. Rejecting is as easy as accepting, the site and the checker work the same either way, and we treat a Global Privacy Control signal from your browser as a "Reject".
- We don't use analytics cookies or social media cookies. We count visits with PostHog without storing anything in your browser (see below).
Strictly necessary
Everything in the list below is strictly necessary: the site can't work or stay protected without it, so it doesn't need your consent. Most of it is only set when you use the feature it belongs to.
The full list
| Name | Type | Set by | What it does | When | How long |
|---|---|---|---|---|---|
__Host-listed_session |
Cookie | Listed Local | Keeps an agency member or a client-portal user signed in. It holds a random token; we store only a one-way hash of it. | When you sign in with an emailed link | 30 days, or until you sign out |
listed_ws |
Cookie | Listed Local | Remembers which agency workspace you last chose | When an agency member sets up or switches workspace | 400 days, or until you sign out |
listed:scan: followed by the page address |
Session storage | Listed Local | Remembers the scan you started on a checker page, so a reload picks it up again | When you start a scan | Until you close the tab |
| Cloudflare Turnstile (bot check) | Script in its own frame | Cloudflare | Tells people from bots. It reads signals from your browser, such as your IP address and browser details. Cloudflare says Turnstile doesn't need cookies; inside its own frame it may store data the check needs. | When you look up a business, start a scan or the AI check, ask the results chat your first question, send the lead form or ask for a sign-in link | Set by Cloudflare |
| Paddle checkout | Script and its own frame | Paddle | Runs the payment form for paid plans. Paddle may set the cookies it needs for checkout and fraud prevention. | Only on the agency app's billing page, when you open checkout | Set by Paddle |
listed_consent |
Cookie | Listed Local | Remembers whether you accepted or rejected advertising cookies, so the banner doesn't ask again | When you click "Accept" or "Reject" in the cookie banner | 6 months |
listed:conversion: followed by the event and scan |
Session storage | Listed Local | Stops one finished scan from being counted twice for our ads. Only if you accepted advertising cookies. | When a scan finishes | Until you close the tab |
Usage analytics (PostHog) and the map images set nothing in your browser. Advertising cookies are listed under "Advertising" below and load only if you accept them.
Map images
The map is drawn from image tiles that your browser loads from MapTiler, our map tile provider. We don't set cookies for this, but MapTiler receives your IP address and the address of the page so it can send the tiles. See the subprocessors page.
Usage analytics, without cookies
We use PostHog to see which pages and steps work. It sets no cookies and stores nothing in your browser, so we don't ask for consent for it and there's nothing to accept or reject. PostHog receives your IP address with each event, uses it only to make a code that tells visitors apart for one day, and then deletes it. The privacy policy has the details.
Advertising (only if you accept)
We advertise on Google and use Google's conversion tag to see which ads bring people who finish a scan, send the lead form or open an agency account. The tag loads only after you click "Accept", in every country; until then, and if you reject, nothing is sent to Google. It sends Google the ad-click identifier from the link you arrived by, the page and the type of event, never your email address or anything you typed. Ads personalisation (remarketing lists) stays off. The tag never runs on agencies' white-label pages: share links, the client portal and the lead widget.
| Name | Type | Set by | What it does | How long |
|---|---|---|---|---|
Google Ads conversion tag (gtag.js) |
Script | Loads from googletagmanager.com and reports the events above to Google Ads | — | |
_gcl_au |
Cookie | Google, on our domain | Links a conversion to the ad visit it came from | 90 days |
_gcl_aw |
Cookie | Google, on our domain | Holds the ad-click identifier when you arrive from one of our ads | 90 days |
| Google's own cookies | Cookies | Google, on Google's domains | Google may read or set cookies on its own domains, as its cookie information describes | Set by Google |
Google uses this data as an independent controller under its own terms and privacy policy. We don't use ChatGPT's or any other ad platform's tags.
Changing your choice
The "Cookie settings" link at the bottom of every page opens the banner again, so you can change your choice at any time. If you withdraw consent, the tag stops sending data at once and we delete its cookies on our domain. You can also delete cookies in your browser settings. If you delete the sign-in cookie, you will need a new sign-in link.
Changes
When we add or change a cookie or tag, we update this page and the date at the top. If a change needs your consent, a banner asks for it before the cookie or tag is used.
Contact
privacy@listedlocal.io. For anything else, use our contact page.