Cookie Policy
Last updated: May 14, 2026
1. What cookies are
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work, or work more efficiently, and to give the site operator information. Every cookie LEDMarketplace sets is a first-party cookie — set by ledmarketplace.com, readable only by us, and never sent to third parties.
This policy also covers similar technologies we rely on, principally the browser's localStorage.
2. Cookies we use
We set only cookies that are necessary for the platform to work. No advertising, analytics, profiling, or tracking cookies are used.
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| lmp-auth | Holds your current access token so the server-side route guard can tell whether you are signed in and which dashboard you may open. | Until session expiry (refresh-token lifetime) | Strictly necessary |
| lmp-session-exp | Holds the expiry timestamp of your session so the app can refresh your tokens before they lapse instead of signing you out mid-task. | Until session expiry (refresh-token lifetime) | Strictly necessary |
| NEXT_LOCALE | Remembers the interface language you picked, so pages render in it on your next visit. Set only when you choose a language. | 1 year | Functional (user preference) |
Both authentication cookies are set with SameSite=Lax and, in production, the Secure flag, so they are only sent over HTTPS and not on cross-site requests.
3. Local storage we use
We use the browser's localStorage to keep session and preference state on your device. Unlike cookies, these entries are never transmitted to our servers automatically — they are read by the app running in your browser.
| Key | Purpose | Cleared |
|---|---|---|
| accessToken | Short-lived token sent in the Authorization header of API calls. Refreshed automatically as it expires. | On sign-out |
| refreshToken | Longer-lived token used to obtain a new access token. Sent only to the token refresh endpoint. | On sign-out |
| lmp-auth-store | Your role and basic profile data, so the interface can render immediately on page load without an extra round-trip. | On sign-out |
| theme | Your light/dark appearance preference. | When you clear site data |
| ledmarket_recent_searches | The last few catalogue searches you ran, shown as suggestions in the search box. Stays on your device. | When you clear site data |
4. Third-party cookies
We embed no advertising pixels, social widgets, session recorders, or analytics scripts, so no third party sets cookies through our pages. Our infrastructure provider, Cloudflare, may set a security cookie to distinguish automated traffic from real visitors; this is a strictly-necessary security measure and is not used to profile you.
5. Why we don't show a consent banner
Under the EU ePrivacy Directive and its national implementations, storage that is strictly necessary for a service the user explicitly requested is exempt from the consent requirement, and so is a preference remembered as a direct result of an action you took. Every cookie and storage entry listed above falls into one of those two categories: they exist to sign you in, keep you signed in, and honour settings you chose yourself.
Because we run no advertising, analytics, or non-essential tracking, a consent banner would ask you to approve nothing. If that ever changes we will update this policy and obtain your consent before setting any non-essential cookie.
6. Managing cookies
You can delete or block cookies at any time through your browser settings. Blocking the strictly-necessary ones will prevent you from signing in and using the platform. Instructions for common browsers:
- Chrome — Settings > Privacy and security > Third-party cookies > See all site data and permissions.
- Firefox — Settings > Privacy & Security > Cookies and Site Data.
- Safari — Settings > Privacy > Manage Website Data.
- Edge — Settings > Cookies and site permissions > Manage and delete cookies and site data.
To clear localStorage, open your browser's developer tools, go to the Application (or Storage) tab and clear the Local Storage entry for ledmarketplace.com. Signing out clears all stored tokens automatically.
7. Changes to this policy
If we introduce new cookies or change how we use existing ones we will update this policy and the "Last updated" date above. Material changes will be communicated by email or an in-app notice.
8. Contact
Questions about our use of cookies? Email [email protected].