Cookie Policy
The cookies boat.vin sets, and why.
Last updated Nov 2, 2026
1. Only what the site needs
boat.vin’s own cookies are only the ones that make the site work. The one third-party cookie is Google Analytics, described below, which measures visits and is not set where the law requires consent first. There are no advertising cookies.
2. The cookies
- boatvin.session-token: keeps you signed in. Up to 30 days.
- boatvin.csrf-token, boatvin.callback-url: protect sign-in forms and remember where to return. Session.
- boatvin.state, boatvin.pkce.code_verifier, boatvin.nonce: only during a Google or Apple sign-in, to secure it. Up to 15 minutes.
- bv_sso: remembers that boat.vin already checked whether you are signed in on salvagealert.com, so it does not check on every page. 7 days.
- bv_sso_r: the same after arriving from a salvagealert.com link. 5 minutes.
- _ga, _ga_<id> (Google Analytics): tell one browser’s visits apart so we can count them. Up to 2 years. Not set in the EEA, the UK, Switzerland or Québec, where Google receives only cookieless signals. No advertising use.
On secure connections their names carry a “__Secure-” prefix (“__Host-” for the CSRF one). Your browser may also keep the list of boats you are comparing, in local storage on your device; we never receive it.
3. Your choices
You can delete or block cookies in your browser settings. Blocking them will sign you out and stop sign-in from working, but you can still browse boat.vin. For audience measurement on salvagealert.com, see its own cookie policy.
4. Contact
[email protected] · Related: Privacy Policy
