Legal
Cookie Policy & Preferences
Last updated: 6 June 2026
Cookies are small text files stored on your device when you visit a website. We use them to keep you signed in, remember your preferences, measure how the site is used, and (with your consent) deliver marketing that is relevant to you.
Your cookie preferences
These choices are stored on this device. You can change them whenever you like.
1. Categories of cookies we use
- Strictly necessary — sign-in, session, cart, security and fraud prevention. These cannot be switched off.
- Preferences — remember your region, recent searches and saved vehicles.
- Analytics — help us understand which parts of the Service are used so we can improve it. Anonymised where possible.
- Marketing — only set with your consent; used to show relevant ads on other sites and measure campaign effectiveness.
2. Managing your choices
Use the preference panel above to switch analytics and marketing cookies on or off at any time. Your choice is stored on this device — if you sign in from another browser you'll be asked again. You can also clear cookies in your browser settings.
Most browsers let you block or delete cookies via Settings > Privacy. For more information visit aboutcookies.org.
3. Third parties we use
The table below lists every third-party service integrated into SpareCarPart today, what it does, and whether it sets cookies in your browser. We do not currently load any analytics, advertising, retargeting or session-replay scripts.
| Vendor | Purpose | Cookies / storage | Category |
|---|---|---|---|
| Lovable Cloud (Supabase) | Database, sign-in, file storage | Auth session in localStorage | Strictly necessary |
| Cloudflare | Edge hosting, DDoS & bot protection | __cf_bm (30 min, bot management) | Strictly necessary (security) |
| Stripe | Card payments at checkout | Set on Stripe's own domain during checkout only | Strictly necessary (when paying) |
| Google Fonts | Web fonts (Sora, Manrope) | None set in your browser | Strictly necessary (UI) |
| Lovable AI Gateway | AI Chat, Part Finder, Health Check | None — server-to-server only | Strictly necessary (when invoked) |
| DVLA & DVSA MOT | Vehicle & MOT lookups | None — server-to-server only | Strictly necessary (when invoked) |
| Parts catalogue partners | Reference part listings | None — server-to-server only | Strictly necessary |
If we add an analytics or marketing vendor in future, we will update this table, refresh the banner and ask you for consent before it loads anything on your device.
4. Smart Finder, AI Chat & catalogue search
Our Smart Finder, AI Part Finder and AI Chat features work without analytics or marketing consent. Here's exactly what happens when you use them:
- Photo identification — the image you upload is sent to our server, forwarded to our AI provider for identification, and discarded. It is not attached to your account unless you save it to a part request, and we do not sell or share it.
- Catalogue results — when we show matching listings from our parts catalogue partners, the search runs server-side from our backend. The external catalogue never sees your browser or IP address, and no third-party tracking cookies are set on your device.
- Basket & recent searches — saved in your browser's local storage as a strictly-necessary preference so your basket survives a refresh. You can clear it from the basket page or your browser settings.
- Rate limiting — to prevent abuse we record the request count per IP address for a short window. This is essential and is not used for advertising or profiling.
Because none of this relies on analytics or marketing cookies, the Smart Finder works the same whether you accept or reject the optional cookie categories above.
5. Changes
If we add or change cookies in a way that affects your privacy, we will update this page and ask for fresh consent where required.