Cookie Policy

Effective: June 10, 2025

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to remember your preferences, and to provide information to site owners. Similar technologies include local storage and session storage, which keep data in your browser.

2. How we use cookies

Vroom uses a minimal number of cookies. We do not use advertising, tracking, or third-party profiling cookies.

NameTypePurposeDurationLegal basis
accessTokenHttpOnly cookieKeeps you logged in. Contains a signed JWT that identifies your session. Sent automatically with each request to our server.7 days (or until logout)Strictly necessary — GDPR Art. 6(1)(b) (performance of a contract)

The accessToken cookie is set as HttpOnly and Secure, meaning JavaScript on the page cannot read it and it is only sent over HTTPS. It is also set with SameSite=Lax, which provides protection against cross-site request forgery (CSRF) attacks.

3. Analytics

We use Vercel Analytics to understand how visitors use the site. Vercel Analytics is cookieless — it does not set any cookies, does not track individuals across sites, and does not fingerprint your browser. Page view data is aggregated and anonymised before being stored. No personal data is associated with analytics events.

Because no cookies or persistent identifiers are used for analytics, no consent is required under ePrivacy / PECR for this purpose.

4. Third-party cookies

We do not embed third-party widgets, social sharing buttons, advertising networks, or other services that set their own cookies on our pages. The only third-party technology we use is Vercel Analytics, which is cookieless (see §3 above).

5. Managing and deleting cookies

Because the only cookie we set is strictly necessary for login, there is no tracking to opt out of. You can still manage or delete it in a few ways:

  • Log out — the accessToken cookie is cleared from your browser automatically when you log out.
  • Browser settings — all modern browsers let you view, block, and delete cookies under Settings → Privacy / Cookies. Note that deleting the cookie will log you out of Vroom.
  • Delete your account — you can permanently delete your account and all associated data from Settings → Data & Privacy. This will also clear the cookie.

6. Changes to this policy

If we introduce new cookies or change how we use existing ones, we will update this page and, for material changes, notify you by email or in-app notice before the change takes effect.

7. Contact

Questions about our use of cookies? Email us at privacy@thevroomcar.com.

← HomePrivacy PolicyTerms of Service