Cookie Policy

1. Introduction

Auction Pro ("we," "our," or "us") uses cookies and similar technologies to enhance your experience on our enterprise auction management platform. This Cookie Policy explains what cookies are, how we use them, and your choices regarding their use.

Our platform serves professional auction houses, government agencies, and enterprise clients requiring sophisticated auction management solutions. We use cookies responsibly to ensure optimal platform performance and security.

2. What Are Cookies

Cookies are small text files that are stored on your device when you visit our website. They help us provide you with a better user experience by:

• Remembering your preferences and settings
• Keeping you securely logged into your account
• Enabling real-time auction functionality
• Protecting against fraud and security threats
• Improving platform performance and reliability
• Providing analytics to enhance our services

3. Types of Cookies We Use

3.1 Essential Cookies

These cookies are necessary for the platform to function properly and cannot be disabled:

• Authentication Cookies: Maintain your login session and user identity
• Security Cookies: Protect against cross-site request forgery (CSRF) attacks
• Session Management: Track your auction participation and bidding states
• Load Balancing: Ensure optimal server performance during high-traffic periods
• GDPR Compliance: Remember your cookie preferences and consent choices

3.2 Functional Cookies

These cookies enhance your user experience and remember your preferences:

• Language Preferences: Remember your selected language (English/French)
• Theme Settings: Save your light/dark mode preference
• Dashboard Layout: Maintain your preferred dashboard configuration
• Notification Settings: Remember your notification preferences
• Timezone Settings: Display auction times in your local timezone

3.3 Performance Cookies

These cookies help us understand how you use the platform to improve performance:

• Analytics: Track page views, session duration, and user interactions
• Error Monitoring: Identify and resolve technical issues quickly
• Performance Metrics: Monitor page load times and platform responsiveness
• Usage Patterns: Understand feature adoption and user workflows
• A/B Testing: Compare different features to improve user experience

3.4 Security Cookies

These cookies are essential for platform security and fraud prevention:

• Fraud Detection: Monitor for suspicious bidding patterns
• IP Tracking: Detect unusual login locations or activities
• Rate Limiting: Prevent automated attacks and abuse
• Device Fingerprinting: Identify trusted devices for enhanced security
• Screenshot Protection: Prevent unauthorized data capture

4. Third-Party Cookies

We work with trusted third-party service providers who may set their own cookies:

4.1 Payment Processing

• Stripe: Secure payment processing and fraud prevention
• Purpose: Process transactions, detect fraud, comply with PCI DSS
• Data: Payment tokens, transaction metadata, security indicators
• Retention: As required by financial regulations

4.2 Authentication Services

• NextAuth.js Providers: Secure user authentication
• Purpose: Enable single sign-on, manage user sessions
• Data: Authentication tokens, user identifiers
• Retention: Duration of active session

4.3 Cloud Infrastructure

• Supabase: Database and file storage services
• Purpose: Store auction data, user files, ensure reliability
• Data: Session tokens, file access permissions
• Retention: As long as account remains active

4.4 Analytics and Monitoring

• Performance Monitoring: Track application performance
• Purpose: Identify issues, optimize performance, improve UX
• Data: Page load times, error rates, user interactions
• Retention: 90 days for performance data

5. Cookie Duration

5.1 Session Cookies

Temporary cookies that are deleted when you close your browser:

• User authentication and login sessions
• Real-time auction participation states
• Shopping cart and bidding selections
• Security tokens and CSRF protection

5.2 Persistent Cookies

Long-term cookies that remain on your device for specified periods:

• Preference Cookies: 1 year (language, theme, layout settings)
• Security Cookies: 30 days (trusted device recognition)
• Analytics Cookies: 2 years (usage patterns and improvements)
• Performance Cookies: 6 months (optimization data)

6. Your Cookie Choices

6.1 Browser Settings

You can control cookies through your browser settings:

• Block all cookies (may impact platform functionality)
• Block third-party cookies only
• Delete existing cookies from your device
• Set preferences for specific websites
• Receive notifications when cookies are set

6.2 Platform Cookie Settings

Within the Auction Pro platform, you can:

• Access cookie preferences through your account settings
• Choose which optional cookies to allow
• View details about each cookie category
• Update your preferences at any time
• Download a record of your cookie choices

6.3 Essential Cookie Notice

Please note that disabling essential cookies will prevent the platform from functioning properly. This may affect:

• Your ability to log in and maintain sessions
• Real-time auction participation
• Payment processing and security features
• Data protection and privacy controls

7. Mobile Applications

Our platform is optimized for desktop and tablet use in professional environments. When accessed through mobile browsers, the same cookie policies apply. Future mobile applications may use similar technologies:

• Local storage for offline functionality
• Push notification tokens
• App analytics and crash reporting
• Device-specific security features

8. International Compliance

We comply with international cookie regulations, including:

8.1 GDPR (European Union)

• Explicit consent for non-essential cookies
• Clear information about cookie purposes
• Right to withdraw consent at any time
• Data portability for cookie preferences

8.2 CCPA (California)

• Transparency about data collection practices
• Opt-out mechanisms for data selling (we don't sell data)
• Right to delete personal information in cookies
• Non-discrimination for privacy choices

8.3 Other Jurisdictions

• PIPEDA compliance for Canadian users
• Privacy Act compliance for Australian users
• Local data protection laws where applicable

9. Security and Data Protection

We implement enterprise-grade security measures to protect cookie data:

• Encryption: All cookies are encrypted in transit and at rest
• Secure Flags: Cookies are marked with secure and httpOnly flags
• SameSite Policies: Protection against cross-site request forgery
• Regular Audits: Periodic review of cookie usage and security
• Access Controls: Limited access to cookie data on need-to-know basis
• Monitoring: Real-time detection of cookie-related security threats

10. Updates to This Policy

We may update this Cookie Policy from time to time to reflect:

• Changes in our cookie usage practices
• New features or services that require cookies
• Updates to privacy regulations
• Improvements to security measures
• Feedback from users and privacy advocates

We will notify you of material changes through email or platform notifications at least 30 days before they take effect.

11. Contact Information

If you have questions about our use of cookies or this Cookie Policy, please contact us:

Cookie Management Requests

For specific cookie-related requests, please include:

• Your account email address
• Description of your cookie concerns or requests
• Browser and device information if relevant
• Preferred method of response