Legal

Cookie Policy

What we store in your browser, and why. There is very little of it — and none of it tracks you.

Last updated 6 October 2026

1. Introduction

This Cookie Policy explains how eRideList (ABN 14 218 299 030), which operates eRideList (the "Platform"), uses cookies and similar technologies. We are committed to transparency and to protecting your privacy in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

The short version: we use one cookie to keep you signed in and one to remember your last search. We run no analytics, no advertising and no tracking cookies of any kind.

2. What cookies are

A cookie is a small text file a website asks your browser to store and hands back on your next request. It is how a site remembers that you are signed in from one page to the next. Some sites also use browser storage such as "local storage", which works similarly but stays in your browser rather than being sent with each request.

Information collected through cookies can amount to personal information where it can reasonably identify you — an IP address, in some circumstances, is an example. Where it does, the APPs apply to it and so does our Privacy Policy.

3. Why we use cookies

We use cookies for two purposes only:

  • To keep you signed in. A session cookie is what lets the site know you are you when you open your Inbox, My Ads or Account pages, and what stops anyone else acting as you.
  • To remember your last search. When you search or filter on Browse Ads, a small cookie keeps those choices so the Home and Browse search start where you left off, even after you sign out or close your browser. It is a convenience for you only and is never used to track you or shared with anyone.

We do not use cookies to profile you, to build a picture of your interests, to personalise what you are shown, to measure your behaviour, or to advertise to you here or anywhere else.

4. The cookies we actually set

CookieSet byPurposeDuration
sb-<project>-auth-token
(sometimes split across .0, .1 when large)
Supabase, our authentication providerHolds your signed-in session so the site knows who you are between pages. Strictly necessary.Cleared when you sign out or the session expires; refreshed while you keep using the site.
erl_searcheRideListRemembers your last Browse search (keywords, state, location, category, offer type, condition, price and sort order). A convenience, not required to use the site. If you are signed in, the same search is also saved on your account so it follows you to other devices.Up to 12 months, or until you press Clear all on Browse.

That is the complete list. There are no performance, analytics, targeting or advertising cookies on this site to disclose, because we do not set any. The search cookie only stores what you searched for, on your own device, and is sent back to us so the page can show your last search.

You cannot turn the session cookie off and still use an account. If your browser blocks it you can still browse ads, but signing in, posting an ad and messaging will not work. You can switch the search cookie off at any time, by pressing Clear all on Browse or by blocking or deleting it in your browser, and the site works the same without it.

5. Third-party cookies

We do not permit third parties to set cookies on this site for their own purposes. In particular, this site carries no Google Analytics, no advertising or retargeting pixels, and no social media tracking pixels.

The only third party involved is Supabase, which sets the session cookie above on our behalf as our authentication and database provider. It is not permitted to use it for anything except providing that service to us.

If you choose to sign in with Google or Facebook, you are sent to that provider's own sign-in page to authorise it. Cookies set on their domain during that step are theirs, governed by their policies, and are not set by us and not readable by us:

Using an email address and password instead avoids that step entirely.

Australia has no direct equivalent of the European cookie-consent rules. Our obligations come from the Privacy Act 1988 (Cth): where information collected through cookies is personal information, the APPs apply and we have to be transparent about what we collect and why. That is what this page is for.

You will not see a cookie consent banner on this site, and that is deliberate. A banner exists to obtain consent for tracking and similar cookies. We do not set any. Consent has never been required for a strictly necessary session cookie, and the only other cookie we set simply remembers a search you chose to make, on your own device, with nothing about it shared or used for any other purpose. A banner here would ask you to agree to something that does not happen.

If we ever add analytics or any similar tool, we will update this page and our Privacy Policy before switching it on, and we will provide a genuine way to opt out at that time.

7. Managing cookies

Every major browser lets you see, block and delete cookies from its settings — usually under Privacy or Site settings:

  • Chrome — Settings → Privacy and security → Third-party cookies / Site data
  • Safari — Settings → Privacy → Manage Website Data
  • Firefox — Settings → Privacy & Security → Cookies and Site Data
  • Edge — Settings → Cookies and site permissions

You can also browse in a private or incognito window, which discards cookies when you close it. Blocking cookies for this site will sign you out and keep you signed out.

8. Server logs

Separately from cookies, our servers keep standard access logs — IP address, time, page requested and browser type. These are used to keep the site secure and available and to investigate abuse. They are not cookies, you cannot switch them off, and they are covered by our Privacy Policy.

9. Cookies and personal information

Where a cookie or a server log collects personal information, we handle it under the APPs:

  • We collect only what the Platform needs to function — in the case of cookies, only your signed-in session and your last search.
  • We do not use it for an unrelated purpose without your consent or without the law requiring it.
  • We store it securely and take reasonable steps to protect it.

Our Privacy Policy sets out the full picture, including how long we keep information and how to ask for access to it.

10. Visitors from outside Australia

The Platform is intended for use in Australia and we do not offer services to, or monitor the behaviour of, people in the European Union or United Kingdom.

If you do visit from overseas, note that a strictly necessary session cookie is exempt from consent requirements under the European ePrivacy rules and the UK equivalent, in the same way it is here. The only other cookie we set remembers your last search and carries no tracking or personal profile, and there is nothing else on this site that sets cookies.

11. Updates to this policy

We may update this policy to reflect changes in technology, the law or our services. The date at the top shows when it was last revised. If a change materially affects what we store in your browser, we will tell you by email or with a notice on the site before it takes effect.

12. Contact us

For any question about this policy, email support@eridelist.com.au or use our contact form. We aim to respond within 7 days.

If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.