Home / Cookie policy
Legal
Cookie policy
What this site stores on your device, which is almost nothing.
Last updated: 6 September 2026
The short version
This site sets one cookie, and only once you have signed in to My Rapid. It keeps you signed in. There is nothing to accept or reject, which is why you have not been shown a banner.
We do not use analytics, advertising or tracking cookies. We do not record which advert or search brought you to the site, and we do not share anything about your visit with an advertising network.
The cookie we set
| Name | Purpose | Expires |
|---|---|---|
authjs.session-token | Keeps you signed in to My Rapid, and tells the server which account is making a request. Set only when you sign in. | 30 days |
On the live site it is named __Secure-authjs.session-token and is only ever sent over HTTPS. In every environment it is:
- HttpOnly — JavaScript on the page cannot read it, so a script injected into the page cannot steal your session.
- SameSite=Lax — it is not sent when another website makes a request to us, which is what stops a third-party page acting as you.
- Signed — its contents are a signed token. It holds your account identifier and role, and nothing else. It does not hold your name, your email or anything you have uploaded.
This cookie is strictly necessary: the signed-in area cannot work without it. Under the Privacy and Electronic Communications Regulations, a strictly necessary cookie does not require your consent. If you are not signed in, no cookie is set at all.
A cookie we used to set, and now delete
An earlier version of this site set a first-party cookie called rapid_attr to record which channel brought you here — including a Google Click Identifier, which is an advertising identifier.
That has been switched off. Nothing writes it any more. If you still have one from a previous visit, the site now expires it the next time you arrive, so it is removed rather than simply left to run down. Deleting a cookie does not require consent.
The database still has the columns that cookie used to fill. They are left empty, and the fields that carried the advertising identifier have been removed from the code entirely so that restoring the feature cannot quietly restore them.
What we do not use
- No analytics. There is no Google Analytics tag, no Meta pixel and no equivalent on this site. If analytics is added, it will be behind a consent choice and this page will say so first.
- No advertising or retargeting cookies. Nothing follows you to another site.
- No embedded third-party content that sets cookies. Vehicle photographs are served from our own storage, not from a third-party host.
Controlling cookies
You can delete or block cookies in your browser settings. If you block the session cookie you will not be able to sign in to My Rapid — the rest of the site, including browsing vehicles and making an enquiry, works normally without it.
Questions
If you have a question about this page, email info@rapidvehiclesolutions.com. For what happens to the information you give us, see our privacy policy.