This Policy explains how ExactCarValue, operated by Novalayer LLC (support@exactcarvalue.com), uses cookies and similar technologies.
1. What they are
Cookies and similar technologies (including local and session storage) let us store or read information on your device to operate the website, keep your session, secure payments, remember preferences, measure usage and, with consent, measure advertising.
2. Necessary technologies
ExactCarValue uses strictly necessary technologies to authenticate you and keep your session secure; associate a VIN search and report with the purchase flow; remember language, country or market and basic preferences; enable payments and fraud prevention through Stripe; and balance load, protect the website and maintain its operation. They are installed because they are necessary to provide or protect the service you request.
3. Analytics and marketing
For visits located in the United States to our US service, we use measurement cookies by default without a consent banner. This default is not recorded as your acceptance. Google restricted data processing is enabled. Advertising measurement data is permitted by default, while personalised advertising remains disabled. Existing choices are respected. Use “Your privacy choices — Do Not Sell or Share” in the footer to disable optional cookies at any time; GPC blocks Google Ads. An opt-out remains effective while its record is available, including after the original six-month period. Elsewhere, or if location is unknown, optional cookies require acceptance. Google Consent Mode can still send limited cookieless signals when optional cookies are disabled; this is still data transmission. When advertising measurement is allowed, we use Google Ads enhanced conversions for confirmed VIN-report purchases. We normalize the purchase email and convert it to a SHA-256 hash on our server before sharing that hash with Google to match purchases to ads. We do not send the plain-text email, name, address or phone number through this feature. Hashing does not make the data anonymous. Rejecting advertising measurement or enabling GPC prevents this hash from being sent to Google. We do not use this feature for personalized advertising.
4. Duration and control
The duration of each technology is listed in the table on this page. Your consent choice is valid for six months; the record is replaced when changed or removed when you return after it expires. You can reopen settings from the footer and delete or block cookies and storage in your browser. Blocking necessary technologies may prevent account access, VIN searches or payment.
6. Cookies and technologies used
This table supplements the policy and identifies the technologies used by each website feature. Not all are installed when you visit a page: some are used only when you sign in, request a valuation, pay or contact support. An asterisk (*) indicates a variable part of the name.
For visits located in the United States to our US service, we use measurement cookies by default without a consent banner. This default is not recorded as your acceptance. Google restricted data processing is enabled. Advertising measurement data is permitted by default, while personalised advertising remains disabled. Existing choices are respected. Use “Your privacy choices — Do Not Sell or Share” in the footer to disable optional cookies at any time; GPC blocks Google Ads. An opt-out remains effective while its record is available, including after the original six-month period. Elsewhere, or if location is unknown, optional cookies require acceptance. Google Consent Mode can still send limited cookieless signals when optional cookies are disabled; this is still data transmission. When advertising measurement is allowed, we use Google Ads enhanced conversions for confirmed VIN-report purchases. We normalize the purchase email and convert it to a SHA-256 hash on our server before sharing that hash with Google to match purchases to ads. We do not send the plain-text email, name, address or phone number through this feature. Hashing does not make the data anonymous. Rejecting advertising measurement or enabling GPC prevents this hash from being sent to Google. We do not use this feature for personalized advertising.
Swipe to see all columns.
Cookie and browser storage inventory| Cookie or technology | Category and purpose | Duration |
|---|
| exactcarvalue:cookie-consent*Responsible party and locationNovalayer LLC · ExactCarValue local storage (localStorage). | Category and purposeNecessary. Remembers acceptance, rejection or selected categories so your choice is respected.When it is usedWhen you save your choice. Optional cookie consent is not required. | DurationYour choice is valid for 6 months. The record is replaced when you change it or removed when you return after expiry. |
|---|
| ecv-funnel-reviewResponsible party and locationNovalayer LLC · ExactCarValue session storage (sessionStorage). | Category and purposeNecessary. Keeps valuation details and progress in the tab so you can continue.When it is usedWhen completing valuation steps. No optional consent required. | DurationFor the tab’s session; removed when the tab closes. |
|---|
| exactcarvalue:market-handoff:v1Responsible party and locationNovalayer LLC · ExactCarValue session storage (sessionStorage). | Category and purposeNecessary. Carries vehicle details across when you change market in the form.When it is usedWhen you request a market change during the valuation. No optional consent required. | DurationUntil the destination form retrieves the data or the tab closes. |
|---|
| ecv_deferred_*Responsible party and locationNovalayer LLC · first-party cookie on the ExactCarValue domain. | Category and purposeNecessary. Protects access to the order and lets you continue payment.When it is usedWhen preparing the order. No optional consent required. | Duration24 hours. |
|---|
| ecv_order_id / ecv_order_token / ecv_order_token_*Responsible party and locationNovalayer LLC · first-party cookies on the ExactCarValue domain. | Category and purposeNecessary. Identify the order and authorise access in the purchase flow that uses these cookies.When it is usedWhen creating an order through that flow. No optional consent required. | Duration8 days. |
|---|
| sb-*-auth-token*Responsible party and locationNovalayer LLC, with Supabase as authentication provider · cookies on the ExactCarValue domain. | Category and purposeNecessary. Maintain the account session and verify secure access, including session fragments and sign-in verification cookies.When it is usedWhen signing in or maintaining an account session. No optional consent required. | DurationTechnical expiry of up to 400 days; may be renewed with the session or removed on sign-out. Access validity depends on the session. |
|---|
| ecv_support_sessionResponsible party and locationNovalayer LLC · first-party cookie on the ExactCarValue domain. | Category and purposeNecessary. Identifies the support conversation to maintain continuity.When it is usedWhen using support chat. No optional consent required. | Duration30 days. |
|---|
| __stripe_mid / __stripe_sidResponsible party and locationStripe · payment-provider cookies in the ExactCarValue or Stripe context, depending on the integration. | Category and purposeNecessary for payment security. Help identify the device and prevent fraudulent transactions.When it is usedWhen loading Stripe’s payment service. No analytics or advertising consent required. | Duration__stripe_mid: 1 year. __stripe_sid: 30 minutes. |
|---|
| ecv_dashboard_demo / ecv_dashboard_demo_valuationsResponsible party and locationNovalayer LLC · first-party ExactCarValue cookies. | Category and purposeNecessary for the demo. Maintain access and sample valuations.When it is usedOnly when using the enabled demo. No optional consent required. | Duration8 hours. |
|---|
| _gcl_*Responsible party and locationGoogle Ads · cookies on the ExactCarValue domain, used by Google. | Category and purposeAdvertising and measurement. Associate ad interactions with conversions to measure campaigns.When it is usedBy default for US visits to the US service; otherwise only after category acceptance. Disabled by your opt-out; GPC also blocks Google Ads. | DurationUp to 90 days depending on the cookie. |
|---|
How to change or withdraw your consent
You can accept, reject or choose optional categories in the settings panel and reopen it from the footer. Withdrawing consent does not affect the lawfulness of previous processing. You can also delete cookies and website storage in your browser’s privacy settings; blocking necessary technologies may prevent account access, valuation or payment.
Your privacy choices — Do Not Sell or ShareProviders and international transfers
Novalayer LLC operates from the United States and providers may process data there or in other countries. See our Privacy Policy for international transfers, retention and rights. Browser storage duration does not necessarily equal the provider’s data retention period. Privacy Policy.