Cookie Policy
Last updated: 24 September 2026
This policy lists every cookie and similar storage item Flipilo uses, and the third party content our pages load.
1. Cookies
| Name | Purpose | Type | Duration |
|---|---|---|---|
| yakalar_oturum | Keeps you signed in. Holds a random session token; cannot be read by page scripts and is only sent over HTTPS to flipilo.com/uk. | Strictly necessary, first party | 120 days, or until you sign out |
Cloudflare, which protects our website, may also set its own security cookies (for example to tell people from bots). These are strictly necessary for security. See Cloudflare's cookie list.
2. Local storage on your device
The signed in app saves a few preferences in your browser's local storage. They stay on your device and are not sent to us automatically.
| Key | Purpose | Duration |
|---|---|---|
| yakalar_ad | Remembers your username so you do not have to type it again | Until you clear site data |
| sp_pc | Remembers the postcode you last searched from | Until you clear site data |
| sp_r | Remembers the search radius you last chose | Until you clear site data |
| yakalar_posta, yakalar_mesafe | Older names for the postcode and radius; read if present, no longer written | Until you clear site data |
If you turn on notifications, your browser also stores a service worker and a push subscription for flipilo.com. This is needed for notifications to work and is removed when you turn notifications off or clear site data.
3. Third party content
We use Cloudflare Web Analytics, a cookieless analytics script loaded from static.cloudflareinsights.com. It does not set any cookies or use local storage on your device, and gives us only aggregated statistics about site usage. See our Privacy Policy.
Our typeface is served from our own server. Car photos in the signed in app are loaded directly from AutoTrader's image servers (m.atcdn.co.uk), so when your browser fetches a photo AutoTrader receives your IP address and browser details, as with any web request. We do not use any analytics, advertising or social media cookies.
4. Why there is no cookie banner
UK law (the Privacy and Electronic Communications Regulations) requires consent for storage that is not strictly necessary. Everything listed in sections 1 and 2 is either strictly necessary to provide the service you asked for (signing in, security, notifications) or a preference you set yourself, so we do not ask for consent. The analytics script described in section 3 does not store or read anything on your device. If we ever add analytics or other non essential cookies, we will ask for your consent first and update this page.
5. Managing storage
You can delete cookies and site data in your browser settings. If you delete the session cookie you will be signed out.
6. Contact
Questions: [email protected]. See also our Privacy Policy.