In effect since September 3, 2026. Marvel Mirror LLC, operator of YardBooth · 2501 Chatham Rd #5694, Springfield, IL 62704 · hello@yardbooth.com
The short version
You do not need an account or buyer-session cookie to browse public stores. Sending a first offer, or opening My Offers without a current session, requires separate email and phone verification and creates a buyer session for that exact pair. Sellers and administrators also need security cookies after signing in. Google Analytics is on by default in a new browser unless Global Privacy Control is enabled or analytics has already been turned off.
YardBooth does not use advertising cookies, remarketing, Google Signals, cross-site tracking, or session replay. Private offer pages, My Offers, and buyer verification screens do not load analytics.
Cookies needed for sign-in
| Name | What it does | How long |
|---|---|---|
__Host-yardbooth-seller | Keeps a seller signed in to the correct seller manager. Page scripts cannot read it. | Normally up to one hour, then replaced when the session refreshes. |
__Host-yardbooth-seller-refresh | Lets an active seller continue without requesting a new email code every hour. Page scripts cannot read it. | Up to seven days without a successful refresh; sooner after sign-out, revocation, cleared browser data, or closing a private window. |
__Host-yardbooth-buyer | Keeps a buyer’s exact verified email and mobile-number pair signed in to My Offers. Page scripts cannot read it, and the server stores only a one-way fingerprint of its random value. | Up to seven days; sooner after sign-out, revocation, cleared browser data, or closing a private window. |
__Host-yardbooth-offer-draft | Reconnects the same short-lived offer draft after email and phone verification. Page scripts cannot read it. | Up to 30 minutes or until the offer is submitted. |
| Cloudflare Access administrator cookie | Shows that an authorized administrator completed the separate admin sign-in. | Until the configured admin session ends, is revoked, or browser data is cleared. |
These cookies are used only where verification or sign-in is required. Turning off analytics does not remove them because buyer, seller, and administrator access needs them for security.
Google Analytics cookies
| Name | What it does | How long |
|---|---|---|
_ga | Uses a random browser identifier so two visits are not automatically counted as two people. | Up to 90 days while analytics is on. |
_ga_* | Keeps session information for YardBooth’s Google Analytics property. | Up to 90 days while analytics is on. |
These cookies are set for yardbooth.com, but Google still receives and processes the analytics information. YardBooth does not extend their expiration on later page views.
Saved in your browser
| Name | What it remembers | How long |
|---|---|---|
yardbooth-analytics-consent | Whether analytics is on or off in that browser. | Until browser data is cleared or the choice changes. |
yardbooth-analytics-notice-seen | That the first-visit notice has already been answered. | Until browser data is cleared. |
yardbooth-analytics-opt-out | An older compatible setting that says analytics is off. | Until browser data is cleared. |
yardbooth-bundle | The public listing details of the items a buyer has added to a bundle. | Until the buyer empties the bundle, sends the offer, or browser data is cleared. |
These entries all use local storage. They are browser storage, not cookies. Offer-email URLs no longer store a separate offer secret in session storage; opening an offer requires the secure buyer cookie for the exact verified email and mobile-number pair.
What analytics measures
When analytics is on, Google Analytics may measure one page view per public navigation, scrolling, downloads, supported video activity, and broad YardBooth actions such as starting a store, viewing or choosing a listing, adding or removing an item from a bundle, beginning an offer, opening or completing a share, copying a sale or listing link, opening the seller manager, entering first-time buyer verification, directly sending an already-verified buyer’s offer, or reporting a listing. Automatic outgoing-link and form-interaction measurement is off.
For public listing views and actions, Google may receive the public item ID, listing title, category, asking price, list or button location, and a listing-specific analytics page path and title. If a title looks like it contains contact, payment, website, or street-address information, YardBooth replaces the title before sending it. Store slugs, query strings, and same-site referring addresses still use fixed route classes; an outside referring page is reduced to its site origin. Google may also receive time, a random browser identifier, session information, approximate location, and ordinary browser, device, and network information.
YardBooth does not intentionally send listing descriptions, store names, form-field contents, names, email addresses, phone numbers, buyer messages, store IDs, report explanations, exact pickup details, offer amounts, payment details, keystrokes, pointer paths, or a session recording.
Why some Google requests use a YardBooth address
Cloudflare’s Google Tag Gateway serves the Google tag through yardbooth.com/metrics/ and forwards allowed measurements to Google. This reduces direct browser connections to Google, but Google remains the analytics provider and processes the information under its own terms.
How to turn analytics off
- Choose Turn off analytics in the first-visit notice,
- open the permanent Privacy button on any page,
- enable Global Privacy Control in a browser that supports it, or
- use the analytics-free link.
Turning analytics off stops future YardBooth measurements from that browser and removes Google Analytics cookies that page scripts can reach. It cannot take back information already sent. The choice applies only to that browser; another device, browser, or new private window has its own choice.
Except on a private offer page, My Offers, or a buyer verification screen, measurement can begin on the first page view unless Global Privacy Control is already on or the analytics-free link is used. Blocking analytics cookies does not remove any shopping or seller feature.
Security checks
Cloudflare Turnstile helps protect store, offer, report, and sign-in forms from automated abuse. It processes ordinary browser and device signals and returns a short-lived result. That result is not used for advertising and does not prove a person’s identity.
Changes and questions
The effective date changes when this page changes. For more about information handling, read the Privacy Policy.