Cookie Policy
This policy explains the cookies and similar technologies we use on
dreamauto.co.in and in the
DreamAuto mobile app (Android package com.dreamauto.app): what we set,
why, how long it lasts and how to remove it.
1. What cookies are
A cookie is a small file a website asks your browser to store. It normally contains an identifier, not your personal details. Similar technologies — browser local storage, and app preferences on your phone — do the same job inside an installed app. They are what let a site or app remember that you are signed in, or keep your preferences between visits.
2. Our position: only what the service needs
DreamAuto sets no advertising cookies, no analytics cookies and no tracking pixels — not on the website and not in the app. The only cookies we set (directly, or through our security provider Cloudflare) are needed to sign you in and to keep bidding secure. Because they are required to deliver the service you asked for, the site does not put the pages you can browse behind a consent banner; you can block or delete them at any time as described in section 6.
If we ever add a cookie that is not strictly necessary — for example product analytics — we will ask for your consent first and update this page before doing so.
3. Cookies we set on the website
| Cookie | Set by | What it does | Duration | Type |
|---|---|---|---|---|
wordpress_test_cookie |
WordPress (our site) | Checks that your browser accepts cookies so that signing in can work. No personal data. | Session (deleted when you close the browser) | Strictly necessary |
wordpress_[hash] |
WordPress (our site) | Stores your authentication details while you are signed in to the buyer account area. | Session / up to 2 days | Strictly necessary |
wordpress_sec_[hash] |
WordPress (our site) | The same authentication cookie for secure (HTTPS) account and administration pages. | Session | Strictly necessary |
wordpress_logged_in_[hash] |
WordPress (our site) | Tells the site that you are signed in and who you are, so you stay signed in while you browse auctions. | 2 days, or 14 days if you tick "Remember me" | Strictly necessary |
wp-settings-[uid] · wp-settings-time-[uid] |
WordPress (our site) | Remember your account-area preferences, such as which panels you collapsed and your screen options. Set only when you are signed in. | 1 year | Functional (set only for signed-in users) |
comment_author_[hash] · comment_author_email_[hash] · comment_author_url_[hash] |
WordPress (our site) | Only if the comment form is available and you use it: pre-fills your name, email and website next time. Not set by simply browsing. | About 347 days | Functional (comment form only) |
__cf_bm |
Cloudflare (our security provider) | Bot management: distinguishes real visitors from automated traffic so bidding and sign-in cannot be scripted. Contains no data you typed. | 30 minutes | Strictly necessary (security) |
cf_clearance |
Cloudflare (our security provider) | Records that your browser has passed a Cloudflare security challenge (including the Turnstile check on sign-in and bidding), so you are not challenged on every request. | Set by Cloudflare for up to 1 year (Cloudflare-controlled) | Strictly necessary (security) |
Cookie names contain a hash or your user id instead of your name, so the values cannot be read by scripts on other sites. Signing out deletes the session cookies immediately; deleting the functional cookies only means you will be asked to set your preferences again.
4. Storage the app uses on your device
The Android app does not use cookies for tracking. It keeps a short list of items in its own private app storage on your phone so that it feels like an app rather than a web page. None of these items are sent anywhere except to DreamAuto’s own API, and none of them are used for advertising.
| Item | Where it lives | What it is for | How to remove it |
|---|---|---|---|
dreamauto_token |
App storage on your device (and, if biometric sign-in is on, your device\u2019s secure keystore) | Keeps you signed in so you do not have to type your password on every launch. Removed when you sign out. | Sign out, or clear the app\u2019s storage, or uninstall the app |
dreamauto_bio_user |
App storage on your device | Remembers which username turned on fingerprint/face sign-in, so the app can offer it again on this device. | Switch biometric sign-in off, sign out, clear storage or uninstall |
dreamauto_watchlist_cache |
App storage on your device | A cached copy of your watchlist ids so the hearts look right instantly when the list loads, before the server answers. | Clear the app\u2019s storage or uninstall |
dreamauto_profile_local |
App storage on your device | Drafts the mobile, state and city you typed in your profile form locally, so a half-filled form is not lost. | Clear the app\u2019s storage or uninstall |
dreamauto_api_base |
App storage on your device | Only present in debug/development builds, where it points the app at a different API host. Never set in the Play Store build. | Clear the app\u2019s storage or uninstall |
Downloaded images and cached app files |
App cache on your device | Auction photos and PDFs are cached so galleries open quickly and repeated visits use less data. | Android Settings → Apps → DreamAuto → Storage → Clear storage |
The app requests no access to your location, contacts, photos, camera, microphone or files, so there is no cookie or setting through which those could be shared. Fingerprint and face data never leave your device: the biometric check is performed by Android, and we only receive the result. See our Privacy Policy for the full picture.
5. Third-party requests and tracking
- Cloudflare delivers our pages and images and protects the sign-in and bidding endpoints (including the Cloudflare Turnstile check). It sets the two security cookies in section 3.
- Google Fonts supplies the typefaces used by the website header and by the app when it starts. That means your IP address and browser/app user-agent are sent to Google to fetch the font files. Google Fonts does not set advertising cookies for this request. If you prefer to avoid the request entirely, you can use your browser’s or device’s tracking protections; we are also happy to self-host the fonts — ask us.
- There are no advertising networks, no social plug-ins, no analytics services and no embedded video players on DreamAuto, and the app bundles its own JavaScript and images rather than loading them from third-party CDNs.
6. Managing and deleting cookies
Every browser lets you see, block and delete cookies — usually under Settings → Privacy and security (Chrome, Edge), Settings → Privacy & Security (Firefox) or Settings → Safari → Privacy (iPhone/iPad). Choosing “block all cookies” or a private/incognito window will remove the cookies listed in section 3 while you browse.
Please note that blocking the strictly-necessary cookies prevents you from signing in, so you cannot bid; blocking Cloudflare’s security cookies may block access to the site entirely. Clearing cookies does not delete your account, your bids or your bid history — those live on our servers, not in your browser.
7. Managing the app’s storage
To clear everything the app has stored on your phone:
- sign out inside the app (removes your session token), or
- open Android Settings → Apps → DreamAuto → Storage → Clear storage (removes the token, cached watchlist and cached images), or
- uninstall the app (removes all of it).
Clearing app storage signs you out and empties the caches, but it does not delete your DreamAuto account or your bidding records. For that, follow section 11 of our Privacy Policy.
8. Changes and contact
We will update this page if the cookies or app storage we use change, and the “Last updated” date above will always show the current version.
Questions about cookies or your data: insurance@dreamauto.co.in, or insurance@dreamauto.co.in, phone +91 81307 33177 (Mon–Sat, 9:00–18:00 IST).