01 Authentication and security
cp_session keeps you signed in. If you choose to stay signed in, its maximum duration is 30 days. Otherwise, it is a session cookie and server-side authorization expires after at most one day. Browser closing and session restoration behaviour may vary.
cp_registration links email verification to the browser that requested the code. It expires after 10 minutes, then 15 minutes after successful code verification so you can choose a password. It is removed when registration completes.
External sign-in may use a PHP session cookie (usually PHPSESSID) or a control cookie such as apple_state to validate continuity and prevent forgery. Duration depends on the flow and service configuration. These are not advertising tools.
02 Preferences stored on your device
cp_lang remembers the public interface language; cp_theme remembers appearance; cp_admin_language remembers the administration language when that interface is used.
cp_email may remember your email when you choose to stay signed in. This feature does not store passwords or verification codes in local storage.
These preferences have no automatic expiry in browser local storage. They remain until changed, removed by the site or cleared in browser settings. They are specific to the device and browser profile used.
03 Third-party services
Google reCAPTCHA may set the _GRECAPTCHA cookie and process technical signals to detect abuse. Other Google cookies may be involved depending on your browser, Google session and services used. Google’s policies describe its processing.
Social sign-in providers may use their own cookies when you open their sign-in flow. External resources such as Google Fonts also send requests to the provider, which receives information including the IP address; an external request does not necessarily set a cookie.
The categories described here support functionality, security and preferences. Any addition of behavioural advertising or optional audience measurement must be accompanied by the required information and consent before activation.
04 Managing your choices
You can change language or appearance in the interface, uncheck the stay-signed-in option before signing in, and sign out to end your current session.
The button below clears only CargoPool preferences saved locally in this browser. It does not delete your account, orders, HttpOnly authentication cookies or information retained by third parties.
Browser settings let you inspect, block or delete cookies and site data. Blocking necessary functions may prevent registration, login or certain security protections. To manage an external provider’s information, also consult its settings and policy.
05 Questions and updates
For questions about these technologies, contact the person responsible for the protection of personal information using the details below. This policy is updated when the practices described change.
A cookie’s lifetime in the browser differs from the retention period for information in systems. The Privacy Policy explains retention principles and your rights.
06 Optional audience measurement — Google Analytics
With your permission, CargoPool uses Google Analytics 4 to measure page visits, traffic sources, approximate location and selected successful actions (registration, submission and Stripe payment confirmation in the browser). Declining does not limit website features. Admin pages are excluded.
Use Privacy choices to accept, decline or withdraw consent. cp_analytics_consent remembers your choice for six months. Google Analytics does not load before acceptance. Once accepted, _ga and _ga_* cookies have a configured six-month lifetime. cp_analytics_signup expires after five minutes and distinguishes new registrations from logins.
cp_analytics_payments stores up to 200 payment fingerprints locally to limit duplicates; it is cleared on withdrawal or when browser storage is cleared. Selected events exclude names, emails, contact details, product descriptions and authentication tokens. Page URL queries and fragments are excluded; only permitted campaign labels are transmitted.
Google receives technical data, including the IP address when connecting to its services, and processes information under its policies. Processing may occur outside Quebec and Canada. Withdrawal blocks future measurement and removes Analytics cookies accessible to this site; it does not automatically delete data already received by Google.
07 Aggregate website statistics
CargoPool counts page views in daily totals by page category and source category (Google, social networks, internal navigation, direct or unknown). This counter uses no cookie or visitor identifier; the application counters contain no IP address, full URL, city or individual journey. Counters cover up to 90 days, with older rows purged at the next collection.
Registration totals are calculated separately from existing customer accounts, without linking them to page-view sources. Servers and network equipment necessarily process technical data to deliver pages; their operational and security logs are separate from these counters. Optional Google Analytics remains subject to its separate consent choice.
08 Optional chat cookie
The cp_web_chat cookie is created when you open chat. It contains a random identifier, expires after 24 hours and retrieves a conversation only with its bound session. It is not used for advertising or audience measurement.
Useful links
Contact us
CargoPool Inc.
Person responsible for the protection of personal information
Levis, QC
G6V 3R6
allo@cargopool.ca
+1 (438) 500-4797
Please include your file reference when relevant. Never send your password or verification code.