Storage and cookies
One cookie, and only if you sign in. No analytics, no ad pixels, no third party scripts. Everything else is a handful of items your own browser keeps for you.
Effective: 2026-08-24 · Last updated: 2026-09-21
The whole list
This page names every thing this site puts on your device. If something is not on this list, we are not putting it there.
Cookies
One, and only if you sign in.
pb_shopper. A sign in token. It is what keeps you signed in. It is marked HttpOnly, so a script on the page cannot read it, and SameSite=Lax, so another site cannot make your browser send it. It lasts 90 days.
That is the complete list. Browsing this site sets no cookie. Placing an order sets no cookie. There is no advertising cookie, no analytics cookie, and no cookie belonging to anybody but us.
There is no cookie banner on this site because there is nothing to consent to.
Advertising
We do not run advertising. There is no advertising anywhere on this site: no paid placement, no sponsored listing, no ad network, no ad script, no ad pixel and no advertising cookie. Nobody can buy a position in any comparison, and nobody can buy space beside one.
If that ever changes, this section is what changes with it, and it will say plainly what runs and on which pages. It is written from a single record of whether advertising is switched on, so this page cannot say one thing while the site does another.
Local storage
Local storage is a small store your browser keeps for a site. It never leaves your device by itself. We use five keys.
pb_loc. Where you told us you are. It holds a five digit ZIP code and nothing finer, plus a label, where it came from, and when you set it. No coordinate is ever stored, even if you used the "near me" control and your browser handed us one: it is read once, resolved to the nearest metro anchor, and dropped.pb_cart. What is in your cart: for each item, the yard, the product, and how much. No price is kept in it, so it can never show you an old one; every figure on the cart page is asked of the yard's live listing when the page draws it. If you are signed in, the same list is also kept on your account so it follows you to another device, and this copy is marked with whose it is. Signing out takes the account's cart off this device; it stays on the account.pb_mkt_install_dismissed. A date, so that if you dismiss the "add to home screen" prompt it stays dismissed.pb_mkt_push_dismissed. The same, for the notifications prompt.pb_voice_mock. A development switch. It is not set unless you set it.
To clear the location, use the clear control in the location bar on any page. It is there on purpose: a remembered location is a default, not a trap.
Session storage
Session storage is emptied when you close the tab.
pb_reorder. A basket being carried from your order history to a yard's page when you reorder. It is read once and deleted immediately, so reloading the page starts a fresh order rather than repeating one.pb_cart_sent. After you check out, which yards your requests went to and the tracking link for each, so reloading the cart page still shows you what went through. It also holds a one-time key for any request whose answer never arrived, so trying it again cannot send it twice. It ends when you close the tab.
The offline cache
This site installs a service worker, which is a small script your browser runs so that pages you have already opened still work when you have no signal. It keeps a cache on your device.
What goes in it: the page frame and stylesheets, the typeface, the icons, and then pages and scripts as you actually visit them.
What never goes in it: anything from our API. That means no order, no quote, no account data and no tracking page response is ever written to that cache. This is enforced by an explicitly empty allowlist in the worker rather than by us remembering, and a page is cached only if it came back as a normal 200 response that was not a redirect, so a sign in redirect can never poison it.
The cache is stamped with a version and the whole thing is deleted every time we deploy a new version of the site.
To clear it, clear site data for pilebase.io in your browser settings, or uninstall the app if you added it to your home screen.
Notifications
Notifications are for buyers only, and for one thing: the state of a delivery you are waiting for. Your order confirmed, ready to collect, or delivered. We do not send promotions, reminders or anything else on this channel, and yards are not notified this way at all.
You are only ever asked after you place an order, never when a page loads, and we ask in our own banner first. Saying no to that costs you nothing.
If you turn them on, your browser gives us a subscription: an address to send to and two encryption keys. It carries no name, no email address and no account. It knows only which order it is allowed to be notified about.
A notification never carries a price or an address. Anyone can read a lock screen, and the amount you are charged is not settled until the load is weighed, so the figure stays on your order page, where you can see what produced it.
Three ways to stop them, and all three work: "Turn these off" on the notification itself, the switch on your account page, or your browser's site settings. If a subscription stops working we delete it automatically.
Email tells you all of the same things either way. Notifications are an addition, never a replacement, and never a condition of ordering.
What is not here
- No analytics. No Google Analytics, no Plausible, no anything.
- No advertising pixels. No Meta pixel, no Google Ads tag, no conversion tracking. We do not run advertising.
- No third party scripts, with one named exception. Every script on this site is served from this site. The exception is the card payment page: when card payment is switched on, that page loads Stripe's own script from Stripe rather than from us, because Stripe does not permit self hosting it and the card field has to be Stripe's rather than ours. That page is not reachable today, and it is the only page anywhere on this site that would load anything from another host.
- No fingerprinting, no session recording, no heatmaps.
Contact
Email info@pilebase.io. Our full privacy policy covers what happens on the server side.