Review status. This inventory reflects the current application source. Vendor settings and the final effective date still require approval.
1. Current default
Necessary storage supports saved site choices, account sessions, secure trip links, and duplicate-submission prevention. Optional analytics and advertising storage are off by default. Advertising can be enabled only when Mells has configured a provider and you explicitly allow it in Cookie choices. General analytics is not enabled.
Choosing “Use essential only” records that preference. Necessary cookies and local storage still operate because the site cannot authenticate an account, secure a trip link, or remember the choice without them.
3. Local browser storage
Campaign note. If you arrive from an ad or a link carrying campaign tags (utm_source, utm_medium, utm_campaign and the like), campaign labels, your landing path and the referring hostname are kept for this tab and attached to a request you send, so Mells knows which of its own ads worked. This first-party note is not itself sent to an ad network. The browser copy disappears when the tab closes; a copy attached to a request remains with that request. Ad-network click identifiers (gclid, fbclid) are kept only if you allow advertising storage. A Global Privacy Control signal switches all of this off.
| Key | Purpose | Duration |
|---|---|---|
mells-theme | Remembers light or dark appearance. | Until cleared |
mells-favs | Remembers vehicles saved in this browser. | Until cleared |
mells-dates | Remembers future search dates; invalid or past dates are ignored. | Until cleared or invalid |
mells.idem.[booking].[step] | Reuses a booking-step request key after a lost response so a consequential action is not submitted twice. | Until cleared |
mells-privacy-v1 | Remembers essential-only, analytics, advertising, version, and Global Privacy Control status. | Until cleared or the notice version changes |
mells-attr-v1 (session storage) | First-party campaign note; advertising click identifiers only after consent. | Until the tab closes; click identifiers are removed on withdrawal and all attribution is removed for Global Privacy Control |
Local storage stays on your device but can be read by scripts from this site. Clearing browser site data removes it and may sign you out or reset saved choices.
4. Third-party network requests
Advertising pixels. Google Ads and Meta measurement scripts load only if Mells has configured them and you allowed advertising measurement, with no Global Privacy Control signal. Until then no advertising-script request is made. Tags are restricted to public browsing and request pages, not private accounts, inboxes, host/operator screens or access-token links. Providers can receive page URLs, connection details, advertising identifiers and events such as a successful request; Mells does not deliberately put form fields or private trip details into those events. Automatic form matching is not enabled by Mells.
When enabled, Google Ads may use _gcl_* cookies and Meta may use _fbp / _fbc cookies, commonly lasting up to 90 days subject to provider and browser limits. Withdrawing consent sends the providers a denial/revocation and reloads this page to stop their loaded scripts. It does not undo information already sent. You can also remove existing provider cookies through your browser's site-data controls.
The current public pages can request resources from these services:
- Google Fonts provides the Inter font from Google domains.
- unpkg provides the Leaflet map library.
- Esri provides map tiles; the map carries Esri attribution.
- Cloudflare hosts and secures the site and can process ordinary request logs and technical events.
A provider can receive connection details such as IP address, browser and device details, requested URL, referring page, and time. Those services apply their own notices. These functional connections are disclosed separately from optional analytics and advertising storage; the current preference control does not block the map or font files.
5. Checkout provider
Wheelbase is not embedded or activated merely because this site names it. If Mells approves a request and the account and exact vehicle have passed the provider gates, Mells may send you a Wheelbase-hosted checkout link. That separate provider page can set its own necessary cookies under its own notice.
6. Global Privacy Control
If your browser sends a Global Privacy Control signal, Mells records it for this browser and keeps optional analytics and advertising off, even if you previously opted in. It also clears the first-party campaign note. Without that signal, you can still opt out using Cookie choices; advertising consent is never required to use the site.
7. Your controls
You can reopen “Cookie choices” from the footer, choose “Use essential only” or save your individual choice, clear this site's data in browser settings, block cookies, or use private browsing. Email-offers consent is a separate account setting. Blocking necessary cookies can prevent account sign-in and secure checkout-link access.
Questions may be sent to nikulinmells@gmail.com or +1 234 980 5783. See the Privacy Notice for California privacy requests.