This page lists everything TestMyBuild stores in your browser. TestMyBuild is a product of Heegstra LLC. Our Privacy Notice explains the rest.
Short version: one cookie keeps you signed in, a second one lives 15 minutes while you sign in with a code, a third lives 10 minutes at most while you sign in with Google, your browser keeps your cookie choice and any listing you start before signing in, and nothing else runs unless you choose Accept all.
Strictly necessary: always on
These make the site work. You cannot switch them off and still sign in, so we do not ask for consent for them, which is what the law allows.
| Name | Type | What it does | How long |
|---|---|---|---|
__Host-tmb_session | Cookie (first-party) | Keeps you signed in. HttpOnly, Secure, SameSite=Lax. | Up to 90 days |
__Host-tmb_nonce | Cookie (first-party) | Set when you ask for a sign-in code. The code works only in the browser that has this cookie. HttpOnly, Secure, SameSite=Lax. | 15 minutes; deleted when you sign in |
__Host-tmb_oauth | Cookie (first-party) | Set only when you press Sign in with Google. Proves that the browser Google sends back to us is the one that started the sign-in. HttpOnly, Secure, SameSite=Lax. | 10 minutes at most |
tmb-consent | Local storage | Your cookie choice and the date you made it | Until you change it or clear your browser's data |
tmb-draft | Local storage | A listing you started before signing in, so that it is still there when you sign in | Until it is saved to your account after you sign in, or you clear your browser's data |
Our hosting provider's bot check runs on the form where you ask for a sign-in code. We do not use its pre-clearance option, so it sets no cookie on testmybuild.app. What it keeps inside its own check, on its own domain, belongs to the provider and is used only to tell a person from a script.
Site analytics: off unless you choose Accept all
Set only if you choose Accept all. Choose Only necessary and none of this loads.
| Name | Set by | What it does | How long |
|---|---|---|---|
_ga | Google Analytics (first-party) | Tells browsers apart with a pseudonymous identifier | 390 days |
_ga_<container> | Google Analytics (first-party) | Keeps session state | 390 days |
Google Tag Manager, which loads Google Analytics for us, sets no cookies of its own. Google signals and ads personalization are off, and we never send Analytics your email address, your posts or anything else that names you.
Marketing: none
We use no advertising or retargeting technology, and the banner offers no choice about it, because there is nothing to choose. Accept all accepts site analytics and nothing else. If that ever changes, this page changes first and we ask you again.
Changing your mind
Use Cookie settings in the footer of every page to open the banner again and choose. Nothing optional is chosen for you, and Only necessary keeps the whole site working.
If you change from Accept all to Only necessary, nothing from Google loads from the next time you open or reload the site. Analytics cookies already in your browser stay there until they expire or you clear them, and nothing reads them while analytics is off.
If your browser will not let us store your choice, nothing optional runs and we ask again next time.
You can also clear cookies and site data in your browser. That signs you out and removes a listing you started before signing in.