Cookie & Tracking Policy

Cookies, pixels, tags, local storage, session storage, device identifiers, and similar technologies help websites operate, remember preferences, protect accounts, measure traffic, and understand marketing performance.

• Strictly necessary technologies: login sessions, account security, fraud prevention, dashboard operation, checkout, Stripe payment flows, Cloudflare security, and load balancing.
• Preference technologies: language choices, dismissal of banners or modals, saved signup progress, referral or UTM attribution, and display preferences.
• Analytics technologies: aggregate page views, time on page, scroll depth, CTA clicks, and conversion measurement.
• Advertising and remarketing technologies: Meta Pixel, Google Ads tags, and similar tools, only when configured and only on marketing pages, not on sensitive logged-in, checkout, profile, landlord portal, or SSN/identity entry pages.
• Email and affiliate tracking: referral identifiers, affiliate attribution, and campaign tracking, where used.

We should not intentionally load third-party marketing pixels on pages where users enter Social Security Number information, payment card data, identity verification information, credit report credentials, dispute content, or other sensitive account information. Where Array, Stripe, or another provider loads its own components, those providers may use their own cookies and tracking technologies under their own policies.

If the Service uses localStorage for tokens or signup data, that should be treated as a temporary launch architecture. We should migrate sensitive session tokens to secure, HttpOnly, SameSite cookies where feasible. This statement should be removed after the architecture is corrected and counsel approves updated language.

Users can control cookies through browser settings, device settings, privacy extensions, and platform controls. Blocking some cookies may prevent login, checkout, fraud prevention, dashboard functionality, or customer support tools from working properly.

Where technically feasible and configured, the Service may honor browser Do Not Track or similar signals for non-essential marketing tags. Some signals may not be standardized across browsers or providers.

We may update this Cookie Policy when we add, remove, or materially change analytics, advertising, affiliate, or tracking technologies.