1. What cookies are
Cookies are small text files stored on your device. We use them for one purpose today: keeping the platform working and secure — signing you in, authenticating a dealer rep’s desking session in the Frank browser extension, and letting a shared appraisal link work.
2. Essential cookies
These are required for the platform to work and can’t be turned off without breaking core functionality:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie (better-auth) | Keeps you signed in to your Frank account. | 30 days |
| Session cache cookie (better-auth) | A short-lived, signed cache of your session so we don’t need to check the database on every request. | 60 seconds |
frank_desk_session | Authenticates a dealer rep’s desking session inside the Frank browser extension. Only set for signed-in dealer staff using the extension. | 2 hours |
__appraise_share | Lets you open a trade-in appraisal that a dealer rep shared with you by link. Only set if you use a share link. | 7 days |
3. Security cookies
We use Cloudflare Turnstile to detect abuse and protect sign-in. By design, Turnstile does not set a cookie or use tracking pixels — it runs a one-time challenge and returns a token, which is why we chose it over older CAPTCHA tools.
4. Preference cookies
We don’t currently set any cookies to remember display or language preferences. If we add one, we’ll list it here.
5. Analytics cookies
We don’t set analytics cookies on drivefrank.ca. Our product analytics tool, PostHog, runs in only one place on our platform — inside the dealer credit-application widget that can be embedded on a dealer’s own website — and there it’s configured to run cookie-free and store nothing beyond the current page session.
6. Internal & operational cookies
A small number of additional cookies exist for internal Frank tooling — for example, letting authorized Frank staff temporarily view the platform as another user for support purposes. These are never set for ordinary visitors or consumers and don’t affect your experience of the platform.
7. Third-party & advertising cookies
We don’t use third-party advertising or retargeting cookies, and we don’t allow third parties to set tracking cookies through our site. The only third-party script we load is Cloudflare Turnstile (§3), which sets no cookie.
8. Similar technologies
Beyond cookies, we use browser local storage in limited, non-tracking ways — for example, to remember in-progress form input so you don’t lose it on an accidental refresh. This data stays on your device and isn’t sent to us.
9. Managing cookies
You can control or delete cookies through your browser settings — most browsers let you block or clear cookies for a specific site under their privacy or security settings. Blocking essential cookies will prevent you from signing in or using parts of Frank. Because we don’t currently set any non-essential (preference, analytics, or marketing) cookies, there’s nothing beyond essential cookies to consent to today. If that changes, we’ll update this declaration and ask for your consent before setting any new non-essential cookie.
10. Changes to this declaration
We keep this declaration in sync with what we actually set. Updates will be posted here with a new date.
11. Contact us
Questions about cookies? Email privacy@drivefrank.ca or call 647-360-8580.