Cookie Policy
Last updated: 15 June 2026.
This page lists every cookie and similar client-side storage mechanism set by www.wstruckspotting.com. We use the minimum set required to keep you signed in and to make the map work. We do not set advertising or cross-site tracking cookies, and we do not run analytics or marketing cookies.
Strictly necessary cookies do not require consent under the UK Privacy and Electronic Communications Regulations (PECR). Functional map storage is created only once you open a page that contains a map.
Cookies we set
| Name | Provider | Purpose | Type | Retention |
|---|---|---|---|---|
| bs_session | wstruckspotting.com (first-party) | Keeps you signed in. Contains a random session token mapped to your account on the server. | Strictly necessary | 7 days (httpOnly, Secure, SameSite=Lax) |
| bs_csrf | wstruckspotting.com (first-party) | Cross-site request forgery protection token used to validate state-changing requests. Readable by our own JavaScript so it can be echoed back on form submits. | Strictly necessary | 7 days (Secure, SameSite=Lax) |
| bs_guest | wstruckspotting.com (first-party) | Records that you chose to continue as a guest, so we can show the limited guest experience without a full account. | Strictly necessary | 7 days (httpOnly, Secure, SameSite=Lax) |
| bs_display_name | wstruckspotting.com (first-party) | Stores your display name (or "Guest") so the page can greet you without an extra server request. | Strictly necessary | 7 days (Secure, SameSite=Lax) |
| bs_role | wstruckspotting.com (first-party) | Set only for admin accounts. Lets the interface show admin navigation without an extra server request. | Strictly necessary | 7 days (Secure, SameSite=Lax) |
| bs_has_truck | wstruckspotting.com (first-party) | Set only if you have a named truck. Lets the interface tailor your navigation without an extra server request. | Strictly necessary | 7 days (Secure, SameSite=Lax) |
| bs_oauth_state | wstruckspotting.com (first-party) | Temporary anti-forgery token set only while you sign in with Google, then discarded once the sign-in completes. | Strictly necessary | 10 minutes (httpOnly, Secure, SameSite=Lax) |
| cookie-consent | wstruckspotting.com (first-party) — browser local storage, not an HTTP cookie | Remembers that you have seen and acknowledged this cookie notice so we don't show it again. | Strictly necessary | Until you clear your browser storage |
| mapbox.eventData | Mapbox GL — browser local storage, on pages that show a map | Mapbox GL may store a local identifier in your browser. We have disabled Mapbox's telemetry, so no map-usage data is sent to Mapbox from this Service. | Functional (map) | Stored locally by Mapbox GL; not transmitted |
Managing cookies
You can clear or block cookies in your browser settings. Blocking the strictly necessary cookies will prevent you from signing in.
For any questions about this policy, contact privacy@wstruckspotting.com.