Please read this policy carefully together with our privacy policy as it contains important information on who we are and how we use cookies on our website.
We may update this policy and will inform you accordingly. The last update date is shown below.
This page was last updated on 27/02/2025.
When we mention "we", "us" or "our" in this policy, we are referring to the relevant company in the Constellation group of companies responsible for processing your data. For this website, www.webuyanycar.com, We Buy Any Car Limited is the controller of your data and responsible for this website.
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and it also allows us to improve our site.
This cookie policy only relates to your use of our website to browse and purchase our products.
Throughout our website we may link to other websites owned and operated by certain trusted third parties to make additional products and services available to you. These other third party websites may also use cookies or similar technologies in accordance with their own separate policies. For privacy information relating to these other third party websites, please consult their policies as appropriate.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
There are three main types of cookies:
We describe our use of cookies, including a detailed list of your information which we and others may collect through cookies, below.
For further information on cookies generally, including how to control and manage them, visit the guidance on cookies published by the UK Information Commissioner’s Office, www.aboutcookies.org or allaboutcookies.org.
We will ask for your consent to place cookies or other similar technologies on your device, except where they are essential for us to provide you with a service that you have requested (e.g. creating an account on our website).
You can withdraw any consent to the use of cookies or manage any other cookie preferences by clicking on the Cookie Preferences link at the bottom of any page on our site. You can then adjust your cookie preferences, it may be necessary to refresh the page for the updated settings to take effect.
We use the following types of cookies on our Website:
You can adjust your cookies preferences at any time by clicking the below button.
The table below provides more information about the cookies we use and why:
Cookie Name | Description | Name of Vendor | Duration | Classification |
---|---|---|---|---|
AppointmentDetails | This is local storage, and enables us to show the appointment page details to a user who has a current appointment booked and may have left the tab open. This prevents errors when the user tries to view the page again (e.g. to remind themselves where the branch is, or time of appt). Customer ID, email address, name, phone number and postcode are recorded | Webuyanycar.com | PERSISTENT | Strictly Necessary |
AppointmentRequest | Local storage, dropped upon pre-confirmation of appointment booking page. Contains cache of API's pre book appointment response. This enables continuity of the website journey in the event of connection issues, or auto refresh on mobile browsers | Webuyanycar.com | PERSISTENT | Strictly Necessary |
event tracking | Local storage cache - is placed on device after event triggers, to prevent multiple events, e.g. preventing double counting of users where they have accessed website and left the tab open. | Webuyanycar.com | PERSISTENT | Strictly Necessary |
JourneyQuestions | Local Storage, drops after "get my valuation". Stores mileage and previous owners entered by the user. It has a list of fields for the questions on the website, but data is not recorded for those fields. Enables continuity of the website journey in case of connection issues, or auto refreshing mobile browsers. | Webuyanycar.com | PERSISTENT | Strictly Necessary |
OptanonAlertBoxClosed | Determined whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry | Onetrust | 1 year | Strictly Necessary |
OptanonConsent | This cookie is set by OneTrust cookie consent solution. The cookies is used for storing the information about the users consent based on which the cookies will be set on the browser. | Onetrust | 1 year | Strictly Necessary |
Valuation | Local storage cache, placed after successful valuation. Contains cache of API's valuation responses, to show data consistently in case of intermittent connection issues. | Webuyanycar.com | PERSISTENT | Strictly Necessary |
VehicleIdentification | Local Storage, drops after VRM entered. Includes list of all information regarding the vehicle following the vehicle look up response (make/model/spec etc). Enables continuity of website in case of connection issues | Webuyanycar.com | PERSISTENT | Strictly Necessary |
ExternalApiJwt | This is a local storage cache set by WBAC. This allows us to support users through the different pages of our website, it keeps track of unique user ID so that we can help you through multiple valuations and link them to the same user | Webuyanycar.com | PERSISTENT | Strictly Necessary |
Journey | This is a local storage set by WBAC. It records a cache of the questions that the web journey will need to ask in order to provide a valuation so e.g. if there is an interrupt in data connectivity, the journey can still proceed without needing continual server access. | Webuyanycar.com | PERSISTENT | Strictly Necessary |
WBAC.AUTH | Used by website for storing a session ID, duration 1 month. This cookie is used to recognise a user misusing our website (for commercial) use. The duration is a deterrent to discourage further use of the site (as if they return within 1 month, they are denied use of our service) | Webuyanycar.com | 1 month | Strictly Necessary |
Wbac.Floodgate | This is a WBAC set cookie. Used by website for storing a session ID. Tracks user to ensure they do not enter high number of requests (suspected commercial customer). This is set for older website pages. | Webuyanycar.com | SESSION | Strictly Necessary |
WBAC.NS | This is a WBAC cookie, 1 hour duration. Many users obtain more than one valuation when visiting the site in a day, this cookie is designed to prevent user experience being affected by seeing different variants of a page when obtaining valuations (in the case different versions are being trialled). | Webuyanycar.com | 1 hour | Strictly Necessary |
wbacselectedcountry | This is a WBAC set cookie. Many users are directed to the WBAC USA site in the first instance (search engines rely on IP address to determine this, which is not always accurate). This cookie remembers the decision/preference about whether a user wants to visit the UK or US site, so that when they return within a few weeks, they are immediately directed to the right country site. | Webuyanycar.com | 3 months | Strictly Necessary |
ReturningCustomerValuationModel | Local Storage. Shows recent valuations on the website landing page, which allows users to return straight to book an appointment for a valuation that they have already made (if they are in their 4 day guarantee period). | Webuyanycar.com | PERSISTENT | Strictly Necessary |
JSESSIONID | Used by sites written in JSP. General purpose platform session cookies that are used to maintain users' state across page requests. | JSESSIONID | Session | Functional |
WBAC_SESSION_ID | This is a WBAC set cookie. This is a session ID which can be used by other applications and integrations, such as Google Tag Manager, to manage tracking code on the website. The duration is 1 hour, so that integrations recognise the same user if they return to the site to obtain another valuation within that time. | Webuyanycar.com | 1 hour | Functional |
_ga | This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors. Sets a unique ID, which will be associated with the users activity on the website | Google Analytics | 1 year | Performance |
_ga_PDE6F6854E | Used to distinguish users in Google Analytics for analytical purposes and measure user behaviour effectively | Google Analytics | 2 years | Performance |
_gat_UA- | This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors. Sets a unique ID, which will be associated with the users activity on the website | Google Analytics | Session | Performance |
_gcl_au | Google Ads Cookie used to track conversions from Google searches. Sets a unique visitor ID enabling relevant advertisements to be delivered to user. | Google Ads | 1 minute | Performance |
_gid | This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors. Sets a unique ID, which will be associated with the users activity on the website | Google Analytics | 1 year 24 days | Performance |
_tq_id.TV | TV Squared is a tool used to measure the effectiveness of TV ads. This cookie is used to identify users who convert on site during a TV advertisement. | TV Squared | 2 years | Performance |
_vis_opt_referrer | Used by VWO - this stores referral info allowing VWO to identify the original traffic source in case of a split URL campaign | Visual Website Optimiser | 15 seconds | Performance |
_vis_opt_s | This cookie is set by Visual Website Optimiser, it tracks session created for visitor i.e. number of times browser was closed and reopened. The value is >=1, followed by a pipe sign, for example the value of 2 indicates that the visitor restarted the browser once, 3 means twice | Visual Website Optimiser | 100 days | Performance |
_vis_opt_test_cookie | This cookie is set by Visual Website Optimiser and is a session cookie generated to detect if the cookies are enabled on the browser of the user or not. | Visual Website Optimiser | 30 minutes | Performance |
_vwo_ds | The tool helps site owners measure the performance of different versions of web pages. Sets a unique ID, which will be associated with the users activity on the website. | Visual Website Optimiser | 90 days | Performance |
_vwo_opt_exp_629_combi | This cookie is created when a visitor is chosen for a particular variation for a test. This cookie makes sure that visitors see the same variation when they revisit the page in the future. Here the Control has a value of 1, Variation #1 has a value of 2, Variation #2 has a value of 3, and so on. Sets a unique ID, which will be associated with the users activity on the website. | Visual Website Optimiser | 100 Days | Performance |
_vwo_opt_s | This cookie tracks session created for a visitor, i.e., the number of times the browser was closed and reopened. The value is >=1, followed by a pipe sign. For example, the value of 2 indicates that the visitor restarted the browser once while 3 means twice | Visual Website Optimiser | 100 Days | Performance |
_vwo_sn | This helps site owners measure the performance of different versions of web pages. Sets a unique ID, which will be associated with the users activity on the website. | Visual Website Optimiser | 3 months | Performance |
_vwo_uuid | This helps site owners measure the performance of different versions of web pages. Sets a unique ID, which will be associated with the users activity on the website. | Visual Website Optimiser | 10 years | Performance |
_vwo_uuid_v2 | This helps site owners measure the performance of different versions of web pages. Sets a unique ID, which will be associated with the users activity on the website. | Visual Website Optimiser | 3 months 8 days | Performance |
vwo_ds | This cookie stores persistent user-level data for insights in VWO | Visual Website Optimiser | 1 year | Performance |
YSC | Tracks the views of embedded Youtube videos on the website. If the user is logged into their Google account, views or likes of videos will be associated with that account. | Youtube/Google | As long as browser remains open | Social Media |
yt-remote-cast-available | Stores the user's video player preferences using embedded YouTube video | Youtube/Google | Session | Social Media |
yt-remote-cast-installed | Stores the user's video player preferences using embedded YouTube video | Youtube/Google | Session | Social Media |
yt-remote-connected-devices | Stores the user's video player preferences using embedded YouTube video | Youtube/Google | Session | Social Media |
yt-remote-device-id | Registers a device ID to keep statistics of what videos from YouTube different devices have seen | Youtube/Google | Session | Social Media |
yt-remote-fast-check-period | Stores the user's video player preferences using embedded YouTube video | Youtube/Google | Session | Social Media |
yt-remote-session-app | Stores the user's video player preferences using embedded YouTube video | Youtube/Google | Session | Social Media |
yt-remote-session-name | Stores the user's video player preferences using embedded YouTube video | Youtube/Google | Session | Social Media |
yt.innertube::nextId | Registers a unique ID to keep statistics of what videos from YouTube the user has seen | Youtube/Google | Session | Social Media |
yt.innertube::requests | Registers a unique ESTS to keep statistics of what videos from YouTube the user has seen | Youtube/Google | Session | Social Media |
_fbp | This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website. Sets a unique ID for the visitor, enabling the vendor to deliver relevant advertisements | 1 day | Targeting | |
_rtbhouse.lid | To display personalised ads on other sites based on the user visiting our website. Sets a unique ID for the visitor, enabling the vendor to deliver relevant advertisements | RTB House | 1 year | Targeting |
_uetsid | This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website. Expires 30 minutes after the browsing session ends. Sets a unique ID for the visitor, enabling the vendor to deliver relevant advertisements. | Microsoft Bing Ads | 30 minutes | Targeting |
_uetvid | This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website. Expires 30 minutes after the browsing session ends. Sets a unique ID for the visitor, enabling the vendor to deliver relevant advertisements. | Microsoft Bing Ads | 30 minutes | Targeting |
_uetvid_exp | Bing Ads cookie. Contains the expiry date for the cookie with the corresponding name | Microsoft Bing Ads | 1 year, 25 days | Targeting |
A3 | Displays WBAC ads to user, counts the number of unique browsers that access Yahoo Ads | Yahoo Ads | 1 year | Targeting |
anj | Registers a unique ID that identifies user's device. The ID is used for targeted WBAC ads. These cookies count the number of unique browsers that access Yahoo ads. sets a unique ID for the visitor, enabling the vendor to deliver relevant advertisements. | Yahoo Ads | 3 months | Targeting |
ASP.NET_SessionId | This cookie is used in sites developed with Microsoft.Net. When a user start browsing a unique session ID is created, which keeps track of all the information regarding that session. This information is stored in the web server and it is identified via a GUID.The GUID is essential for any ASP.NET site to function properly. The session ID - attached to user behaviour data collected | ASP.NET_SessionId | 3 months 8 days | Targeting |
demdex | This cookie is set under the domain demdex.net and is used by Adobe Audience Manager to help identify a unique visitor across domains. User ID - attached to user behaviour data collected. | Adobe Audience Manager | 5 months 27 days | Targeting |
dpm | The cookie is set by demdex.net. This cookie assigns a unique ID to each visiting user that allows third-party advertisers target that users with relevant ads. | Adobe Audience Manager | 5 months 27 days | Targeting |
IDE | Used by Google DoubleClick and stores information about how the user uses the website and any other advertisement before visiting the website. This is used to present users with ads that are relevant to them according to the user profile. | Google Ads | 2 years | Targeting |
MUID | Used by Microsoft as a unique identifier. The cookie is set by embedded Microsoft scripts. The purpose of this cookie is to synchronize the ID across many different Microsoft domains to enable user tracking. | Microsoft | 1 year | Targeting |
rtbh | This cookie is used to display adverts on other sites based on the user's previous engagement with our site. | RTB House | 1 year | Targeting |
rtbhs | Used by RTB House as a user identifier for matching with the supply-side platform Outbrain | RTB House | 1 year | Targeting |
ts | Establishing the date of cookie creation in order to determine its expiration date | RTB House | 12 months | Targeting |
u | Used by RTB House as a user identifier for matching with the supply-side platform Outbrain | RTB House | 1 year | Targeting |
uetsid_exp | Bing Ads cookie. Contains the the expiry date for the cookie with the corresponding name | Microsoft Bing Ads | 1 day | Targeting |
uuid | This is a tpmn.co.kr cookie, which is used to adverts displayed to users after they visit the site | tmpmn.co.kr | 1 year | Targeting |
vmuid | Used widely by Microsoft as a unique user ID. The cookie enables user tracking by synchronising the ID across many Microsoft domains. | Microsoft | 2 months | Targeting |
VISITOR_INFO1_LIVE | This is a Youtube Cookie, which measures your bandwith to determine whether you are show the new or old player interface. | Youtube/ Google | 16 years, 5 months, 16 days, 7 hours | Functional |
tradeExternalApiJwtForLoggedOutUse | trade.webuyanycar.com only - Local storage - This will be used in exactly the same way as the “ExternalApiJwt”, but specifically to keep track of logged out users in the same way as www.webuyanycar.com. Occurs on first visit to the site. | trade.webuyanycar.com | Local storage has no expiry date. | Essential |
PasswordMode | trade.webuyanycar.com only - Local storage - This is used when supporting the customer to reset their password (and whether it’s opted for, or forced (e.g. initial login)). Occurs when password reset journey starts. | trade.webuyanycar.com | Local storage has no expiry date. | Essential |
SiteDetails | trade.webuyanycar.com only - Local storage - This keeps track of which site an appointment is at, to assist the user and cache information. Occurs when appointment booked, cancelled or rescheduled. | trade.webuyanycar.com | Local storage has no expiry date. | Essential |
UserMetadata | trade.webuyanycar.com only - Local storage - This keeps details of the user that is logged in on the site, to support a smooth experience. Occurs when a user logs in. | trade.webuyanycar.com | Local storage has no expiry date. | Essential |
TiPMix | Used by Azure when determining which web server they should be directed to. | Azure | As long as browser remains open | Performance |
ARRAffinitySameSite | This cookie is set by websites run on the Windows Azure cloud platform. It is used for load balancing to make sure the visitor page requests are routed to the same server in any browsing session. | Azure | Session | Performance |
Wbac.Floodgate | Used by website for storing a session ID. Tracks user to ensure they do not enter high number of requests (commercial customer). | webuyanycar | Session | Strictly Necessary |
x-ms-routing-name | Used by Azure to handle traffic during code changes. | Azure | As long as browser remains open | Performance |
ASP.NET_SessionId | General purpose platform session cookie, used by sites written with Microsoft .NET based technologies. Usually used to maintain an anonymised user session by the server. | Microsoft .NET | Session | Targeting |
_gat_gtag_UA_ | This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. | As long as browser remains open | Performance | |
_ga | This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors. | 2 years | Performance | |
_gid | This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visted in an anonymous form. | 24 hours | Performance | |
wbacselectedcountry | Used to remember the decision/preference about whether a user wants to visit the UK or US site. | webuyanycar | 3 months | Strictly Necessary |
ARRAffinity | Used by Azure to facilitate session data management. This assigns a cookie to the user which ensures the same instance will be used until the session expires. | Azure | Session | Performance |
test_cookie | Used to check if the user's browser supports cookies. | 1 day | Strictly Necessary | |
dtCookie | Tracks a visit across multiple requests. | Dynatrace | Session | Performance |
dtSa | Serves as an intermediate storage for page-spanning actions. This cookie is used to save user action names, such as Click on Login, across different pages. This is required because page loads result in JavaScript code restart, so all contextual information must be stored in cookies. | Dynatrace | Session | Performance |
dtPC | Required to identify proper endpoints for beacon transmission; includes session ID for correlation. | Dynatrace | Session | Performance |
rxvt | Specifies the session timeout. | Dynatrace | Session | Performance |
rxVisitor | Contains the visitor ID to correlate sessions. | Dynatrace | Session | Performance |
dtLatC | Measures server latency for performance monitoring. | Dynatrace | Session | Performance |
__pdst | The Podsights javascript SDK sets a lightweight first-party cookie named "__pdst" to assist with deduplication and matching of events. | Podsights | Persistent | Targeting |
__exponea_etc__ | Customer's Bloomreach Engagement generated client-side cookie | first-party, client-side | 7 days - 3 years (depends on browser) | Targeting |
xnpe_[project-token] | Customer's Bloomreach Engagement generated server-side cookie | first-party (for CTD) or third-party, server-side | 3 years | Targeting |
__exponea_time2__ | Timestamp offset between browser and server time | first-party, client side | 60 minutes | Targeting |
__exponea_ab_[ABTestName]__ | Variant name returned for an A/B test | first-party, client side | 7 days - 3 years (depends on browser) | Targeting |
__adal_ca | Store which advertising campaign drove a user to visit. Data stored is traffic source and campaign data. | Adalyser | Persistent | Targeting |
__adal_cw | Tie back conversion events to earlier visits. Data stored is visit timestamp. | Adalyser | Persistent | Targeting |
__adal_id | Uniquely identify a device. Data stored is device ID. | Adalyser | Persistent | Targeting |
ApplicationGatewayAffinity | Used for maintaining user sessions. This cookie is set by this website as it runs on the Windows Azure cloud platform. It enables web browser traffic to be kept assigned to single server during certain sections of website. | Windows Azure | Session | Strictly Necessary |
ApplicationGatewayAffinityCORS | This cookie is used by the Windows Azure Application Gateway in addition to ApplicationGatewayAffinity to maintain sticky session even on cross-origin requests (information received from a resource with a different domain name). | Windows Azure | Session | Strictly Necessary |
ASLBSA | The ASLBSA cookie is a Microsoft Front Door Affinity Cookie that directs a browser to the appropriate server. | Windows Azure | Session | Strictly Necessary |
ASLBSACORS | The ASLBSACORS cookie is a Microsoft Front Door Affinity Cookie that helps route requests to the correct web app instance. | Windows Azure | Session | Strictly Necessary |