Cookie Policy

Cookies are small text files that a website asks your browser to store and send back on later visits. Browsers also offer local storage, which lets a website keep information on your device without sending it with every request. This policy covers both.

A session cookie is deleted when you close your browser. A persistent cookie stays until it expires or you delete it.

Every cookie the website sets is necessary for a feature you use: signing in, protecting forms and remembering your language. All of them are set by World Ticket Market itself.

On secure (HTTPS) connections, the Auth.js cookie names carry a __Secure- or __Host- prefix, for example __Secure-authjs.session-token and __Host-authjs.csrf-token. The prefix tells the browser to send the cookie only over a secure connection.

When you sign in, with a password or with Google, the website sets authjs.session-token. It holds a random identifier that links your browser to an active session on our servers. It lasts up to 30 days, and it is removed when you sign out. You can also end sessions on other devices from your account.

authjs.callback-url remembers the page you were on so that you can return to it after signing in. It is a session cookie.

authjs.csrf-token protects sign-in requests against cross-site request forgery, a type of attack in which another website tries to submit a form on your behalf. It is a session cookie.

During Google sign-in, authjs.pkce.code_verifier and, when used, authjs.state and authjs.nonce confirm that the response from Google belongs to the sign-in you started. They last about 15 minutes.

NEXT_LOCALE remembers the language you chose, so that the website opens in that language. It is a session cookie.

The website also keeps a few entries in your browser’s local storage. They stay on your device, are not sent to our servers with each request and remain until you clear them.

We do not use analytics cookies. The website includes Vercel Speed Insights, a performance-measurement tool that does not set cookies. You can read how it works in our Privacy Policy.

We do not use marketing or advertising cookies, and the website contains no advertising pixels.

The website does not set third-party cookies. When you sign in with Google, you are taken to Google’s own pages, where Google may use its cookies under its own policies.

• Persistent: authjs.session-token, for up to 30 days or until you sign out.
• Short-lived: the Google sign-in check cookies, for about 15 minutes.
• Session: authjs.csrf-token, authjs.callback-url and NEXT_LOCALE, deleted when you close your browser.
• Local storage: the cart, accessibility and theme entries, kept until you clear them.

Most browsers let you view, block and delete cookies and local storage, usually in the privacy or site settings. You can delete the cookies and storage for this website at any time. Clearing local storage also empties a guest cart and resets your accessibility settings.

The website uses only cookies and storage that are necessary for features you use, so there are no optional cookies to accept or refuse and no consent setting is shown. If we add optional cookies in the future, such as analytics or marketing cookies, we will provide a way to give and withdraw consent before they are used.

We will update this policy when the cookies or storage the website uses change. The date at the top of this page shows when it was last revised.

For questions about cookies, use the contact details in the panel at the end of this page. More about how we handle personal information is in our Privacy Policy.