Cookie Policy

1. What Are Cookies?

Cookies are small text files that are placed on your device (computer, phone, or tablet) when you visit or interact with a website or app. They allow the Services to recognize your device, remember your preferences, and provide important functions such as login, security, and personalization.

We also use similar technologies, including:

• Web beacons / pixels: Tiny images or code snippets embedded in web pages or emails that help us understand whether content has been viewed or opened.
• Local storage & HTML5 storage: Browser-based storage that helps us save settings (such as map preferences or saved searches).
• SDKs in mobile apps: Software development kits used in our mobile applications to measure usage, crashes, or ad performance.
• Device identifiers / “fingerprinting”: Limited information about your browser or device used to help protect accounts and prevent abuse.

2. Why We Use Cookies

We use cookies and similar technologies for the following purposes:

• Authentication & login: To keep you signed in, manage sessions, and help ensure that only authorized users can access certain features.
• Security & fraud prevention: To help detect and prevent fraudulent or abusive activity, stop bots, reduce scraping of MLS listings, and identify suspicious logins.
• Performance & analytics: To understand how people use the Services, measure page performance, identify errors, and improve features and user experience.
• Preferences & customization: To remember your preferences, such as search filters, saved homes, display settings (map vs. list view), and language.
• Advertising & marketing: To deliver relevant property and service recommendations, measure marketing effectiveness, and understand engagement with our ads.
• Compliance & audit: To help us comply with MLS/IDX data licensing obligations and maintain audit logs (for example, logging MLS listing views where required).

3. Categories of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of the Services and cannot be disabled in our systems. They are usually set in response to actions you take, such as logging in, managing your account, or filling out forms. Without them, core features (including account login and secure areas) will not function properly.

Examples: session cookies, security tokens, MLS audit and compliance cookies.

3.2 Functional Cookies

These cookies allow the Services to remember your preferences and provide enhanced functionality and personalization, such as remembering saved searches, preferred layouts, or language settings. If you disable these cookies, some features may not work as intended.

Examples: “remember me” cookies, saved search preferences, layout settings.

3.3 Performance & Analytics Cookies

These cookies help us understand how visitors interact with the Services by collecting information such as which pages are visited most often, how users move through the site, and where performance or usability issues may occur. The data is typically aggregated to help us improve performance and user experience.

Examples: Google Analytics cookies, heatmap and session recording tools.

3.4 Advertising & Targeting Cookies

These cookies may be set through our Services by us or by our advertising partners. They may be used to build a profile of your interests and show you relevant ads on our Services or on other sites. They also help us measure the effectiveness of marketing campaigns.

If you opt out of these cookies, you may still see ads, but they may be less relevant to your interests.

Examples: Meta/Facebook Pixel, Google Ads cookies, remarketing tags.

3.5 Third-Party Cookies

Some cookies are set by third parties that provide services on our behalf, such as analytics, advertising networks, social media platforms, or MLS vendors. These third parties may use cookies and similar technologies in accordance with their own privacy policies.

4. Examples of Cookies We Use

The examples below illustrate common cookies that may be used on the Services:

• session_id (AvailableMax): Maintains your login session and keeps you authenticated; deleted when your browser is closed or you log out.
• csrf_token (AvailableMax): Security cookie that helps prevent cross-site request forgery (CSRF) attacks; typically expires on logout or after a set period.
• remember_user (AvailableMax): Stores certain preferences, such as search filters or “remember me” login options; typical duration is up to 30 days.
• _ga (Google Analytics): Used to distinguish users and measure visits and engagement; typical duration is up to 2 years.
• _gid (Google Analytics): Used to distinguish users over a 24-hour period.
• _gat (Google Analytics): Used to throttle the rate of analytics requests; typical duration is 1 minute.
• _fbp (Meta/Facebook): Used to deliver, measure, and improve the relevance of ads; typical duration is up to 90 days.
• _gcl_au (Google Ads): Used to measure ad conversions; typical duration is up to 3 months.
• mls_audit (MLS providers): Logs MLS listing views for compliance and audit; typical duration is up to 1 year.
• heatmap_id (UX tools): Helps us understand user interactions (clicks, scrolls) for improving design and usability; typical duration is up to 1 year.
• ab_test_variant (AvailableMax): Assigns users to different variants in A/B tests to improve features; typical duration is up to 30 days.
• tracking_pixel (Email): Helps us know whether emails have been opened or links clicked; persists in connection with the email until it is deleted.

5. Legal Frameworks in the United States

Our use of cookies and tracking technologies is primarily governed by U.S. federal and state laws, including:

• Federal Trade Commission (FTC) Act: Requires that our statements about cookies and tracking be truthful, not deceptive, and supported by appropriate disclosures.
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): May require disclosure of cookie-based “sale” or “sharing” of personal information and provide California residents with the right to opt out of certain tracking used for cross-context behavioral advertising.
• Other U.S. state privacy laws (including, where applicable, laws in states such as Virginia, Colorado, Connecticut, Utah, and others), which may grant residents rights to opt out of targeted advertising or certain profiling activities.

Where U.S. state laws require it, we provide mechanisms (such as a “Do Not Sell or Share My Personal Information” link or equivalent privacy controls) for users to exercise their rights regarding cookie-based tracking for advertising purposes.

6. Duration of Cookies

Cookies can remain on your device for different periods of time, depending on their purpose. We generally classify them as follows:

• Session cookies: These exist only while your browser is open and are deleted automatically when you close it or log out. They help maintain your session and security.
• Persistent cookies: These remain on your device after your browser is closed. They help us remember your preferences and settings for future visits and may have durations ranging from a few days to several years.
• Third-party cookies: The duration of third-party cookies is determined by the respective third-party provider and is subject to their policies.

7. Sensitive Personal Information & Children’s Cookies

7.1 Sensitive Personal Information

AvailableMax does not use cookies to collect or process sensitive personal information such as Social Security numbers, driver’s license numbers, financial account details, precise geolocation (as defined by applicable U.S. law), or biometric identifiers. If we ever need such information for specific features (for example, identity verification), we will handle it through secure channels and in accordance with our Privacy Policy and applicable laws.

7.2 Children’s Data

Our Services are not directed to children under the age of 13, and we do not knowingly place cookies on devices of children under 13 in connection with a child-directed service, in line with the Children’s Online Privacy Protection Act (COPPA). If we learn that data has been collected through cookies from a child under 13 without appropriate parental consent, we will delete the information and take reasonable steps to prevent further collection.

8. Your Choices and Controls

You have several options to control or limit how cookies are used on the Services:

• Browser settings: Most web browsers allow you to block or delete cookies. The method varies by browser; typically, you can find these controls in the “Settings” or “Privacy” section. If you block all cookies, some features of the Services may not work properly.
• In-product settings (where available): We may provide cookie or privacy settings within the Services that allow you to manage certain categories of cookies (for example, turning off analytics or marketing cookies).
• California opt-out: If you are a California resident, you may use our “Do Not Sell or Share My Personal Information” link (where available) to opt out of certain cookie-based “sales” or “sharing” of personal information used for cross-context behavioral advertising.
• Global Privacy Control (GPC): We honor GPC signals where legally required, treating them as a request to opt out of certain cookie-based “sales” or “sharing” of personal information for advertising purposes.
• Mobile settings: On mobile devices, you can reset your device’s advertising ID or limit ad tracking via your device settings (for example, “Limit Ad Tracking” on iOS or “Opt out of Ads Personalization” on Android).
• Third-party opt-outs: You may opt out of certain third-party advertising cookies by visiting industry opt-out pages, such as the Digital Advertising Alliance’s opt-out page at optout.aboutads.info or the Network Advertising Initiative’s page at optout.networkadvertising.org.

9. Do Not Track (DNT) & Global Privacy Control (GPC)

Some web browsers offer a “Do Not Track” (DNT) setting that sends a signal to websites asking that your browsing not be tracked. There is currently no industry standard for how websites should respond to DNT signals, and we do not respond to DNT signals at this time.

However, we do recognize and honor Global Privacy Control (GPC) signals where required by applicable law, treating such signals as a request to opt out of certain cookie-based “sales” or “sharing” of personal information used for cross-context behavioral advertising.

10. Cookie Table (Illustrative Examples)

The table below provides a simplified overview of some of the cookies that may be used on the Services. This is an illustrative list and may not include every cookie in use at all times.

11. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Effective Date” at the top of this page. In the event of material changes, we may also provide additional notice (for example, by posting a banner on the site or sending you an email).

We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies and similar technologies.

12. Contact Us

If you have any questions about this Cookie Policy, or if you would like to exercise your rights under applicable U.S. privacy laws, you may contact us using the details below:

• Privacy requests: privacy@availablemax.com
• Legal inquiries: legal@availablemax.com
• California opt-outs / support: support@availablemax.com
• Accessibility: accessibility@availablemax.com