Optional analytics and advertising are off until you choose them. Availability depends on the website's configuration.
1Essential storage
Session and security cookies support sign-in and prevent request forgery. Stripe may use storage for payment processing and fraud prevention. These functions are separate from advertising measurement.
When enabled, Cloudflare Turnstile checks public contact, demo, inquiry, and test-drive submissions, as well as sign-in, registration, recovery-email requests, guest checkout, and activation submissions, to reduce spam and automated abuse. The check processes browser and network signals and a short-lived verification token; our server does not send your form contents to Cloudflare. It operates independently of optional analytics and advertising choices. Our integration does not enable Turnstile pre-clearance cookies.
carpam_privacy_v1 in local storage remembers privacy choices for up to 180 days. carpam_tracking (or __Host-carpam_tracking on secure sites) is an HttpOnly, host-only preference cookie lasting up to 180 days. It links this browser's choices to server conversion processing; it does not sign you in. Clearing browser storage can remove that link.
2Optional analytics
When configured and permitted, Google Analytics 4 measures public page views and selected interactions, such as vehicle views, contact clicks, and form engagement. Google receives a pseudonymous browser identifier and selected event information. Its requests expose network information such as your IP address to Google. Google advertising signals and ad personalization stay off unless you also allow advertising.
Google may set _ga and _ga_* cookies. Our Google tag requests a cookie lifetime of up to 180 days. Provider behavior and browser settings can shorten that period. Google Analytics property retention is configured separately by the website operator.
3Optional advertising
When configured and permitted, Meta Pixel and the Meta Conversions API measure website engagement and confirmed inquiries or booking requests. This can help Meta attribute advertising results and may constitute sharing for cross-context behavioral advertising under California law. Meta may associate events with information it already holds.
With the same permission, our Google tag and server events tell Google that advertising storage, ad user data, and ad personalization are allowed. Google can then measure Google Ads conversions from this website, include you in remarketing audiences, and show you related ads. Google may set advertising cookies such as _gcl_au. Without this permission, Google receives analytics only (if you allowed it).
Meta may set _fbp and _fbc cookies, commonly lasting up to 90 days. Browser restrictions and Meta's settings can change their lifetimes. Our implementation disables automatic Pixel configuration and does not send customer names, email addresses, phone numbers, message bodies, or financing documents in conversion payloads.
4Server events and retention
Server conversions are based on confirmed records, such as an accepted inquiry or requested test drive. Browser and server Meta copies share an event identifier to reduce double counting. Google server events carry your advertising choice. The server checks the stored consent again before dispatch. A request already in flight may finish before a changed preference takes effect.
When enabled and scheduled, our tracking worker removes conversion delivery records after 30 days and expired preference records after an additional 30 days. Opaque attribution and duplicate-prevention links expire with the associated preference record. Extended shutdowns require operator-managed cleanup. These periods do not determine how long Google or Meta retains information it already received.
5Your choices
Use Privacy choices on this website to reject optional tracking, choose categories, or withdraw permission. Rejecting optional tracking does not prevent ordinary use of the website. We honor Global Privacy Control by disabling advertising and applying a sale/share opt-out. Each dealership hostname has its own preferences; choices are not automatically shared between devices, browsers, or websites.
Do Not Sell or Share My Personal Information · California Privacy Notice
Have a privacy request?Contact our privacy team