Cookie and Storage Policy

Storage and preferences

Cookies and localStorage retain information on your device. localStorage has no automatic browser expiry. The nzn-consent preference has a 180-day application validity (approximately six months). Language, sign-in, search and payment-return storage serve separate purposes and do not share this duration.

Sign-in and rental storage

preferredLanguage stores your language.

nzn_location, nzn_dropOffLocation, nzn_pickupDate and nzn_returnDate store rental search choices.

Supabase uses sb-mydbjfqdwahrsfrutwhc-auth-token for sign-in; user and rememberMe retain profile and login preferences.

lastBookingId, lastAmount, lastPaymentMethod, lastCmiOrder, lastCarId, lastCarPath, lastCarTitle and lastBookingStatus support booking/payment return handling.

These localStorage entries have no general automatic expiry; authentication-token validity is separate.

Manage preferences

With the consent implementation described here, optional analytics and advertising start disabled. You can accept all, reject non-essential processing or choose categories. GTM loads only after at least one optional category is enabled; GA4 requires analytics permission. Advertising-only permission does not enable GA4. This does not mean every Google or external resource is blocked: Fonts, Maps and reviews currently load separately.

Use “Manage preferences” in the footer to change your choice. Withdrawal stops this integration's further measurement; requests already sent cannot be recalled. A later re-grant may require the offered manual reload—save unfinished forms first. The site attempts to remove accessible tracking cookies; it cannot promise to remove every provider's cookie. Your browser also lets you clear cookies/localStorage, which can remove saved language, booking or sign-in information.

Website providers

Hostinger supports our website hosting. Online card payments are handled by CMI through Attijariwafa bank. We do not collect or store full card numbers or card security codes; we receive transaction identifiers and payment-status information.

Supabase provides database, file and account services. Google Maps, Google Fonts and the reviews.beaver.codes widget load independently of analytics preferences. The widget displays reviews from our Google Maps listing using Google Firestore and Google-hosted images.

Google Analytics retention

Our GA4 event data retention and user data retention are each set to 14 months, with reset on new user activity enabled. New activity resets the retention period for that user identifier to 14 months from the new activity; it does not reset the retention of every historical event. These settings do not govern most standard aggregated reports. They are separate from the 180-day consent preference and customer-record retention.

GA4 cookie inventory

_ga — Provider: Google Analytics. Purpose: distinguish users for website analytics, as described in Google’s GA4 cookie documentation.

_ga_KDZETNMMXE — Provider: Google Analytics, for GA4 G-KDZETNMMXE. Purpose: preserve session state, as described for the _ga_<container-id> cookie in Google’s documentation.

Google documents a default expiry of two years for _ga and _ga_KDZETNMMXE. Browser limits can shorten their lifetime. Our Chrome test observed approximately 400 days; this does not establish the configured production duration. Production cookie expiry has not been verified.

The observed cookie expiry is separate from the 180-day consent preference (approximately six months) and the account’s 14-month GA4 event and user data retention settings. These are different periods for browser storage, consent preferences and Analytics data.