Cookie Policy
CarRentRight
Last updated: 27-10-2026
1. Introduction
This Cookie Policy explains how Carentright OÜ, operating as CarRentRight (CRR, we, us or our), uses cookies and similar technologies on its website and platform.
Cookies support functions such as login, security and remembering your choices. Optional technologies may support preferences or help us understand how the website is used.
Read this policy together with our Privacy Policy for information about personal data, your rights, recipients, retention and international transfers.
2. Company Information
This Cookie Policy is issued by:
Carentright OÜ
Registry code: 17481848
Registered address: Harju maakond, Tallinn, Lasnamäe linnaosa, Ruunaoja tn 3, 11415, Estonia
Privacy and general support: support@carentright.com
3. What Are Cookies
Cookies are small files stored on your device that allow a website to recognise a browser and remember information. First-party cookies are set for the website you visit; third-party cookies are associated with another provider.
Cookies may be:
- session cookies, which expire when you close your browser; or
- persistent cookies, which remain on your device for a longer period until they expire or are deleted.
Similar technologies can include local storage, pixels and identifiers used to store or access information on your device. Using a technology other than a cookie does not, by itself, remove consent requirements.
4. Why We Use Cookies
Depending on the feature and your choices, these technologies can:
- support core website and form functions;
- maintain login sessions and security;
- remember your cookie choices;
- remember optional preferences, if you allow them;
- measure website usage and performance, if you allow analytics;
- help us improve navigation and identify usability problems through permitted analytics.
Cookie choices are separate from requesting a free assessment, accepting the paid service or paying the €35 fee. Rejecting optional cookies does not prevent you from requesting assessment or purchasing the service.
5. Types of Cookies We Use
5.1 Strictly Necessary Cookies
Strictly necessary technologies are limited to what is needed to transmit a communication or provide a service you explicitly request.
Depending on the requested feature, these can:
- maintain session state;
- preserve security settings;
- support authentication or login functions;
- remember cookie-consent preferences;
- keep forms or core site features functioning correctly.
These technologies do not require cookie consent when they meet that narrow necessity test. A technology is not strictly necessary merely because it helps our business or measures conversions.
5.2 Preference or Functional Cookies
Functional cookies can remember choices such as language or display settings. Our Cookie Settings provide a separate Functional choice.
Optional functional technologies are disabled unless you choose to allow them. A feature that is strictly necessary to fulfil your specific request is assessed separately under section 5.1.
5.3 Analytics Cookies
Analytics technologies can measure page visits, navigation and performance to help improve the website. Our Cookie Settings provide a separate Analytics choice.
Under this policy, optional analytics technologies require your prior consent. Analytics consent is not permission for unrelated advertising, publication of your case or general AI training.
5.4 Third-Party Cookies
Third-party technologies are classified by their purpose, not simply by who supplies them. Optional third-party technologies require the relevant consent before they are enabled.
A Functional or Analytics choice is not blanket permission for advertising trackers. If advertising technologies are introduced, we explain their purpose and providers and obtain a separate choice before enabling them where consent is required.
6. Consent to Cookies
The cookie banner offers the following choices:
- Accept all — allow the optional categories described in the banner and settings;
- Reject non-essential — continue with strictly necessary technologies only;
- Manage preferences — choose Functional and Analytics separately, then select Save preferences.
Optional choices are off until you make a clear affirmative choice. Scrolling, continuing to browse, closing a notice or doing nothing does not give consent. Necessary cookies cannot be switched off through the optional-category controls.
Declining optional cookies does not change the service price or your case eligibility. You may need to select certain preferences again, and optional features may remain unavailable.
7. Withdrawing or Changing Your Preferences
Open Cookie Settings in the website footer, change your choices and select Save preferences. To withdraw all optional cookie consent, switch off both Functional and Analytics and save.
Withdrawing consent stops future use of the affected optional technologies. It does not make earlier processing unlawful and is not automatically a request to erase all information already collected; data rights and retention are explained in the Privacy Policy.
You may also delete cookies or block storage through your browser. Blocking necessary technologies can affect login or other requested functions. Choices may need to be made again after storage is cleared or when you use another browser or device.
8. Cookie List and Actual Technologies Used
Our Cookie Settings group choices into Strictly necessary, Functional and Analytics. The table below lists the cookies and similar technologies we currently use on carentright.com. Lifetimes depend on the individual technology. Last reviewed: 27-10-2026.
Strictly necessary — always active (no consent required)
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| web-access-token | CRR (carentright.com) | First-party cookie | Keeps you signed in to your account after you log in or register. | 15 minutes, renewed automatically while you stay signed in; deleted when you log out. |
| web-refresh-token | CRR (carentright.com) | First-party cookie | Securely renews your login session so you do not have to sign in again on every visit. | 7 days from your last activity; deleted when you log out. |
| crr-cookie-consent | CRR (carentright.com) | Local storage | Remembers your cookie choices (which optional categories you allowed, the policy version and the date) so we do not ask again on every page. | Until you change your choices or clear your browser storage. We ask again if this policy changes in a way that affects your choices. |
| pending_claim_id | CRR (carentright.com) | First-party session storage | Temporarily stores the case reference and one-time code so a case submitted before sign-in can be linked to the customer's account. | Removed when the case is linked or the customer logs out; otherwise until the tab session ends, with a maximum of 24 hours. |
| crr-carried-toasts | CRR (carentright.com) | First-party session storage | Temporarily preserves service-confirmation messages across a website-triggered page reload, including after a cookie-preference change or when entering your account area. Contents: generic notification text or message codes only; no customer details, case details, case identifiers or authentication tokens. | Removed immediately when retrieved for display after the reload; otherwise until the tab session ends. |
Functional — optional
We do not currently use any Functional cookies or similar technologies. If we introduce them, we will list them here, and they will stay off unless you allow them.
Analytics — optional, only with your consent
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| _ga | Google (Google Analytics 4) | Cookie set on carentright.com by Google's script | Distinguishes browsers with a random identifier so we can produce aggregated statistics about how the website is used. | Up to 2 years from your last visit, renewed on each visit; some browsers shorten this (Chrome caps it at 400 days). |
| _ga_YRBHWYTBX2 | Google (Google Analytics 4) | Cookie set on carentright.com by Google's script | Keeps track of your current visit (session) for the same aggregated statistics. | As for _ga. |
Google Analytics is loaded through Google Tag Manager only after you allow Analytics. It measures page visits, navigation and a small number of steps in the case form (for example starting a case, accepting the legal notice and submitting a case), without the content of your case or your contact details. Advertising features stay off: we tell Google that advertising storage, ad personalisation and use of data for advertising are denied. Our GA4 user-level and event-level data retention is set to 14 months. This setting does not apply to standard aggregated reports.
If you reject Analytics or later withdraw your consent, Google Tag Manager and Google Analytics are not loaded and no analytics data is sent. When you withdraw consent, we also delete the Google Analytics cookies from your browser.
Advertising
We do not set advertising or marketing cookies, pixels or remarketing technologies on this website. If you allow Analytics, a small number of the analytics events described above (for example submitting a case) are currently also imported on Google's side into our Google Ads account as aggregate conversion counts. This measurement is non-personalised: ads personalisation and Google signals are disabled, we tell Google that advertising storage and use of data for advertising are denied, and the imported counts are not used to build advertising profiles or to show you personalised advertising. If you reject Analytics or withdraw your consent, no data is sent to Google and nothing is imported. If we introduce advertising technologies on the website itself, we will list them here and obtain the required separate choice before enabling them.
For more information about a particular cookie or similar technology, contact support@carentright.com.
Session technologies normally end with the session; persistent technologies remain until their configured expiry or deletion. A cookie expiry and the retention of information already collected are different matters.
Cookie lifetimes do not set the retention periods for your case file, identity documents or payment administration. Those records are covered by the Privacy Policy.
9. Cookies and Personal Data
Cookie-related information can be personal data, for example when a device identifier or browsing event can be linked to an individual.
The Privacy Policy explains the lawful grounds for processing, your rights and how to contact us or a supervisory authority. Cookie consent does not replace a lawful basis for subsequent use of personal data.
10. Third-Party Services
External services may use their own technologies when you open their websites or enable a feature. Their notices explain their own processing; CRR remains responsible for technologies it deploys and information it discloses.
Where relevant, external services can include:
- analytics providers;
- embedded media providers;
- communications or support tools;
- authentication or account services.
If you follow a payment link to an external provider’s checkout, that provider’s notices and cookie choices apply there. Your CRR cookie choices do not automatically control technologies on another provider’s website.
11. International Data Transfers
CRR’s AWS hosting is in Ireland. That does not mean every external service, cookie provider or remote-access activity is confined to Ireland.
Where personal data is transferred outside the EEA, applicable transfer requirements and safeguards apply as explained in the Privacy Policy. Cookie consent is not a blanket waiver of those safeguards.
12. Changes to This Cookie Policy
We may update this policy when the technologies, purposes or applicable requirements change. We publish the revised version with its update date.
A policy update alone does not give consent to a new optional purpose. We explain material changes and obtain a new choice where required before enabling the affected technology.
13. Contact
For cookie or privacy questions, contact:
Carentright OÜ
Harju maakond, Tallinn, Lasnamäe linnaosa, Ruunaoja tn 3, 11415, Estonia
support@carentright.com