Cookie Policy

Your choice

On a first visit, no choice is treated as acceptance. Choose “Accept optional” or “Reject optional” in the banner. Your choice is saved in this browser and remains until you change it or clear browser storage. Use the persistent Cookie settings control on public pages to reopen the choices. A later rejection blocks future optional use and removes the app-controlled polsia_vid identifier where possible. Essential account/session storage continues to support sign-in.

Necessary account and session storage

The sign-in and account flows use necessary session storage so the site can keep an account session and check access. The installed authentication service is Better Auth. A local sign-in check observed the HttpOnly, SameSite=Lax cookie better-auth.session_token at path /, with a seven-day expiry. Confirm the deployed cookie name, secure setting and expiry before publication: [Verify the authentication cookie settings on the deployed domain].

Saved preference

zoevema-cookie-consent is stored in local storage by the ZOEVEMA site. It records either “accept” or “reject” so the banner does not treat silence as consent and your choice remains in effect after reload. It has no app-set expiry; it stays until you change or clear it.

Optional visitor beacon

If analytics is enabled for this deployment and you accept optional use, the site stores polsia_vid in local storage and sends a visitor beacon to the deployment’s configured Polsia analytics base. The identifier has no app-set expiry; it stays until browser storage is cleared or you reject optional use. Rejection removes this app-controlled value where possible and prevents future beacon requests.

AutoEurope car-hire search

The AutoEurope search embed and its location-suggestion script do not load until you accept optional use. The embed is served through tpwdg.com and location suggestions use suggest.apistp.com. In a local browser check, the AutoEurope embed’s Snowplow tracker wrote these first-party cookies:

• _sp_id.<domain hash> (observed locally as _sp_id.1fff) stores a visitor identifier and session information. Its local expiry was about two years.
• _sp_ses.<domain hash> (observed locally as _sp_ses.1fff) marks an active visit. Its local expiry was about 30 minutes after a tracker event.

The embed also wrote local-storage event queues beginning snowplowOutQueue_sp-cascoon and snowplowOutQueue_sp-powered_by. They hold queued tracker events and are removed by this site when you reject optional use. Their expiry and any other production storage from the embed have not been confirmed: [Verify AutoEurope’s production cookie suffix, lifetimes and any other storage]. The site also removes these app-domain tracker cookies where browser controls allow it. Storage on a provider’s own domain may need to be removed through that provider or your browser.

Inventory review

This page reflects the storage and integrations currently visible in the app code. Confirm the deployed authentication and partner-script inventory before publication, and add the review date: [Add the verified inventory review date].