We use four categories of cookies. The cookie banner that appears the first time you visit lets you accept all categories, reject all non-essential categories, or choose category by category. You can change your choice at any time using the "Cookie settings" link in the website footer.
3.1 Strictly necessary cookies (always active)
These cookies are essential for the site to work. They keep the website secure, remember your language choice, hold items in your inquiry/booking flow, and remember which cookie categories you have accepted. They cannot be turned off, because the site would not function correctly without them. They do not require consent under the ePrivacy Directive.
Typical strictly necessary cookies on this site:
| Cookie | Provider | Purpose | Lifetime |
|---|
XSRF-TOKEN | carrentalsplit.com | Security — protects forms against cross-site request forgery | Session |
october_session | carrentalsplit.com | Maintains the visitor session (OctoberCMS) | Session |
cookie_consent | carrentalsplit.com | Stores your cookie-banner choices | 12 months |
locale | carrentalsplit.com | Remembers your language (English / Croatian) | 12 months |
3.2 Analytics cookies (consent required)
These cookies help us understand how visitors find and use the website, so we can improve it. They count visits, traffic sources, pages viewed, and time on site. We use them in aggregated form — we do not try to identify individual visitors. Data is only set after you give consent.
| Cookie | Provider | Purpose | Lifetime |
|---|
_ga | Google (Google Ireland Ltd) | Distinguishes unique users for Google Analytics 4 | 2 years |
_ga_ | Google | Persists session state for GA4 | 2 years |
_gid | Google | Distinguishes users (legacy / GA Universal residual) | 24 hours |
_gat, _gat_ | Google | Throttles request rate to GA | 1 minute |
Google Analytics 4 is configured with IP-address handling that does not store full IPs and with advertising features turned off by default. Read Google's privacy documentation at https://policies.google.com/privacy.
3.3 Advertising and remarketing cookies (consent required)
We use these to measure the performance of our ads, to show you relevant ads on Google and Meta platforms (Facebook, Instagram), and to avoid showing you the same ad too many times. They are only set after you give consent.
| Cookie / tag | Provider | Purpose | Lifetime |
|---|
_gcl_au | Google Ads | Conversion linking | 90 days |
IDE | Google (DoubleClick) | Ad targeting and measurement | 13 months |
NID, 1P_JAR | Google | Ad personalisation across Google services | 6 months / 1 month |
_fbp | Meta Platforms Ireland Ltd | Facebook/Instagram Pixel — identifies browser for ad delivery and measurement | 90 days |
fr | Meta | Ad delivery and measurement on Facebook | 90 days |
| Google Tag Manager container | Google | Loads the tags above; does not by itself store identifying data | n/a |
Google Ads and the Meta Pixel may involve transfers of personal data outside the EEA (typically to the United States). We rely on the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses as our legal safeguard. See Section 6 of our Privacy Policy.
3.4 Functional / embedded-content cookies (consent required where set)
Some pages embed third-party content — for example, Google Maps showing the location of our office, YouTube/Vimeo videos, or TripAdvisor and social media widgets. These providers may set their own cookies when their content loads. We only load these embeds after you give consent, except where we use a privacy-friendly preview that does not contact the third-party server until you click it.