Cookies

Last updated: September 20, 2026

1. What this policy covers

This policy explains the cookies and similar storage that QiraPro uses on the website at qirapro.com and in the QiraPro mobile app. It sits alongside our Privacy Policy at qirapro.com/privacy, which explains everything else we do with your data.

A cookie is a small text file that a website asks your browser to store and send back on later visits. Websites also use other storage in your browser — such as local storage — which works differently but serves similar purposes.

2. We do not track you

QiraPro sets only the cookies the site needs in order to work. We use:

  • no analytics or measurement cookies;
  • no advertising, retargeting or profiling cookies;
  • no tracking pixels, fingerprinting or social media trackers;
  • no third-party cookies placed by an advertising network.

That is why the notice at the bottom of the site is an information notice, not a consent banner: strictly necessary storage does not require your consent, and there is nothing else to ask you about. Dismissing the notice simply stops it appearing again.

If we ever add analytics or any other non-essential technology, we will replace that notice with a real accept-or-reject choice, and nothing non-essential will load until you accept it.

3. The cookies we set

customer_sid

  • What it does: keeps you signed in to your customer account after you log in.
  • Why it is necessary: without it, every page would forget who you are and you could not use your account or book a car.
  • Type: strictly necessary.
  • How long it lasts: 30 days from the last time you used the site. Each time you use it, the 30 days start again. It is deleted when you sign out.
  • Protections: it cannot be read by any script on the page (HttpOnly), it is sent only over an encrypted connection (Secure), and it is not sent when another website links into ours in a way that could be abused (SameSite=Lax). It contains only a random identifier — never your name, your email or your password.

admin_sid

  • What it does: the same thing, for staff of a rental company signing in to their dashboard and for QiraPro administrators.
  • Why it is necessary: it keeps a staff session signed in.
  • Type: strictly necessary.
  • How long it lasts: 30 days from last use; deleted at sign-out.
  • Protections: the same as above. It is a completely separate sign-in system from the customer one — the two never share a session.

Cookies set by our hosting and security provider

Our website is delivered through a content delivery and security network. It may set strictly necessary cookies of its own to route your request, to keep the connection working and to protect the site from attacks and automated abuse. These are not used to profile you or to advertise to you.

4. Other storage we use in your browser

These are stored by your browser on your device and are never sent to our servers.

i18nextLng (local storage)

Remembers which language you chose — Albanian, English or German — so the site opens in it next time. It contains only a language code such as "sq".

qp-cookie-notice-dismissed (local storage)

Records that you closed the cookie notice, so it does not reappear on every page. It contains only the value "1".

5. The mobile app

The QiraPro mobile app does not use cookies. Instead:

  • Your sign-in session identifier is kept in your device's secure storage (Keychain on iOS, the encrypted keystore on Android) and sent to our servers with each request. It is removed when you sign out.
  • If you allow notifications, a push token identifying your installation of the app is registered with us so we can notify you about a booking or a message. It is removed when you sign out or uninstall the app, and you can withdraw the notification permission in your device settings at any time.

Neither is used for advertising or tracking. The app contains no advertising or analytics software development kits.

6. Cookies set by others when you choose a feature

  • Sign in with Google (mobile app). If you choose to sign in with Google, Google handles that sign-in and may set its own cookies or storage under its own privacy policy. We receive only a signed token confirming who you are. If you never use the feature, nothing of Google's runs.
  • Content shown from elsewhere. We do not embed third-party advertising, analytics, maps with tracking, video players or social widgets that would set cookies on our pages.

7. How to control cookies

Every browser lets you see the cookies a site has set, delete them, and block new ones — usually under Settings, then Privacy. Your browser's help pages explain how.

Please note that our sign-in cookies are strictly necessary. If you block or delete them you can still browse cars, search and read the site, but you cannot sign in, save a car or make a booking, because there would be no way for the site to remember you from one page to the next.

Clearing your browser's local storage will reset your language choice and bring the cookie notice back. Nothing else is lost.

8. Changes to this policy

If we change what we store or add anything non-essential, we will update this page — and, for anything that is not strictly necessary, ask for your consent first. The date the current version was published is shown at the top of this page.

9. Contact

Questions about this policy:

  • Email: [PRIVACY CONTACT EMAIL]
  • [REGISTERED COMPANY NAME], [REGISTERED ADDRESS]