Skip to content
CARNINA

Privacy notice

This notice describes how CARNINA rental requests and this site's optional measurement are handled. You can send a privacy inquiry without selecting or renting a car.

What we collect

When you send a request: the car, dates, term and quoted price; your first name, email, optional phone, city/ZIP, optional mileage estimate and note; and whether you opted in to updates. We don't ask for ID, license images, date of birth, SSN, credit or payment details in this form.

We keep an internal record when a rental request is saved. Optional usage measurement is separate from that record and from rental processing.

With Analytics enabled, only sanitized campaign labels and a public page category are retained per tab as first and last eligible campaign touches. Ad-click identifiers (gclid/fbclid) require the separate Ad attribution choice, which starts off. These accompany a saved request only when permitted; raw queries, referrer URLs and applicant entries are not attribution data. Opt-out clears the tab's attribution; no ad pixels are added.

Unsaved request details stay only in this tab's temporary memory, scoped to the car, for up to 30 minutes of inactivity. Privacy and rental-terms detours keep your step and entries. Successful submission, reset, tab closure or a full reload clears the unsaved draft.

How it's used and shared

Your request is shared with CARNINA, who provides and approves rentals, and with YBC, its acquisition partner that operates this site, so they can respond to you and track which requests become rentals.

Marketing updates are only sent if you opt in, and you can opt out at any time.

Analytics and session replay

Configured Google Analytics and Mixpanel measure public page visits, rental actions and successfully saved requests. Normal event properties do not include names, contact details, notes, typed searches, pickup dates or query strings. Analytics uses an anonymous browser identifier and may use cookies. No advertising pixels or automatic analytics form capture are enabled.

Optional Mixpanel replay may show selections and ordinary public inputs; applicant, contact, autofill fields and request notes stay masked. No ID or payment details. .

When session replay is enabled and Mixpanel is configured, all eligible public rental sessions may be recorded. Public selections, dates, duration, mileage and ordinary public inputs can be readable. Applicant fields and request notes stay masked. Mixpanel always masks email, telephone, password, hidden and nonempty autocomplete fields (except autocomplete off); additional sensitive fields may be masked. First name and city/ZIP retain their autofill settings and are masked. We do not bypass these protections or record private staff, identity, payment or secret content. Do not include sensitive details in notes.

Replay and analytics are optional and independently controlled. Eligible U.S. visitors default to both on only when identified by our hosting edge. We prefer the server's country signal; if unavailable, an eligible visitor with no saved choice may use this site's own Cloudflare country response. Only the country is kept temporarily, not the response or IP address. Outside or unknown countries default off until enabled. Earlier explicit choices, including declines, are preserved. Global Privacy Control and Do Not Track override allowances from first load. Ad attribution stays off unless enabled. Previews, localhost, staff, private pages and explicit test traffic are excluded.

Your choices

is always available in the footer. Turn replay off before entering anything you don't want recorded; analytics can remain on. Turning either off stops future collection across tabs and reloads. Opting out does not erase data already delivered. Delivery and recorded playback are not guaranteed.

You can send a privacy inquiry to request review of access, correction, deletion or an opt-out, or ask a privacy question. Requests are reviewed, not automatically carried out. We may need to confirm that information belongs to you before acting.

The separate privacy form collects your contact email, request type and any optional reference or short message you provide. It has no optional analytics, replay or marketing and is kept separately from rental leads. The operations team can review the saved inquiry even if its email notification is delayed. Don't include identity documents, passwords or payment details.