Cookie Policy
1. Introduction
Our website and app use cookies and this policy explains what cookies are, what they do, and which ones we use.
2. What are cookies?
Cookies are small text files placed on your device when you visit a website or use an app. They gather information and transmit it back to the website or app owner. There are many different types of cookies and they are used for different purposes. Some cookies are for your benefit, such as the cookie that remembers your username so that you don’t have to type it in every time. Other cookies are for our benefit, such as those used for gathering statistics or for targeted advertising. Details of the cookies we use, are set out below.
Cookies relate to the device you are using. This means that if you visit our website using your laptop and your phone, you will need to set your cookie preferences on both devices.
3. Consent for Cookies
We do not need consent to place strictly necessary cookies on your device. However, we do need permission from you for all other types of cookies so, before setting these cookies on your device, we will ask you for your consent. If you agree, this enables us to provide you with the best possible experience when visiting our website and using our app. If you decline, certain functions within our website may not operate effectively.
You can withdraw your consent at any time by visiting Cookie Preferences and updating your settings for this website.
4. Types of Cookies
We use the following types of cookies on our website:
Strictly Necessary Cookies
Strictly necessary cookies are used on our website for functions such as page navigation. The website would not be able to function properly without these cookies.
Performance Cookies
These cookies monitor the performance of the site as you interact with it. This information aids us in improving and developing our website / app.
Analytical Cookies
Analytical cookies help us gather statistics such as, how many people visit our website / app, which pages they look at and how long they spend on the website and app.
Functional Cookies
Functional cookies enable us to remember your saved preferences such as layout and text size.
First Party Cookies
First party cookies are set by us and are used for the purpose of improving your experience of our website or app and/or improving our services.
Third-Party Cookies
Third-party cookies are not set by us but by external companies.
Persistent Cookies
Any of the above types of cookies may also be persistent cookies. Persistent cookies stay on your device after you have left our website.
Session Cookies
Any of the above types of cookies may be session cookies. Session cookies are not permanent, as they only stay on your device for as long as you are visiting our website / using our app, following which they are deleted.
Targeting / Marketing / Advertising Cookies
These cookies are designed to provide you with targeted advertising content ie: advertising suited to your preferences and interests based on your browsing history.
Unclassified Cookies
Unclassified cookies are cookies which have not yet been classified. We do not use any unclassified cookies.
5. What type of data do cookies collect?
The type of data cookies collect depends on which cookies are being used and their purpose. The following list contains some examples of the kind of information our cookies may collect. This list is not exhaustive.
- the type of device you are using (laptop, phone etc)
- your browsing history
- pages you have visited
- date you visited our website
- a unique id
- a session Id
- username
- your preferences
- your IP address
6. Where to Find More Information About Cookies
You can block all cookies from our website and app (including strictly necessary cookies) by adjusting your browser settings. However, if you do this our website and app may not be fully functional. You may wish to simply visit Cookie Preferences [insert link] to choose which cookies to accept and which to decline.
The following links provide information on how to disable cookies user your browser settings:
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
Leadfeeder (DealFront)
Our website uses the technologies of Dealfront (Liidio Oy as part of Dealfront Group GmbH) to analyse visitor behaviour. In this process, the IP address of a visitor is processed. This processing has the purpose of helping us understand which businesses (B2B) are visiting our site, by enriching IPs with associated information such as the company name or industry code. To do this, at the beginning of the visitor’s session, their IP address and corresponding session data is matched against a large whitelist of known companies. To increase data protection of our visitors we have turned on “IP address anonymisation”, so that only shortened values instead of the actual IP addresses will be stored. If the feature is on, we will not store the actual IP address anywhere in our systems, including logs. This anonymisation makes it impossible to connect outside IP address information later, preventing identification of an individual person. As part of this processing, first party cookies are used in order to analyse visitor behaviour. Whenever we process website traffic data, this is based on our legitimate interest (Art. 6 (1) lit. f GDPR) in optimizing our products, services, sales and marketing. To prevent this processing activity, you (website visitor) may install and configure appropriate ad-blockers or use no-script-plugins in your browser. The data will be deleted as soon as it is no longer required for its intended purposes. Statutory retention obligations can lead to a longer retention period of the data in question. We have concluded a data processing agreement with Dealfront in order to ensure compliance with applicable data protection standards.
7. Links
Our website and app may include links to other websites. However, we have no control over those websites and are not responsible for the content or policies they publish. We would never knowingly provide links to websites that could cause you harm.
8. Cookie Policy Changes
We reserve the right to change our cookie policy at any time. Please contact us via [insert email address] if you wish to discuss any element of the policy or to change your communication preferences.
9. The Cookies We Use
The table below sets out the names of the cookies we use, who they are set by, a description of the cookies and when they expire.
Webapp and website
Cookie Name |
Personal Data Collected and Purpose for Collection | Cookie Type | Provider | Cookie Duration |
alogin | This cookie contains the email address of the currently logged in user.
It is used for maintaining the user’s session to keep them logged in. It also remembers the user information for the next session. |
Functional | KINTO Join | Persistent |
session | This cookie contains the session ID of the currently logged in user.
It is used for maintaining the user’s session to keep them logged in. It also remembers the user information for the next session. |
Functional | KINTO Join | Persistent |
oid | This cookie contains the active organization ID of the currently logged in user.
It is used to enable the core carpooling functionality of the webpage, for example, it navigates you to the carpooling community you select. |
Functional | KINTO Join | Persistent |
_map_traffic_layer | Client Admin Pages:
This cookie contains the information about the traffic congestion on the current map section. It is used to enable the real-time traffic congestion display on the discovery map. |
Functional | KINTO Join | 1 Week |
_map_selected_route | Client Admin Pages:
This cookie contains the information about the current user’s selected carpooling route. It is used to enable the core functionality of the discovery map, such as selecting the best routes currently available and it remembers your preference the next time you log in. |
Functional | KINTO Join | 1 Month |
_map_users_on_route_json | Client Admin Pages:
This cookie contains the information about the available users on current user’s selected carpooling route. It is used to enable the core functionality of the discovery map, for example, it shows you the users available on your route. |
Functional | KINTO Join | 1 Week from the date of your last log in |
_ga | This cookie enables an analysis of user behaviour when visiting the website. We use Google analytics in conjunction with IP anonymization. | Analytical | 2 Years | |
_gid | This cookie enables an analysis of user behaviour when visiting the website. We use Google analytics in conjunction with IP anonymization. | Analytical | 2 Days | |
_gid_gtag | This cookie enables an analysis of user behaviour when visiting the website. We use Google Analytics in conjunction with IP anonymization. | Analytical | 1 Hour | |
_gat | This cookie enables an analysis of user behaviour when visiting the website. We use Google Analytics in conjunction with IP anonymization. | Analytical | 1 Hour | |
_lfa | This cookie enables an analysis of user behaviour when visiting the website. | Analytical | Leadfeeder | 1 year |
_lfa_consent | Visitor consent status is stored to this cookie. | Analytical | Leadfeeder | 2 years |
_lfa_test_cookie_stored | A cookie that is only temporarily used to check if the browser supports cookies or not. | Analytical | Leadfeeder | Expires Immediately |
_lfa_expiry | A local storage variable to store the duration for the Dealfront clientID stored in browser LocalStorage. | Analytical | Leadfeeder | 2 years |
_hjSessionUser_{site_id} | Set when a user first lands on a page.
Persists the Hotjar User ID which is unique to that site. Hotjar does not track users across different sites. Ensures data from subsequent visits to the same site are attributed to the same user ID. |
Analytical | HotJar | 1 Year |
_hjid | This is an old cookie that we do not set anymore, but if a user has it unexpired in their browser, we will reuse its value and migrate to _hjSessionUser_{site_id}.
Set when a user first lands on a page. Persists the Hotjar User ID which is unique to that site. Ensures data from subsequent visits to the same site are attributed to the same user ID. |
Analytical | HotJar | 1 Year |
_hjFirstSeen | Identifies a new user’s first session.
Used by Recording filters to identify new user sessions. 30 minutes duration, extended on user activity. |
Analytical | HotJar | 30 Minutes
(extended on user activity) |
_hjHasCachedUserAttributes | Enables us to know whether the data set in _hjUserAttributes Local Storage item is up to date or not. | Analytical | HotJar | Session Duration |
_hjUserAttributesHash | Enables us to know when any User Attribute has changed and needs to be updated. | Analytical | HotJar | 2 Minutes (extended every 30 seconds) |
_hjUserAttributes | Stores User Attributes sent through the Hotjar Identify API.
Local storage item |
Analytical | HotJar | No explicit expiration. |
hjViewportId | Stores user viewport details such as size and dimensions.
Session storage item |
Analytical | HotJar | Session duration. |
hjActiveViewportIds | Stores user active viewports IDs.
Stores an expirationTimestamp that is used to validate active viewports on script initialization. Local storage item |
Analytical | HotJar | No explicit expiration. |
_hjSession_{site_id} | Holds current session data.
Ensures subsequent requests in the session window are attributed to the same session. 30 minutes duration, extended on user activity. |
Analytical | HotJar | 30 Minutes |
_hjSessionTooLarge | Causes Hotjar to stop collecting data if a session becomes too large.
Determined automatically by a signal from the server if the session size exceeds the limit. |
Analytical | HotJar | 1 Hour Duration |
_hjSessionResumed | Set when a session/recording is reconnected to Hotjar servers after a break in connection. | Analytical | HotJar | Session Duration |
_hjCookieTest | Checks to see if the Hotjar Tracking Code can use cookies. If it can, a value of 1 is set.
Deleted almost immediately after it is created. |
Analytical | HotJar | < 100ms duration, cookie expiration time set to session duration. |
_hjLocalStorageTest | Checks if the Hotjar Tracking Code can use Local Storage. If it can, a value of 1 is set. Data stored in _hjLocalStorageTest has no expiration time, but it is deleted almost immediately after it is created. |
Analytical | HotJar | < 100ms |
_hjSessionStorageTest | Checks if the Hotjar Tracking Code can use Session Storage. If it can, a value of 1 is set.
Data stored in _hjSessionStorageTest has no expiration time, but it is deleted almost immediately after it is created. |
Analytical | HotJar | < 100ms |
_hjIncludedInPageviewSample | Set to determine if a user is included in the data sampling defined by your site’s pageview limit. | Analytical | HotJar | 2 Minutes (extended every 30 seconds) |
_hjIncludedInSessionSample_{site_id} | Set to determine if a user is included in the data sampling defined by your site’s daily session limit. | Analytical | HotJar | 2 Minutes (extended every 30 seconds) |
_hjAbsoluteSessionInProgress | Used to detect the first pageview session of a user. | Analytical | HotJar | 30 Minutes (extended on user activity) |
_hjTLDTest | We try to store the _hjTLDTest cookie for different URL substring alternatives until it fails.
Enables us to try to determine the most generic cookie path to use, instead of page hostname. It means that cookies can be shared across subdomains (where applicable). After this check, the cookie is removed. |
Analytical | HotJar | Session Duration |
_hjRecordingEnabled | Set when a Recording starts.
Read when the Recording module is initialized to see if the user is already in a recording in a particular session. |
Analytical | HotJar | Session Duration |
_hjClosedSurveyInvites | Set when a user interacts with a Link Survey invitation modal.
Ensures the same invite does not reappear if it has already been shown. |
Analytical | HotJar | 1 Year |
_hjDonePolls | Set when a user completes an on-site Survey.
Ensures the same Survey does not reappear if it has already been filled in. |
Analytical | HotJar | 1 Year |
_hjMinimizedPolls | Set when a user minimizes an on-site Survey.
Ensures that the Survey stays minimized when the user navigates through your site. |
Analytical | HotJar | 1 Year |
_hjShownFeedbackMessage | Set when a user minimizes or completes a Feedback widget.
Ensures the Feedback widget will load as minimized if the user navigates to another page where it is set to show. |
Analytical | HotJar | 1 Day |
Cookies used for the App:
Cookie Name | Personal Data Collected and Purpose for Collection | Cookie Type | Provider | Cookie Duration | Apps |
alogin | This cookie contains the email address of the currently logged in user.
It is used for maintaining the user’s session to keep them logged in. It also remembers the user information for the next session. |
Functional | KINTO Join | Persistent | iOS & Android |
session | This cookie contains the session ID of the currently logged in user.
It is used for maintaining the user’s session to keep them logged in. It also remembers the user information for the next session. |
Functional | KINTO Join | Persistent | iOS & Android |
oid | This cookie contains the active organization ID of the currently logged in user.
It is used to enable the core carpooling functionality of the app, for example. It identifies which carpooling community you’re part of. |
Functional | KINTO Join | Persistent (You can be part of more communities with the same login & session. So this changes according to the will of the user, but is destroyed on logout or session not being active anymore.) | iOS & Android |