COOKIE POLICY
Rentcroo E-Services Philippines, Inc. · Technical & Storage Transparency Specification
Effective Date
January 1, 2026
Last Revised
July 2026
Jurisdiction
Republic of the Philippines
Regulatory Framework
Data Privacy Act (RA 10173)
I.INTRODUCTION & SCOPE
This Cookie Policy (“Policy”) explains how Rentcroo E-Services Philippines, Inc. (“Company,” “we,” “us,” or “our”) uses cookies, local browser storage, and related session technologies on the Rentcroo equipment rental marketplace platform, including the website at rentcroo.com and our web and mobile applications (“Platform”).
This Policy supplements our Privacy Policy and describes exactly what cookies are set, who sets them, why they are required, and how you can manage or clear them. We only deploy technologies that are strictly necessary for platform operation, account security, and fast user experience.
II.WHAT ARE COOKIES & LOCAL STORAGE?
Cookies are small data files placed on your device (computer, smartphone, or tablet) when you access a web application. The Platform uses standard web storage technologies:
• Session Cookies: Encrypted, short-lived tokens deleted when you close your browser or log out.
• Persistent Cookies: Encrypted cookies that remain active for a predetermined duration (e.g. 30 days) to keep you signed in securely across visits.
• Browser LocalStorage: Client-side storage stored strictly on your device to remember user preferences (such as saved gear favorites and search filters) without transmitting them to advertising networks.
• First-Party vs. Third-Party: First-party storage is set directly by Rentcroo. Third-party cookies are set by essential infrastructure partners (e.g., Cloudflare security and DDoS protection).
III.COMPLETE COOKIES & STORAGE INVENTORY
CATEGORY 1: STRICTLY NECESSARY COOKIES
These cookies are strictly required for authentication, CSRF security, and core platform operations. They cannot be disabled without breaking account access.
| Cookie Name | Type | Set By | Purpose | Duration |
|---|---|---|---|---|
| auth_token | HttpOnly, Secure Cookie | Rentcroo (1st Party) | Cryptographically signed session token proving authenticated login. Inaccessible to JavaScript for XSS defense. | 30 Days (Sliding) |
| webauthn_challenge | Secure Session Cookie | Rentcroo (1st Party) | Ephemeral cryptographic challenge token for FIDO2/Passkey biometric logins. | 5 Minutes |
CATEGORY 2: FUNCTIONAL & PREFERENCE STORAGE (LOCALSTORAGE)
These first-party localStorage keys remember your interface preferences and cache search data on your device for sub-second page loads. They are never shared with advertising third parties.
| Storage Key | Storage Type | Functional Purpose |
|---|---|---|
| rentcroo_favorites | Browser LocalStorage | Stores your favorited equipment IDs for fast wishlist access across tabs. |
| rentcroo_recently_viewed | Browser LocalStorage | Caches the last 10 viewed listings for convenient comparison. |
| rentcroo_location_pref | Browser LocalStorage | Remembers your preferred city/municipality location radius filter. |
| rentcroo_cart_draft | Browser LocalStorage | Maintains draft equipment selections and dates in the slide-over cart. |
CATEGORY 3: NETWORK INFRASTRUCTURE & BOT DEFENSE
Our traffic is routed through Cloudflare to mitigate DDoS attacks and protect account security.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare, Inc. | Bot Management: Distinguishes legitimate human users from automated scrapers. | 30 Minutes |
| cf_clearance | Cloudflare, Inc. | Turnstile challenge pass token allowing unblocked browsing. | Up to 24 Hours |
Rentcroo does NOT deploy Facebook Pixel, Google Ads remarketing tags, cross-site tracking cookies, third-party data broker beacons, or behavioral ad profiling scripts. We believe your equipment rental activity is private.
IV.MOBILE APPLICATION & DEVICE PERMISSIONS
When accessing Rentcroo via our Progressive Web App (PWA) or native mobile applications, the following optional hardware permissions may be requested:
| Device Permission | Operational Reason | Is it Optional? |
|---|---|---|
| Camera & Photo Library | Uploading KYC Government IDs, Liveness verification selfies, and condition inspection photos. | Yes (Only requested on upload) |
| Precise GPS Location | Finding nearby equipment within your chosen kilometer radius on the “Near Me” search. | Yes (You can type your city manually instead) |
| Push Notifications | Alerts for rental approvals, 6-digit Handover OTP receipts, and in-app chat messages. | Yes (Configurable in device settings) |
V.HOW TO MANAGE & CLEAR COOKIES
You can control, review, or clear cookies and local storage through your web browser settings at any time:
Google Chrome
Settings → Privacy and Security → Delete browsing data → Cookies and other site data
Apple Safari (iOS & macOS)
Settings → Safari → Advanced → Website Data → Remove All Website Data
Mozilla Firefox
Settings → Privacy & Security → Cookies and Site Data → Clear Data
Microsoft Edge
Settings → Cookies and Site Permissions → Manage and delete cookies
Note: Clearing your session cookies will sign you out of your Rentcroo account and require re-authentication.
VI. DO NOT TRACK (DNT) SIGNALS
Some web browsers offer a “Do Not Track” (DNT) header signal. Because Rentcroo does not participate in third-party behavioral tracking or advertising networks, our core platform functionality behaves with equal privacy safeguards regardless of DNT header status.
VII. UPDATES TO THIS COOKIE POLICY
We may update this Cookie Policy from time to time to reflect technological or regulatory modifications. Any changes will be published on this page with an updated revision date.
VIII. CONTACT INFORMATION
Cookie & Privacy Desk
Registered Office
Metro Manila, Republic of the Philippines
Acknowledgment
By continuing to use Rentcroo PH, you acknowledge that you have read this Cookie Policy and understand our use of strictly necessary session cookies and functional local storage.