What is kept on your device
European law requires your consent before a site stores anything on your device that is not strictly necessary for what you asked it to do. Two things are kept without asking, because each of them is the record of something you asked for:
Your answer to the consent bar. What you allowed, and when you said so. Without it the bar would have to ask again on every page, which would be worse for you and would make a recorded choice meaningless. You can wipe it with “Change your cookie choice” at the bottom of any page.
Whether you have already been shown the discount offer. One line saying you were asked and either joined or declined, so that you are not asked twice. Declining is what it is for.
Both live in your browser’s own local storage. They never leave your device, they are not sent to us, and we cannot read them.
Beyond those two, a cookie appears on your device only if you tick the analytics box in the consent bar. What that cookie is, and what it is for, is the next section.
How visits are counted
Aegean Rent keeps its own count, in its own database, of how many times each page was opened and which language it was read in. It sets no cookie, stores nothing on your device, and keeps no identifier — there is no row for you, only a running daily total that your visit added one to. Nobody can be picked out of a number, which is why it does not ask permission and why it is the count the business actually uses.
Google Analytics runs only if you tick its box. It writes cookies named _ga and _ga_… on your device and keeps a random number in them for up to two years, so that your second visit can be recognised as a second visit rather than as a new person. That number goes to Google, which is a company outside the EU.
What it is for is dull and worth saying anyway: seeing which pages people actually read, which ones they leave immediately, and whether a change to the site made either better. Advertising features, remarketing and sharing with Google’s advertising products are switched off in the code itself, not merely unticked in a settings screen somewhere.
If you say no, the script is never fetched. Not fetched and idle — never fetched. If you say yes and then change your mind, Google’s own opt-out flag is set, the cookies it wrote are deleted, and the next page load starts clean.
The places this site connects to
ARMA (armarent.gr) — the booking form. It loads from ARMA’s servers so that availability and prices are live. When you start a booking, what you enter goes to ARMA.
Supabase (EU, Frankfurt) — our own database, which holds the car list, blog posts, the cached Google rating, the daily visit totals described above, and anything you submit through a form on this site.
Google — only after you have allowed analytics, and only the visit itself.
Nothing for the typography. On an iPhone, iPad or Mac the text is set in the font already on your device. On Windows, Android and Linux one typeface is downloaded, from this site’s own files rather than from Google, specifically so that reading this page tells Google nothing about you.
Changing your mind
“Change your cookie choice” at the bottom of any page wipes the stored answer and brings the bar back, so you can answer differently. A consent you cannot withdraw as easily as you gave it is not a consent, so that link has to work — and it does.
Your browser can also block or delete any of this on its own. The site is built to keep working when it does.
If this ever changes
This page describes what the site does, checked against the code rather than copied from a template. If anything is ever added that stores something on your device, or sends anything about you somewhere else, this page and the consent bar have to change in the same breath. Whoever makes that change is responsible for both.