Cookie Policy

1. INTRODUCTION

Renttoo ("Renttoo", "we", "us") uses cookies and similar technologies on our Platform (renttoo.nl). This Cookie Policy explains what cookies are, which cookies we use, why we use them and how you can manage your cookie preferences.

This Cookie Policy is part of Renttoo's Privacy Statement and complies with the General Data Protection Regulation (GDPR) and Dutch privacy legislation, including the Telecommunications Act.

By using the Platform and accepting cookies via our cookie banner, you agree to the use of cookies as described in this Cookie Policy.

---

2. WHAT ARE COOKIES?

Cookies are small text files that are placed on your device (computer, tablet, smartphone) when you visit a website. Cookies are stored in your device's browser and contain information that the website can read on a subsequent visit.

Cookies can have different purposes:

• Functional cookies: Necessary for the functioning of the website

In addition to cookies, we also use similar technologies such as:

• Local Storage: For storing user preferences locally in your browser (persists until manually cleared)
• Session Storage: For storing temporary data during a browser session (deleted when closing the browser)

---

3. WHICH COOKIES AND STORAGE ITEMS DO WE USE?

We use a minimal number of cookies and browser storage items on our Platform. Below you will find a complete inventory.

3.1 Cookies

cookieConsent

• Type: Functional (necessary)
• Purpose: Records whether you have accepted cookies via the cookie banner
• Value: true (when accepted)
• Retention period: Permanent (expires December 31, 9999)
• Opt-out: Not possible — necessary for recording your consent choice

sidebar_state

• Type: Functional (preference)
• Purpose: Remembers whether the dashboard sidebar is collapsed or expanded
• Value: true or false
• Retention period: 7 days
• Flags: SameSite=Lax; Secure (on HTTPS)
• Opt-out: Not possible — necessary for user interface functionality

3.2 Local Storage Items

Local storage items persist in your browser until you manually clear your browser data or until the application removes them.

theme

• Purpose: Stores your preferred color theme (dark or light mode)
• Value: "dark" or "light"
• Retention: Until manually cleared

listing-view-mode

• Purpose: Remembers your preferred view mode on the listings page (grid, table, list, or map)
• Value: "grid", "table", "list", or "map"
• Retention: Until manually cleared

dashboard_view_mode

• Purpose: Remembers your dashboard perspective (admin, owner, or client view)
• Value: "admin", "owner", or "client"
• Retention: Until manually cleared

signup-intent

• Purpose: Temporarily stores your signup intent during registration (renting or renting out)
• Value: "rent" or "rent-out"
• Retention: Cleared automatically after successful registration

signup-rent-out-type

• Purpose: Temporarily stores the type of rental business during registration
• Retention: Cleared automatically after successful registration

verification_return_url

• Purpose: Stores the URL to return to after completing identity verification with Stripe
• Retention: Cleared immediately after returning from verification

calendar-settings

• Purpose: Stores your calendar display preferences (badge style, view type, time format, grouping)
• Retention: Until manually cleared

3.3 Session Storage Items

Session storage items are automatically deleted when you close your browser tab or window.

analytics_session_id

• Purpose: A unique identifier for your browsing session, used for Platform improvement analytics
• Value: Generated identifier (format: session_{timestamp}_{random})
• Retention: End of browser session
• Note: This identifier is linked to behavioral analytics events stored in our own database (Supabase). See our Privacy Statement Section 3.6 for details.

verificationJustCompleted

• Purpose: A temporary flag indicating that identity verification was just completed, used to trigger a page refresh
• Value: "true"
• Retention: Automatically cleared after 5 seconds

---

4. THIRD PARTY COOKIES

Some cookies on our Platform may be placed by third parties during specific interactions:

Stripe (Payment Provider)

• Stripe may set cookies during payment processing and identity verification flows
• These cookies are necessary for secure payment handling and fraud prevention
• Privacy Policy: https://stripe.com/nl/privacy

Supabase (Authentication Provider)

• Supabase manages authentication session tokens
• These are stored as part of normal authentication flow
• Privacy Policy: https://supabase.com/privacy

Google (Authentication Provider)

• If you choose to sign in with Google, Google may set cookies during the OAuth authentication flow
• Privacy Policy: https://policies.google.com/privacy

We have no control over cookies placed by third parties during these interactions. For more information about these cookies, we refer you to the privacy policies of these third parties.

---

5. MANAGING COOKIE SETTINGS

5.1 Via the Cookie Banner

On your first visit to the Platform, you will see a cookie banner where you can accept or decline cookies.

• If you accept: A cookieConsent cookie is set to record your choice
• If you decline: No consent cookie is set; you will see the banner again on your next visit

5.2 Via Browser Settings

You can also manage cookies and browser storage via your browser settings:

Google Chrome:

1. Click on the menu (three dots top right)
2. Go to "Settings" > "Privacy and security" > "Cookies and other site data"
3. Adjust your preferences

Mozilla Firefox:

1. Click on the menu (three lines top right)
2. Go to "Options" > "Privacy and security"
3. Adjust your preferences under "Cookies and site data"

Safari:

1. Click on "Safari" in the menu bar
2. Go to "Preferences" > "Privacy"
3. Adjust your preferences

Microsoft Edge:

1. Click on the menu (three dots top right)
2. Go to "Settings" > "Cookies and site permissions"
3. Adjust your preferences

Clearing Local Storage and Session Storage: In most browsers, you can clear local storage and session storage via Developer Tools (usually accessible via F12) > Application > Storage. Alternatively, clearing all site data in your browser's privacy settings will also remove these items.

Note: Disabling certain cookies or clearing browser storage may reset your preferences (such as theme, view mode, and sidebar state) and may require you to log in again.

---

6. COOKIES AND MOBILE DEVICES

We also use cookies and similar technologies when you access the Platform via mobile devices. For mobile devices, the same principles apply as for desktop browsers.

You can manage cookies on mobile devices via:

• Your mobile browser settings
• Clearing site data in your mobile browser's privacy settings

---

7. RETENTION PERIODS

Our cookies and storage items have the following retention periods:

Cookies:

Local Storage:

Session Storage:

Deletion:

• You can delete cookies at any time via your browser settings
• Local storage and session storage can be cleared via your browser's developer tools or by clearing all site data
• After deletion, your preferences will be reset to defaults

---

8. IMPLEMENTED SECURITY

We take appropriate technical and organizational measures to protect cookies and the data stored in them:

• Secure connections: We use HTTPS for all communication
• Cookie flags: Our cookies use the SameSite attribute and Secure flag where applicable to prevent cross-site attacks
• Minimal data: We store only functional preferences in cookies and browser storage — no personal data is stored in cookies
• Access control: Limited access to cookie-related configurations

---

9. COOKIES AND PERSONAL DATA

Our cookies do not directly contain personal data. However, the analytics_session_id (session storage) is linked to behavioral analytics data stored in our database, which may be associated with your user account if you are logged in.

For information about how we process personal data collected via analytics, please see our Privacy Statement, Section 3.6 (Technical and Usage Data).

---

10. CHANGES TO THIS COOKIE POLICY

We may adjust this Cookie Policy from time to time to reflect:

• Changes in the cookies or storage items we use
• Changes in legislation
• User feedback
• New features on the Platform

For important changes, we will notify you via:

• Email (if available)
• A notification on the Platform
• Update of the "Last updated" date at the top of this Cookie Policy

We recommend that you consult this Cookie Policy regularly to stay informed about how we use cookies.

Last updated: November 10, 2025

---

11. YOUR RIGHTS

Under the GDPR, you have various rights regarding cookies and the data collected in connection with cookies:

11.1 Right of Access

You have the right to know which cookies and storage items we use and which data is associated with them. This Cookie Policy provides a complete inventory.

11.2 Right to Deletion

You can delete cookies and browser storage at any time via your browser settings (see Section 5.2).

11.3 Right to Object

You have the right to decline cookies via the cookie banner on your first visit.

11.4 Right to Withdraw Consent

You can withdraw your cookie consent by deleting the cookieConsent cookie via your browser settings. On your next visit, the cookie banner will appear again.

11.5 Right to Data Portability

For data collected in connection with cookies (specifically behavioral analytics), you have the right to receive it in a structured format. You can exercise this right via our data export feature (Settings > Security > Privacy > "Download my data").

11.6 Right to Complain to Authority

You have the right to file a complaint with the Dutch Data Protection Authority (AP) if you believe we are not using cookies correctly.

Dutch Data Protection Authority

• Website: www.autoriteitpersoonsgegevens.nl
• Phone: 088 - 1805 250

For more information about your privacy rights, we refer you to our Privacy Statement, Section 9.

---

12. CONTACT

For questions, comments or requests regarding this Cookie Policy or the use of cookies, you can contact us:

Renttoo

• Chamber of Commerce: 42011790
• VAT: NL867934918B01
• Email: support@renttoo.nl
• Website: renttoo.nl
• Contact form: renttoo.nl/contact

We strive to respond to your questions and requests within 30 days.

---

13. APPLICABLE LAW

Dutch law applies to this Cookie Policy. Disputes regarding this Cookie Policy will be submitted to a competent court in the Netherlands.

---

14. MORE INFORMATION

For more information about cookies and privacy, you can consult the following sources:

• Dutch Data Protection Authority: www.autoriteitpersoonsgegevens.nl
• Consuwijzer: www.consuwijzer.nl
• Alles over cookies: www.allesovercookies.nl

---

This Cookie Policy is drawn up in Dutch. In case of any translations, the Dutch version shall prevail.