On carbit.ro and on the sites made with CarBit we use no advertising, tracking or analytics cookies that recognise you from one site to the next. That's why we don't ask for your consent with a banner.
Signing in
When you sign in with your phone number, we keep a session cookie (__Host-cb_s) so we don't ask for a code on every page. It's strictly necessary, holds nothing about you in plain text and expires after 30 days or when you sign out. Other necessary cookies temporarily hold the sign-in steps and are deleted when those steps end.
Your language
If you pick a language with the switcher at the top of the page, we remember it in a cookie (cb_lang) for a year, so the pages without a language in their address (signing in, your account) open in it too. It holds only the language code.
The “Send me the link” form
If you send the form on the Google check page and your number or address isn't right, we keep what you typed in a cookie (__Host-cb_lead) for 10 minutes at most, so you don't have to type it again. Only carbit.ro reads it, and it's deleted once your request reaches us.
Statistics without cookies
The shops' sites count visits with their own counter, without cookies and without keeping your IP address. The owner sees only totals: how many visits, where they came from, which pages.
Browser storage and security
The dashboard stores your language and appearance settings on your device. It uses recent account and shop data for offline reading for up to 24 hours; expired cached data is cleared when the app next opens. It keeps unsent text for the current browser session. Signing out clears the account cache and unsent text. You can clear stored settings in your browser. Cloudflare Turnstile checks sign-in requests to prevent automated abuse; it processes technical browser and network data under Cloudflare’s privacy policy.