Legal

Cookie Policy

This Cookie Policy explains how Carro uses cookies, local browser storage, and similar technologies to operate account, dashboard, QR-code checkout, and receipt features.

Last updated: 2026-07-02

1. What cookies are

Cookies are small files stored on a browser or device. Similar technologies include local storage, session storage, device identifiers, and server-side session records. These technologies help websites remember information, keep users signed in, secure accounts, and provide product functionality.

2. Current cookie settings

Consent manager status

Carro currently uses essential cookies and storage for core service functionality. Analytics and marketing cookies are not currently active in the codebase reviewed for this implementation. Because there are no optional cookie categories active, there is nothing to opt into or out of at this time.

If Carro adds optional analytics, advertising, or similar non-essential tracking, this page should be updated and a consent banner or preference center should be enabled before those scripts run for users in regions that require opt-in consent.

3. Cookie and storage categories

Essential cookies and storage

Always active

Examples: Session cookies, remember-device cookies, checkout/cart identifiers, onboarding draft storage, CSRF/security-adjacent state, and service-worker/app state.

Purpose: Required to sign users in, keep accounts secure, remember trusted devices when requested, operate QR-code checkout, preserve short-lived checkout or onboarding state, and provide core service functionality.

Analytics cookies

Not currently active

Examples: Product analytics or website analytics tools, if added later.

Purpose: Would help us understand site usage and improve reliability. Carro should not enable this category for users who require opt-in consent unless consent has been collected.

Marketing or advertising cookies

Not currently active

Examples: Advertising pixels, retargeting tags, affiliate tracking, or sponsored-campaign measurement, if added later.

Purpose: Would support marketing measurement or targeted advertising. Carro should not enable this category unless the required notice, consent, or opt-out controls are in place.

4. Third-party technologies

Carro uses service providers such as Stripe for payments, email providers for transactional emails, hosting/database providers, and storage providers such as Cloudflare R2 when enabled. These providers may set or use their own cookies, device data, logs, or security technologies under their own policies when their services are used.

5. Managing cookies

You can use browser settings to delete or block cookies. Blocking essential cookies may prevent account login, remember-device features, QR-code checkout, cart state, payment status checks, receipt views, or manager dashboard features from working correctly.

If optional cookies are added later, Carro should provide appropriate in-product consent controls and honor the choices that apply to your region.

6. Contact

Questions about cookies or privacy choices can be sent to privacy@carro-app.com. For more detail about personal information, see the Privacy Policy.