- €
- €
Two short cookies, one five minute cache, no trackers, and where Armenian law takes over.
Five lines, and the last of them is the important one. You do not have to believe any of it: the panel in your own browser holds the same list.
Last reviewed 17 October 2026 · Yerevan Car Hire
| Item | Kind | What it does | How long it lives | Readable by scripts |
|---|---|---|---|---|
| yerevancarhire_s7e3496 | Cookie, first party | Joins the requests of one visit together | Two hours | No, it is HttpOnly |
| XSRF-TOKEN | Cookie, first party | Lets a form posted from here prove it started here | Two hours | Yes, that is the mechanism |
| lrCars:v3 | Local storage | Holds your last few car searches so the grid is not fetched twice | Five minutes, four entries at most | Yes, and it never leaves the device |
| Language choice | Address bar | Carried in the path of the URL you are reading | As long as you stay on that address | Nothing is stored anywhere |
| Analytics, ad and consent tags | Not loaded | There is no such tag in the source of this page | Not applicable | Nothing to read |
The session cookie name is built from this domain, so it reads differently on every site that shares our software. That is deliberate, and it is the only thing about it that is clever.
2
cookies set by this domain, both first party
2 hours
and both of them have lapsed on their own
5 min
before a cached search is thrown away
0
analytics, advertising or profiling tags
Three panels of the tools already built into your browser. Press F12 on a desktop, or use the developer menu, then reload this page with the panel open.
Chrome and Edge file cookies under Application, Firefox under Storage, Safari under Storage in the Web Inspector. Expand this domain and count what is there. You should find two entries and no others.
Both carry a lifetime of two hours from the moment they were issued, which you can read in the same row. The session entry is marked HttpOnly, meaning no script on the page can read its value, and both are marked SameSite Lax, meaning another site cannot cause your browser to send them. Neither contains a name, an email address or anything an advertising network would pay for.
Delete them while you read. The page carries on working, because nothing on it is gated behind a login, and a fresh pair appears the next time you post a form.
In the same panel, open Local Storage for this domain. After a search has run you will see keys beginning lrCars:v3, each holding the answer to one car lookup and a timestamp. Four of them are kept at the very most, and the oldest is dropped to make room.
An entry older than five minutes is ignored and removed on sight. That ceiling is deliberate rather than tidy: the car list behind it is live inventory, and a cache that outlived the availability it describes would send you to a booking screen for a car that has gone.
Local storage is never attached to a request, so this content does not travel back to us at any point. Clearing site data for this domain empties it instantly, and private browsing throws it away when the window closes.
Open the Network panel and reload. Sort by domain and you can account for every row: the page and the car lookups come from this site, the typeface comes from Google Fonts, and the small interaction library and the icon set come from public code mirrors. The photographs come from our own image host.
Those requests reveal an IP address and a browser version to the host serving them, as every request on the web does. None of them writes a cookie on our behalf, and none of them is an analytics or advertising endpoint. Search the page source for the usual tag names if you want the negative proof.
One more row appears after your first scroll or pointer movement: the booking partner script, fetched so that pressing Book opens instantly rather than waiting. It is the only third party here with a commercial interest in you, and the next section is about what happens when you use it.
Browser storage is the small half of this subject. The larger half is where a booking ends up. Armenia is not part of the European Economic Area, and the European Commission has never adopted an adequacy decision for it, so no European body has certified Armenian law as offering protection equivalent to the GDPR. The country has its own personal data protection statute and a national supervisory authority. Neither of those is an adequacy decision and neither should be read as one.
Normally that would open a long conversation about transfer mechanisms. Here it is shorter, because of what this site is and is not. Yerevan Car Hire compares cars, it does not rent them. No page on this domain asks for a licence number, a card, a passport, an address or a telephone number, and the car list you see is requested from this domain rather than pulled straight into the page by somebody else. There is simply no file of personal details here to send across a border.
The transfer happens at the moment you press through to book. From then on you are on the booking partner screen, completing the supplier form, and what you type there travels to a business operating in Yerevan. That is a transfer out of the EEA to a country with no adequacy decision, and the GDPR permits it through the derogation covering a transfer necessary to perform a contract you requested yourself. The contract is the rental. The counterparty is the supplier named on your voucher, not this website.
The practical consequence is about aim. Anything attached to the booking, including the name on it, the licence shown at the desk and the deposit authorised on your card, is held in Armenia by the supplier and by the booking partner under the terms you accept on their screen. Anything attached to this domain is on the table further up, expires within two hours and has no name on it in the first place.
There is one thing we do see, and it would be dishonest to leave it out. A web server receives the address a request came from, because a page cannot be delivered without one. Ours is no exception. Nothing on this site turns that into a profile of you, for the plain reason that there is no analytics product installed to build one, and the source of the page is open to anybody who wants to confirm that for themselves.
A request sent to the wrong party is a request that gets forwarded and delayed. These are the three that exist in a Yerevan rental, and what each one can actually answer.
Everything on the list above, and the wording of this page itself.
Whoever built the reservation once you pressed through from here.
The company in Yerevan that actually holds the car.
The strongest privacy guarantee any website can offer is a field that does not exist. Run through this page and the ones around it: dates, a pickup point and a car class is the entire vocabulary. Everything a rental desk needs from you is collected by the rental desk.
That is worth stating plainly, because the opposite is so common. Plenty of comparison sites build an account around you first and show you prices second. This one has no account to build, so the question of how long we keep your profile answers itself.
At the counter in Yerevan, and nowhere earlier. The Yerevan listings are unusual in how little they lean on one: every car in the live feed is marked as rentable without a credit card. Where a hold is taken it is a small one, worth around EUR 7 or less on most of a hundred car sample, and roughly a dozen of that sample held nothing whatsoever.
Those terms are printed on each car before you confirm, which means the deposit question is answered while you are still on a page that has asked you for nothing.
Pick your dates and see what is free in Yerevan. The questions start at the supplier, not here.
Browse available cars