Privacy Policy

To deliver real-time car rental price comparisons and maintain a secure, high-performance platform, Numinad collects the following categories of information:

• Car Rental Search Parameters: Pickup location, drop-off location, rental start and end dates and times, vehicle class preferences, and driver age where applicable. This data is used solely to query our provider network and display relevant results.
• IP Address (Server-Side): Your public IP address is processed server-side through our `/api/geo` geolocation endpoint to determine your approximate country or region, enabling automatic locale detection (e.g., redirecting to the `/us` or `/gb` market portal). IP addresses are not stored in persistent logs beyond the duration of the session.
• Browser and Device Information: Standard HTTP headers including `User-Agent` string, browser type and version, operating system, screen resolution, and preferred language. This data is used to optimize the interface for your device and to satisfy anti-abuse verification requirements on upstream provider APIs.
• Locale and Currency Preferences: Your selected market portal (e.g., `/fr`, `/de`) and currency setting, stored in session-level browser storage to maintain a consistent search experience.
• Affiliate Tracking Parameters: Outbound links to Kayak, Skyscanner, Expedia, and other partners include tracking identifiers (such as a `subId` parameter) that allow us to attribute affiliate commissions. These identifiers are session-based and do not contain personally identifiable information.
• Recent Searches: If you use the 'recent searches' feature, your recent pickup locations and dates are stored in your browser's `localStorage` on your own device. This data never leaves your device and is not transmitted to our servers.
• Voluntary Contact Information: If you contact us via email at numinad-support@gmail.com, we retain the content of your message and your email address solely to respond to your inquiry.

It is equally important to be explicit about what Numinad does not collect or process:

• Payment Information: We never collect, transmit, or store credit card numbers, debit card numbers, bank account details, or any other financial payment credentials. All payment processing occurs on the rental provider's platform after you click through.
• Booking Confirmation Data: Numinad does not receive or store your booking confirmation numbers, reservation details, or driver's license information. These are collected by the provider at checkout.
• Persistent User Accounts: Numinad does not require account registration. We do not maintain permanent user profiles or long-term records linked to individual identities.
• Sensitive Personal Data: We do not collect health information, government identification numbers, biometric data, or any data classified as sensitive under GDPR Article 9 or equivalent regulations.

Data collected on the Numinad platform is used exclusively for the following purposes:

• Delivering Car Rental Search Results: Your search parameters are forwarded to our provider API network to retrieve live pricing and availability from Kayak, Skyscanner, Expedia, and other platforms.
• Geolocation and Locale Detection: IP-based geolocation routes you to the correct regional portal and displays prices in your local currency. This lookup is performed server-side and the result (a country code) is used transiently to set your locale; the raw IP is not stored beyond the request.
• Platform Security and Anti-Abuse: Browser headers and IP addresses are used to enforce rate limiting on our API proxy routes (30 requests per minute per IP) and to detect and block automated abuse of our search infrastructure.
• Affiliate Commission Attribution: Tracking parameters embedded in outbound links allow our affiliate partners (Kayak, Skyscanner, Expedia, Agoda, etc.) to attribute completed bookings to Numinad and pay us a referral commission. These parameters do not transmit your personal information.
• Performance Monitoring and Error Diagnosis: Anonymous usage metrics (page load times, error rates, API response latency) help us identify and fix performance issues. No personally identifiable information is included in these metrics.
• Legal Compliance: In limited circumstances, we may process data to comply with applicable law, respond to valid legal process, or protect the rights and safety of our users and platform.

A core part of Numinad's service is redirecting you to third-party car rental booking platforms when you select a deal. When you click a 'View Deal' or 'Book Now' button:

• Kayak: Review Kayak's privacy policy at kayak.com/privacy-policy
• Skyscanner: Review Skyscanner's privacy policy at skyscanner.com/media/privacy-policy
• Expedia: Review Expedia's privacy policy at expedia.com/privacy
• Agoda: Review Agoda's privacy policy at agoda.com/en-gb/info/privacypolicy.html
• We strongly recommend reviewing the privacy policy of any provider you book through before completing a reservation.

Numinad uses cookies and browser local storage to operate our comparison platform. A full breakdown is available in our Cookie Settings page. In summary:

We use strictly essential cookies for session management and CSRF security. We use functional storage (browser localStorage) to remember your recent searches and currency preferences on your own device. We use anonymous analytics cookies to monitor platform performance. We attach affiliate tracking parameters to outbound links — these are URL parameters, not cookies deposited on your device by Numinad.

After you click through to a provider, that provider may deposit their own tracking cookies on your device under their own consent framework. Numinad does not control or have access to those cookies.

Numinad is designed to minimize data retention. Our specific retention practices are as follows:

• Search Parameters: Processed in real-time to fetch results and not stored in any persistent database linked to your identity.
• IP Address and Geolocation: Used transiently for locale detection and rate limiting. Server access logs, if retained for security purposes, are kept for a maximum of 30 days and then deleted.
• Recent Searches (localStorage): Stored exclusively in your browser on your own device. Numinad never copies this data to our servers. You can delete it at any time by clearing your browser's local storage.
• Email Correspondence: Messages sent to numinad-support@gmail.com are retained for up to 24 months to allow follow-up on ongoing support matters, then permanently deleted.
• Affiliate Tracking Parameters: Session-based. Not stored in persistent databases on our end.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent national laws:

• Right of Access: You may request a copy of any personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate personal data.
• Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data where we have no legitimate grounds to continue processing it.
• Right to Restriction of Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract, you may request your data in a machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• To exercise any of these rights, contact us at numinad-support@gmail.com. We will respond within 30 days. Given the minimal data we collect, most requests will be straightforward to fulfill. If you are unsatisfied with our response, you have the right to lodge a complaint with your national data protection authority.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights with respect to your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt Out of Sale: Numinad does not sell personal information. You do not need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• To submit a CCPA request, email numinad-support@gmail.com with 'CCPA Request' in the subject line. We will verify your identity and respond within 45 days, extendable by an additional 45 days where reasonably necessary.

Numinad is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. Car rental services require drivers to be at least 18 years old (or 21 in many markets), and our platform is designed for adult users accordingly.

If you believe a child under 18 has provided personal information to Numinad, please contact us immediately at numinad-support@gmail.com and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the 'Effective Date' at the top of this page. We encourage you to review this policy periodically.

Your continued use of the Numinad platform after any changes become effective constitutes your acceptance of the updated policy.

For all privacy-related inquiries, data subject rights requests, or concerns about this policy, please contact us at: