Text revised on 23 October 2026
Essential storage
Rentacar uses essential cookies and browser storage to save your trip, protect forms, keep account access and recover an interrupted booking. These functions are needed for the service you request. Necessary functions work independently of your optional analytics choice.
- hikkaru_rc_guest: a protected, first-party, Secure, HttpOnly session cookie. The rental draft and access state are held on our server. The session normally expires after 24 hours without activity and may be renewed while you use the site.
- Tab storage: non-secret trip choices, a temporary record of your explicit booking action and technical correlation identifiers may be kept for the current browser tab. Contact details and verification codes are not placed in catalogue links.
- WordPress sign-in: essential sign-in and security cookies are used when you access the administration area. Your browser or hosting protection may use additional essential security mechanisms.
Maps, media and sign-in providers
Typing an address search sends the search text to Google Places. You can choose a town and agree the exact meeting point later. Opening a map or starting an embedded YouTube video contacts the relevant provider. Telegram sign-in takes you to Telegram. These requested features are subject to the providers’ privacy and storage rules; the essential-storage notice does not give blanket consent for unrelated tracking.
Browser push notifications require a separate permission and an explicit subscription. You can unsubscribe in your booking area or revoke notification permission in browser settings. Refusing push does not prevent booking.
Choices
You can clear this site’s cookies and storage or block them in your browser. Doing so can remove your saved draft and require you to confirm your email or Telegram account again. It does not cancel a booking already accepted by HIKKARU.
Google Analytics: your choice
With your permission, HIKKARU Pvt Ltd uses Google Analytics 4 to understand visits, car selection and booking steps. Google Tag Manager manages analytics loading. These Google services do not load before consent. Refusing analytics does not prevent using the site, contact verification or booking. Advertising features are not used in this configuration. Continuing to browse or closing settings does not mean consent.
Analytics uses browser identifiers and technical visit and device information; this is not a promise of fully anonymous collection. Our named analytics events do not include contact details, passport information, exact trip addresses, access keys or booking numbers. Page URLs sent by this integration omit query strings and fragments. An accepted booking request is measured separately from viewing a car or opening checkout.
- Consent choice: rc_analytics_consent_v1 in local browser storage remembers your choice for up to 180 days.
- Google Analytics cookies: _ga and _ga_N2E486JGNC last up to 180 days, without automatic renewal on each event.
- Conversion protection: rc_analytics_attempt_v1 is a temporary marker in this tab, valid for up to 30 minutes. It helps avoid repeated conversions and is not sent as a booking identifier.
Use Cookie settings at the bottom of the catalogue, vehicle or booking page to change your choice. Withdrawal stops further analytics events and removes accessible cookies for this property. Data already sent to Google is not automatically deleted. Clearing browser storage removes your saved choice.
Google receives analytics measurements and processes them using its infrastructure, which may involve processing outside Sri Lanka. See how Google uses information from sites that use its services. This section consolidates the analytics notice published on 22 October 2026.
Temporary technical diagnostics
Separately from Google Analytics, the site may temporarily record technical events on HIKKARU’s server to investigate failures in sign-in and booking. This includes timings, error categories, form-field state, selected trip parameters and technical request or booking references. The diagnostic code excludes contact-field values, passport numbers, verification codes and access credentials. A random correlation identifier may be kept in this tab as rc-journey-trace. These observations do not confirm that a booking was accepted and are not advertising measurements.
Technical diagnostics may be enabled for a limited investigation period. New diagnostic recording stops automatically when that period expires. Previously collected records are removed by scheduled cleanup: the configured retention period is seven days, and older records may be deleted sooner to keep the stored set within 20,000 records. Records awaiting the next cleanup can remain after recording has stopped. Ending recording does not turn off cleanup.
Contact
HIKKARU Pvt Ltd, PV-00265249. Questions: booking@hikkaru.lk. See our Privacy Policy and Rental Terms.