01 What cookies are
Cookies (cookies) are small text files that a website stores on your computer, mobile device or tablet when you visit it. A cookie contains a short string of data (usually the page name, expiry time and a unique identifier) which allows the website to "recognise" your browser on subsequent visits.
Similar mechanisms (local storage, session storage, pixels and other network identifiers) used for the same purpose are also covered by this Policy, regardless of whether we refer to them explicitly as "cookies" in this document.
02 Why we use cookies
We use cookies on the Propertico platform (hereinafter: the Platform) to:
- provide core functionality of the site (sign-in, basket, security checks);
- remember your settings and choices (language, display, currency, search filters);
- understand how the Platform is used and which content users find useful;
- detect technical issues and speed up secondary parts of the site;
- show relevant content and offers, only with your consent.
03 Cookie categories
We divide cookies into four categories. On your first visit to the Platform, a consent banner appears in which you can accept all, reject all, or individually choose particular categories. We remember and respect your choice until you change it.
Necessary
Cookies that are technically essential for the Platform to operate: maintaining a signed-in user session, security, abuse protection, and remembering your consent choice. These cookies are set automatically and cannot be switched off. Without them, the Platform simply does not work. We do not use them for tracking, profiling or advertising.
Preferences
Cookies that remember your choice of language, search-results display, last-used filters, map display and similar. They help the Platform look and behave the way you last left it. We set these only if you give consent for this category.
Statistics (analytics)
Cookies that show us how many people visit the platform, which pages they look at, how they reach us and where they run into difficulty. The data is processed in aggregate and is not linked to your name or contact details. We use Google Analytics 4 and Microsoft Clarity, which alongside statistics also records how the interface is used (see the section on third-party cookies).
Marketing
Cookies that let us measure how well our advertising campaigns perform and show you more relevant ads, both on the platform and on other websites. We use Meta Pixel and Google Ads. If you do not consent to this category you will still see ads, but they will not be personalised and we will not measure conversions.
04 Our cookies and local storage
Besides third-party cookies, we store some data directly in your device's browser. Technically these are cookies and what is known as local storage; the same consent rules apply to both.
| Name | Purpose | Category | Duration |
|---|---|---|---|
propertico_consent | your chosen cookie categories | Necessary | local storage, until cleared |
propertico_consent_id | anonymous identifier for the consent record | Necessary | local storage, until cleared |
next-auth.session-token | keeping you signed in to your account | Necessary | cookie, until sign-out or at most 30 days |
NEXT_LOCALE | remembering your chosen language | Necessary | cookie, 12 months |
pc_bucket | assigning you to a group when new features are rolled out gradually | Necessary | cookie, 12 months |
propertico_contact | first name, surname, email address and telephone number used to fill in the contact form — stored only if you tick "Save my details for next time" | Preferences | cookie, 12 months |
propertico_favorites | listings saved while you are not signed in | Preferences | local storage, until cleared |
propertico_recently_viewed | recently viewed listings | Preferences | local storage, until cleared |
propertico_notes | personal notes on listings while you are not signed in | Preferences | local storage, until cleared |
propertico_visitor_id | anonymous device identifier used to count interactions with listings | Statistics | local storage, until cleared |
This data stays on your device and you can remove it at any time by clearing the site's data in your browser settings (see "Managing cookies in your browser").
05 Third-party cookies
Some cookies and similar technologies are set by external service providers we use. They act either as independent controllers or as our processors, and have their own privacy policies. These are the providers we currently use:
- Google Analytics 4 (Google Ireland Limited), category Statistics. Audience measurement and understanding user behaviour in aggregate. Cookies
_ga,_ga_*,_gid,_gat. More information: policies.google.com/technologies/cookies. - Google Ads (Google Ireland Limited), category Marketing. Measuring advertising campaign performance. Cookie
_gcl_au. - Meta Pixel (Meta Platforms Ireland Limited), category Marketing. Conversion measurement and more relevant ads on Facebook and Instagram. Cookies
_fbp,_fbc. Alongside cookies, we may send data about the same events from our server through the Meta Conversions API; in that case cryptographic hashes of your email address and telephone number are transferred, together with your IP address and browser details. - Microsoft Clarity (Microsoft Ireland Operations Limited), category Statistics. Heatmaps and recordings of interface use, to find where users get stuck. Input into form fields is masked and not recorded. Cookies
_clck,_clsk,CLID,ANONCHK,MR,MUID,SM. - Sentry (Functional Software, Inc.), category Necessary. Reporting technical errors for platform stability and security. When an error occurs, a recording of the part of the session in which it arose may also be captured. It sets no advertising cookies and is not used for marketing.
- OpenStreetMap (OpenStreetMap Foundation), category Necessary. Maps on listing pages are loaded from OpenStreetMap servers, which means your device's IP address is transferred to that service. The map is an integral part of the listing display.
- Embedded content (for example videos or social sharing), categories Preferences, Marketing or Statistics, depending on the provider. Set only on pages where such content is embedded and only with consent for the relevant category.
We regularly update the list of specific cookies and their providers. We track and record the version of the list with each of your consents (see "Our consent system").
06 Cookie duration
By duration, we group cookies into two categories:
- Session: exist only while the browser is open. They are deleted automatically when you close the browser or the Platform tab.
- Persistent: remain on your device until the expiry date defined in the cookie itself or until you delete them via your browser settings. The lifetime of individual cookies can range from a few minutes up to a maximum of 24 months.
We keep the record of your consent (status, categories, timestamps) so that we can honour your choice and prove that consent was given — 24 months from the last change, or longer if your relationship with the platform continues.
07 Our consent system
Consent is collected via a banner shown on your first visit to the Platform. The banner is aligned with the General Data Protection Regulation (GDPR) and the ePrivacy Directive. All categories other than Necessary are initially switched off and are activated only by your explicit action.
Actions you can take
- Accept all: enables all four categories.
- Reject all: enables only the Necessary category; all other categories remain switched off.
- Save preferences: enables only the categories you have selected.
- Withdraw consent: you can withdraw consent at any time. Clearing the site's data in your browser settings also clears the remembered choice, so the consent banner appears again and you can choose differently. You can also request withdrawal by writing to [email protected]. Withdrawal does not affect the lawfulness of processing before it.
What we record with each consent
Each time you take one of the actions above, we create or update a record of your consent in our database. In line with the accountability principle of the GDPR, this record serves as proof that consent was given and contains:
- an anonymous consent-subject identifier (
consentSubjectId); - a link to your user account, if you are signed in;
- consent status: accepted, rejected, customized or withdrawn;
- the selected categories and, where relevant, a list of individually approved or rejected providers;
- a cryptographic hash of your IP address; we do not store the original IP address;
- the browser identifier (user agent) and the domain on which the consent was given;
- the version of the Policy, the version of the banner and the version of the cookie list at the moment consent was given, the language and the jurisdiction (default: Croatian, EEA);
- the full history of actions with timestamps, so that every "accept", "reject", "save preferences" or "withdraw" action can be reconstructed.
This data is kept solely to demonstrate and uphold your consent. We do not use it for marketing, profiling or any other purpose outside cookie management.
08 Your rights
In relation to cookies and the data they collect, you have the following rights:
- Right to choose: to switch each non-Necessary category on or off.
- Right to withdraw: to withdraw consent at any time, in the way described in "Our consent system".
- Right of access: to request to see the record of your consent (including the action history).
- Right to erasure: to request deletion of the record, except for the portion we must retain to demonstrate lawful processing.
- Right to lodge a complaint: to file a complaint with the competent supervisory authority (in the Republic of Croatia: the Personal Data Protection Agency, azop.hr).
Exercising these rights is free of charge. Send your request to [email protected]. We will reply at the latest within one month of receiving it.
09 Managing cookies in your browser
Independently of our banner, you can review, block or delete cookies at any time directly in your browser settings. Please note that blocking Necessary cookies may prevent the Platform from working correctly. Some features (e.g. sign-in, basket, security checks) may then become unavailable.
Browser-vendor guides:
General information about cookies and how to manage them is available at www.allaboutcookies.org.
10 Legal basis for processing
The legal basis for setting cookies depends on the category:
- Necessary cookies: set on the basis of legitimate interest (Art. 6(1)(f) GDPR) and the technical necessity of providing the information-society service you have explicitly requested.
- Preferences, Statistics, Marketing: set exclusively on the basis of your consent (Art. 6(1)(a) GDPR, Art. 5(3) of the ePrivacy Directive).
- Keeping the consent record: based on compliance with a legal obligation (Art. 6(1)(c) GDPR) and the legitimate interest of demonstrating lawful processing (Art. 7(1) GDPR).
11 Changes to this Policy
We may amend the Cookies Policy due to changes in our services, the technologies we use or the legal framework. We will inform you of significant changes via the Platform and, where necessary, ask for your consent again. The date of the last change and the version of the Policy are shown in the header of this page.
We store the version of the Policy that was in force at the moment you gave your consent in the consent record (see "Our consent system"), so you can always check which version you accepted.
12 Contact
The personal-data controller and operator of the Platform is Croator d.o.o. (hereinafter: CROATOR).
All questions related to cookies, this Policy or your consent record can be sent to the listed email address. We will respond in the shortest possible time.