1. Scope
This policy describes cookies and similar browser storage on x25pronto.ch and supplements the Privacy notice. We do not use advertising cookies to sell user profiles or personal data.
2. Technically necessary functions
Necessary cookies or comparable storage may be used for sign-in, account activation, session and CSRF protection, language, pricing and booking flows, the driver portal, app/portal state, security functions and a technically necessary consent record. These functions are required for the requested service and cannot be fully disabled without impairing it.
3. SessionStorage
The AI Bot chat and certain communication or interface states are stored in sessionStorage. This allows them to survive a reload and page changes between x25pronto pages within the same browser session. sessionStorage is not intended as permanent cross-session storage.
4. First-party statistics and extended analytics
Data-minimised operational baseline statistics are operated through x25pronto’s own infrastructure without a persistent browser identifier. Extended first-party analytics with connected visitor/session identifiers is enabled only according to the choice made in Cookie settings. Refusing it does not prevent sign-in, account activation, the driver portal, pricing or booking.
5. Google Tag Manager
With consent to extended analytics, Google Tag Manager with container ID GTM-5XQMWR58 is enabled. x25pronto.ch additionally verifies this permission server-side using a signed consent record. The GTM bootstrap is delivered only after a successful backend check through /api/privacy/gtm.js; without valid consent that endpoint remains blocked. Google Tag Manager is a container for delivering and controlling expressly approved tags. Google Analytics is not configured on x25pronto.ch. Any additional connections depend only on tags actually approved in the container.
6. Referral, email and system tracking
Server-side status data for account activation, order communications, the driver portal or the referral programme is not automatically the same as optional analytics-cookie tracking. Signed links, delivery status, open or click events and technical bot/scanner detection may be processed server-side for security, deliverability, evidence or programme administration as described in the Privacy notice. Refusing optional analytics does not disable technically or contractually required system processes.
7. Other external services
Stripe, mapping/routing services, WhatsApp, embedded media or other external services may set their own cookies or similar technologies when actually used. Where an optional integration requires consent, it is loaded only after the relevant approval. Necessary payment, mapping or communication functions may use their providers’ own technically required storage.
8. Changing your choice
Cookie settings can be reopened through the footer at any time. A change applies to future optional processing. Data already transmitted to external services cannot be retrieved retroactively by changing the setting. Local browser data can also be deleted through browser controls.