Skip to content

Legal

Cookie policy

Every cookie and every piece of browser storage hyrja.al uses, what it's for and how long it stays.

What cookies are

Cookies are small text files a website stores in your browser. Local storage, session storage and IndexedDB are similar browser storage that stays on your device and isn't sent to us automatically. The law (Albanian Law no. 124/2024 on personal data protection and, for visitors from the EU, the GDPR and ePrivacy rules) lets a site use storage that is strictly necessary for a service you ask for; anything else needs your consent.

Categories

  • Necessary — always on. Signing in, security, your language and currency, business registrations and your cookie choice. The site can't work properly without them.
  • Analytics — off unless you allow it. Google Analytics 4 (Google) and Microsoft Clarity (Microsoft) measure how the site is used. Before you allow it, Google Analytics only receives cookieless signals (Google Consent Mode): no cookies are set in your browser.
  • Marketing — off unless you allow it. hyrja.al does not currently use any advertising or marketing tool.

Browser storage for features you use (saved properties, recently viewed, comparison, drafts) is part of this category: it's first-party, it only exists because you used the feature, it isn't used to track you and it never leaves your device on its own.

Cookies we set

Cookies we set
NameTypePurposeCategoryDurationSet by
better-auth.session_tokenCookieKeeps you signed in to your account.Necessary30 dayshyrja.al (first party)
better-auth.session_dataCookieShort-lived signed copy of your session so pages don't check the database on every request.Necessary5 minuteshyrja.al (first party)
better-auth.stateCookieOnly while you sign in with Google: protects the sign-in against forged requests.Necessary5 minuteshyrja.al (first party)
hyrja_localeCookieRemembers the language you chose (sq, en, it).Necessary12 monthshyrja.al (first party)
hyrja_currencyCookieRemembers the display currency you chose (EUR, ALL, USD).Necessary12 monthshyrja.al (first party)
hyrja_bizCookieOnly if you register a business: lets this browser see its registration while it waits for review. Signed, not readable by scripts.Necessary180 dayshyrja.al (first party)
hyrja_consentCookieStores your cookie choice (policy version, analytics yes/no, marketing yes/no, date and a random id with no personal data).Necessary12 monthshyrja.al (first party)
_gaCookieGoogle Analytics: a random id that tells visits from the same browser apart.Analytics — only if you accept analytics2 yearsGoogle (third party)
_ga_8BX27MQVNBCookieGoogle Analytics: keeps the state of the current visit (session).Analytics — only if you accept analytics2 yearsGoogle (third party)
_clckCookieMicrosoft Clarity: a random id that links visits from the same browser.Analytics — only if you accept analytics1 yearMicrosoft (third party)
_clskCookieMicrosoft Clarity: groups the pages of one visit into one recording.Analytics — only if you accept analytics1 dayMicrosoft (third party)
CLIDCookieMicrosoft Clarity: identifies the browser across sites that use Clarity (set on clarity.ms).Analytics — only if you accept analytics1 yearMicrosoft (third party)

The Google Analytics and Microsoft Clarity cookies are only set if you accept analytics. CLID is stored on Clarity's own domain (clarity.ms).

On the live site the sign-in cookies carry the “__Secure-” prefix; in local development they don't.

Browser storage

Browser storage
NameTypePurposeCategoryDurationSet by
hyrja:v1Local storageYour saved properties, recently viewed, comparison list and a local copy of your account data (messages, viewings, notifications, settings) so pages load instantly.Necessary (functional)Until you delete it or clear site datahyrja.al (first party)
hyrja:collectionsLocal storageNames of the collections you create for saved properties.Necessary (functional)Until you delete it or clear site datahyrja.al (first party)
hyrja:listing-drafthyrja:listing-extras:*Local storageAutosaves a listing you are writing so nothing is lost if the page closes.Necessary (functional)Until the listing is published or the draft is discardedhyrja.al (first party)
hyrja-listing-filesIndexedDBPhotos added to a listing draft, so they survive a reload before you publish.Necessary (functional)Until the listing is published or the draft is discardedhyrja.al (first party)
hyrja:privacyLocal storageA copy of your privacy settings from Account → Settings.Necessary (functional)Until you delete it or clear site datahyrja.al (first party)
hyrja:checkoutSession storageYour plan choice while you pay on the checkout page. Deleted when checkout finishes.Necessary (functional)Until the tab is closedhyrja.al (first party)
/sw.jsService worker + pushOnly if you turn on push notifications: a small background script and this device's push subscription, so hyrja.al can send you notifications you chose. No page caching, no tracking.Necessary (functional)Until you turn push off, log out or clear site datahyrja.al (first party)

You can remove all of it at any time by clearing this site's data in your browser. Saved properties and saved searches are also kept in your account when you're signed in.

Third parties

Only if you allow analytics: Google Analytics (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Ireland Operations Ltd.) set the analytics cookies listed above and receive usage data from your browser (pages, clicks, device type, approximate location from your IP address). We never send them your name, email, phone number or messages. We don't load advertising or social-media scripts.

Map images are loaded from OpenStreetMap's tile servers (tile.openstreetmap.org): like any web request, they see your IP address, but no cookies are set through our site. If you choose to sign in with Google or to pay for a plan through Whop, you go to their website and their own cookie policies apply there. The Instagram and Facebook icons are plain links.

Changing your choice

You can change or withdraw your choice at any time — here or from “Cookie settings” at the bottom of every page. Withdrawing is as easy as giving consent and doesn't affect anything you can do on the site. We keep a record of each choice (date, choice, policy version, a random id and a one-way hash of your IP address) as proof of consent. We ask again after 12 months or when this policy changes.

Last updated: 27 September 2026.

List property