1. Scope
This Cookie and Analytics Notice explains how NESTA SITES INC. uses cookies, local storage, scripts, pixels, session technologies, analytics tools, chat widgets, and similar technologies on our own platform-owned websites, landing pages, and applications.
This notice should be read together with our Privacy Policy.
This notice does not, by itself, replace the separate visitor-facing privacy or tracking notices that should appear on customer-hosted websites published through the platform.
2. Technologies We Use
Depending on the page, environment, and enabled features, we may use the following categories of technologies.
2.1 Strictly Necessary Technologies
These technologies help the Services function, authenticate users, protect sessions, maintain security, and remember essential state.
Examples may include:
- authentication and session cookies;
- security-related session data;
- load balancing or infrastructure-level request handling; and
- basic UI state storage needed to remember preferences.
2.2 Preferences and Local Storage
We may use local storage or similar browser storage to remember privacy choices, interface settings, audit flow state, and navigation preferences. If advertising is enabled, we may also store campaign-attribution information such as UTM and click identifiers.
2.3 Analytics and Performance Tools
We may use analytics and diagnostics tools to understand how our own platform pages and applications are used, troubleshoot issues, and improve performance.
These tools may collect information such as:
- page visits and navigation paths;
- browser, device, and operating system details;
- referrer information;
- approximate location inferred from IP address; and
- interaction, performance, or error signals.
2.4 Advertising and Conversion Tools
With your advertising choice, we may use Meta Pixel, Reddit Pixel, and related server-side conversion APIs to measure campaign performance and attribute actions such as a requested Market Score report or checkout. These tools may process page activity, event metadata, click or cookie identifiers, IP address, browser user agent, and a cryptographically hashed email address when supplied during a conversion event.
2.5 Support and Communications Tools
We may use support or chat tools that help us communicate with users, route inquiries, or provide in-product assistance.
2.6 Billing and Embedded Third-Party Tools
If you enter a checkout, payment, or billing flow, payment processors and embedded vendors may use their own cookies or similar technologies subject to their own policies.
3. Current Launch Configuration Notes
Depending on the product surface and enabled environment, Nesta may use:
- session-based authentication;
- local storage for privacy and interface preferences and, when advertising is enabled, campaign attribution;
- Umami for website analytics when analytics is enabled;
- Microsoft Clarity for session and usage analytics when analytics is enabled;
- Meta Pixel and Meta Conversions API for advertising attribution when advertising is enabled;
- Reddit Pixel and Reddit Conversions API for advertising attribution when advertising is enabled;
- Brevo chat/support tooling when support chat is enabled; and
- Stripe or other billing vendors on billing pages or payment flows.
We update this notice as the live production stack changes.
4. Hosted Websites Published for Customers
Customer-hosted websites published through the platform may use:
- hosted forms and lead capture;
- conversion tracking for actions such as phone, email, or map clicks; and
- privacy-focused analytics tools, including tools designed not to use cookies by default.
Even where a hosted website analytics tool is designed to operate without cookies by default, the hosted website should still disclose the collection of visitor and analytics information in its own visitor-facing privacy notice.
If customers add custom scripts, advertising pixels, chat widgets, embeds, or other trackers to hosted websites, additional notices or consent mechanisms may be required.
5. Your Choices
On your first visit, optional analytics, advertising, and support technologies remain off until you make a choice. You can later reopen Privacy Choices from the site footer to accept, reject, or withdraw consent by category.
You can also control cookies and similar technologies by:
- adjusting browser settings;
- clearing cookies or local storage;
- using device privacy controls; and
- using the Privacy Choices control we provide.
Blocking or disabling some technologies may affect the functionality of the Services.
6. Do Not Track and Similar Signals
Some browsers offer "Do Not Track" signals. There is not yet a consistent industry standard for responding to all such signals.
We honor Global Privacy Control as an opt-out from advertising technologies. When a recognized Global Privacy Control signal is active, our privacy controls keep the advertising category disabled.
7. Changes
We may update this notice from time to time to reflect changes in the Services, technology stack, or legal requirements.
8. Contact
If you have questions about this notice, contact:
- Privacy: support@nesta.so
- Address: Winnipeg, MB, Canada