1. Scope
This Cookie and Analytics Notice explains how NESTA SITES INC. uses cookies, local storage, scripts, pixels, session technologies, analytics tools, chat widgets, and similar technologies on our own platform-owned websites, landing pages, and applications.
This notice should be read together with our Privacy Policy.
This notice does not, by itself, replace the separate visitor-facing privacy or tracking notices that should appear on customer-hosted websites published through the platform.
2. Technologies We Use
Depending on the page, environment, and enabled features, we may use the following categories of technologies.
2.1 Strictly Necessary Technologies
These technologies help the Services function, authenticate users, protect sessions, maintain security, and remember essential state.
Examples may include:
- authentication and session cookies;
- security-related session data;
- load balancing or infrastructure-level request handling; and
- basic UI state storage needed to remember preferences.
2.2 Preferences and Local Storage
We may use local storage or similar browser storage to remember privacy choices, interface settings, audit flow state, and navigation preferences. When advertising technologies are active for your visit, we may also store campaign-attribution information such as UTM and click identifiers, and attach it to a report or purchase you request.
A short-lived cookie records only whether your location uses opt-in or opt-out privacy defaults. It does not identify you.
2.3 Analytics and Performance Tools
We may use analytics and diagnostics tools to understand how our own platform pages and applications are used, troubleshoot issues, and improve performance.
These tools may collect information such as:
- page visits and navigation paths;
- browser, device, and operating system details;
- referrer information;
- approximate location inferred from IP address; and
- interaction, performance, or error signals.
Umami website analytics stays off until you enable analytics through Privacy Choices. Marketing-site analytics excludes URL queries, fragments, referrers and form identifiers from its event payloads. Network requests still disclose technical connection information to the analytics provider; cookie-free does not mean that no information is processed.
Session recording through Microsoft Clarity is separate. It stays off unless you turn it on.
2.4 Advertising and Conversion Tools
When advertising technologies are active for your visit (see "Your Choices" below), we may use Meta Pixel, Reddit Pixel, and related server-side conversion APIs to measure campaign performance and attribute actions such as a requested Market Score report or checkout. These tools may process page activity, event metadata, click or cookie identifiers, IP address, browser user agent, and a cryptographically hashed email address when supplied during a conversion event.
2.5 Support and Communications Tools
We may use support or chat tools that help us communicate with users, route inquiries, or provide in-product assistance.
2.6 Billing and Embedded Third-Party Tools
If you enter a checkout, payment, or billing flow, payment processors and embedded vendors may use their own cookies or similar technologies subject to their own policies.
3. Current Launch Configuration Notes
Depending on the product surface and enabled environment, Nesta may use:
- session-based authentication;
- local storage for privacy and interface preferences and, when advertising is active, campaign attribution;
- a short-lived cookie that records whether your location uses opt-in or opt-out privacy defaults;
- Umami for website analytics according to the defaults described below and your saved choice;
- Microsoft Clarity for session recording only if you turn session recording on;
- Meta Pixel and Meta Conversions API for advertising attribution when advertising is active;
- Reddit Pixel and Reddit Conversions API for advertising attribution when advertising is active;
- Brevo chat/support tooling only if you turn support chat on; and
- Stripe or other billing vendors on billing pages or payment flows.
We update this notice as the live production stack changes.
4. Hosted Websites Published for Customers
Customer-hosted websites published through the platform may use:
- hosted forms and lead capture;
- conversion tracking for actions such as phone, email, or map clicks; and
- privacy-focused analytics tools, including tools designed not to use cookies by default.
Even where a hosted website analytics tool is designed to operate without cookies by default, the hosted website should still disclose the collection of visitor and analytics information in its own visitor-facing privacy notice.
If customers add custom scripts, advertising pixels, chat widgets, embeds, or other trackers to hosted websites, additional notices or consent mechanisms may be required.
5. Your Choices
On the Nesta marketing website, advertising measurement stays off until you accept it through Privacy Choices.
Umami website analytics stays off until you enable analytics through Privacy Choices.
Everywhere, session recording and support chat stay off unless you turn them on. Saved rejections take precedence over default settings.
Opting out takes effect immediately and is remembered on that browser. It also removes the advertising cookies and stored campaign-attribution information that our site can access. You can reopen Privacy Choices from the site footer at any time to change any category.
You can also control cookies and similar technologies by:
- adjusting browser settings;
- clearing cookies or local storage;
- using device privacy controls; and
- using the Privacy Choices control we provide.
Blocking or disabling some technologies may affect the functionality of the Services.
6. Do Not Track and Similar Signals
Some browsers offer "Do Not Track" signals. There is not yet a consistent industry standard for responding to all such signals.
We honor Global Privacy Control as an opt-out from advertising technologies. When a recognized Global Privacy Control signal is active, advertising technologies stay off, including in locations where they would otherwise be on by default.
7. Changes
We may update this notice from time to time to reflect changes in the Services, technology stack, or legal requirements.
8. Contact
If you have questions about this notice, contact:
- Privacy: support@nesta.so
- Address: Winnipeg, MB, Canada