Cookie Policy
How Nestro uses cookies and browser storage, how long data is kept, and how to manage it. Effective 31 October 2026.
1. Who uses cookies
The website nestro.cz and the Nestro web app are operated by AIVANNA s.r.o., company registration number 23754885, registered at Litobratřice č.p. 196, 671 78 Litobratřice. For questions about cookies or personal data protection, contact us at support@nestro.cz.
This policy applies to cookies and similar technologies in web browsers, including mobile browsers. Data processing in the native mobile apps, account data, and related matters are described in the Privacy Policy.
2. What we store in your browser
A cookie is a small piece of data stored in your browser that can be sent back to our site with later requests. For example, it can associate a request with your signed-in session. A sign-in identifier cookie is not anonymous because we can associate it with your account. We do not store your password in it.
We also use localStorage and sessionStorage. The browser does not automatically send data from these stores with each request. The app uses the stored data directly. Local storage persists between visits, while session storage is tied to a particular tab. This policy covers both technologies.
We use our own cookies for sign-in, safely processing invitations you open, and running app features. We also remember your chosen view and navigation state. The current version of Nestro does not use its own advertising pixels or analytics or marketing cookies. Cookie-free audience measurement is described separately below.
3. Nestro cookies
The cookies below are provided by AIVANNA s.r.o. and stored on the Nestro domain you use. A regular website visit does not set all of them. For example, invitation cookies are only set when you open an invitation, and the sign-in cookie is set when you sign in or sign up.
Cookie | Purpose | Retention period |
|---|---|---|
authSession | Associates requests with the signed-in account. | Up to 3 days from sign-in. Deleted when you sign out. |
accountRestoreSession | Short-lived verification for restoring a deleted account after sign-in. | 30 minutes. |
contactInviteToken | Remembers an open contact invitation during sign-in or sign-up. | Up to 14 days. May be removed after the invitation is processed. |
nestro-property-invitation | Processes an open invitation to a shared property after sign-in. | 1 hour. |
nestro-workspace-invitation | Processes an open workspace invitation after sign-in. | 1 hour. |
nestro-workspace | Remembers the selected workspace. We verify permissions separately. | 1 year after it is set. Deleted when you return to your personal workspace. |
nestro-properties-view-modes | Remembers how you chose to display the property list. | 1 year after it is set. |
nestro-building-units-view | Remembers whether to show building units in a grid or table. | 1 year after it is set. |
nestro-conversation-[user ID] | Restores the last selected conversation for the account. | 1 year after it is set. |
sidebar_state | Remembers whether side navigation is expanded in parts of the app that use it. | 7 days after it is set. |
nestro-site-language | Remembers the language selected on the public website. It does not change your account language. | 1 year after it is set. |
The periods above are the configured maximum for a single stored value. Choosing a new setting or signing in again may replace the value and restart the period. Your browser may remove data earlier. Older visits may have left values saved before the settings changed. You can clear them in your browser at any time. We also check sign-in validity on the server.
4. Local storage and session storage
Key and storage type | Purpose | Retention period |
|---|---|---|
nestro:app-nav-stack — sessionStorage | Up to 32 recently visited pages for navigating back in the app. | For the tab session. Reloading the document resets the history. |
nestro:storage-view — localStorage | Your choice of grid or list view for files. | No automatic expiry. Kept until changed or deleted. |
nestro:tenants:columns:[user ID] — localStorage | Column order and visibility in the tenant list. | No automatic expiry. Kept until changed or deleted. |
nestro-spotlight-history:[user ID] — localStorage | Recently opened search results in the app. | No automatic expiry. Kept until overwritten or deleted. |
nestro:individually-seen-conversation-requests:[user ID] — localStorage | Identifies requests you have already seen in conversations. | No automatic expiry. Kept until overwritten or deleted. |
nestro:link-previews:v2 — localStorage | Caches up to 100 link previews. | Profile previews are used for 5 minutes and other previews for 24 hours. A record may remain until it is overwritten or deleted, but is no longer used after that period. |
tus::lease-file:… — localStorage | Technical data for resuming interrupted uploads, such as the upload address and file metadata. The file content itself is excluded. | Removed when the upload completes or is ended. After an interruption, it may remain without automatic expiry until the site data is cleared. |
cookiePreferences — localStorage | Your cookie category choices from personal settings. | No automatic expiry. Kept until changed or deleted. Workspace preferences are stored in the database, outside this key. |
Signing out or deleting your account may leave local data behind. On a shared device, sign out and clear the site data in your browser. Clearing localStorage does not delete documents, messages, or other account data stored on the server.
5. Audience measurement and external services
We use Vercel Web Analytics from Vercel Inc. to measure site visits. According to the provider’s documentation, it does not identify visitors using cookies. It sends data about viewed pages and the visit’s technical context, such as the URL, referring page, device type, browser, and approximate location inferred from the request. It distinguishes visits using a hash derived from the incoming request that expires after 24 hours. Data is still generated during a visit.
See the Vercel Web Analytics privacy documentation. For information on personal data processing and transfers to providers, see the Privacy Policy.
The app uses Google Maps for map features. When maps load, your browser communicates with Google, which receives technical request data and may use its own identifiers depending on the service and your browser settings. When signing in with Google or Apple or connecting a bank, you may be taken to the provider’s website. Its own cookie rules apply there. Those cookies are separate from the Nestro cookies listed above. For details, see Google’s policy and Apple’s policy.
6. Consent and legal bases
Storing or reading data necessary to transmit a communication or provide a service you expressly request does not require consent under Section 89(3) of Czech Act No. 127/2005 Coll. on Electronic Communications. We use this exception for sign-in, related invitations, and the technical state needed for the features and view you choose. It does not apply simply because the data would be useful to the operator.
Where we process personal data in this context, the legal basis is generally the provision of the service under Article 6(1)(b) GDPR or our legitimate interest in secure operations under Article 6(1)(f) GDPR. These grounds for processing personal data do not replace consent where device storage requires it. Analytics and marketing storage that requires consent can only start after you actively give it. Signing up, browsing the website, or accepting the Terms of Service does not constitute such consent.
Cookie preferences are available under Privacy in your account settings. In the current version, saving choices for analytics or marketing does not activate analytics or marketing cookies. These controls do not govern cookie-free measurement by Vercel Web Analytics or settings on other providers’ sites. A workspace preference does not constitute consent from everyone who uses that workspace.
If we introduce optional cookies or similar tracking that requires consent, we will update this information and let you choose in advance. Refusing must be as easy as accepting. You must be able to withdraw consent at any time without affecting the lawfulness of earlier processing.
7. Managing or clearing stored data
Open privacy or site data settings in your browser, find the Nestro domain, and clear its cookies and stored data. Clearing cookies alone may leave localStorage intact. You can also limit future storage. Set these preferences separately for each browser and device.
Blocking sign-in cookies prevents you from using the parts of Nestro that require an account. Clearing other data may restore default views or remove remembered invitations and navigation history. Clearing cookies does not request account deletion or erase data on the server. You do not need to sign in to view public legal articles.
8. Your rights and changes to this policy
Subject to the GDPR, you can request access, rectification, erasure, restriction of processing, and data portability, and object to processing based on legitimate interests. Send requests to support@nestro.cz. You can also lodge a complaint with the Czech Office for Personal Data Protection. The cookies described here are not used for automated decisions with legal or similarly significant effects, or for advertising profiling.
Sign-in data is necessary to provide the signed-in part of the service. You do not have to create an account or give optional consent. For details on recipients, possible transfers outside the EEA, and exercising your rights, see the Privacy Policy.
This policy reflects the position as of 31 October 2026. We will update it if the technologies or purposes change. The current version is available at this address. An update to the policy does not replace your consent.
Was this article helpful?