Cookies Policy
Last Updated: January 15, 2025
1. Introduction
This Cookies Policy explains how nepestate ("we," "our," or "us") uses cookies and similar tracking technologies on our real estate investment platform. This policy is part of our Privacy Policy and should be read in conjunction with it.
By using our platform, you consent to the use of cookies in accordance with this policy. You can manage your cookie preferences at any time through our Cookie Settings or your browser settings.
2. What Are Cookies?
Cookies are small text files that are placed on your device when you visit our platform. They help us:
- Remember your preferences and settings
- Keep you signed in securely
- Understand how you use our platform
- Improve your experience
- Protect against fraud
3. Types of Cookies We Use
3.1 Essential Cookies (Strictly Necessary)
Cannot be disabled - Required for platform functionality
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
auth_token | Maintains your login session | Session | nepestate |
session_id | Identifies your unique session | Session | nepestate |
csrf_token | Protects against cross-site request forgery | Session | nepestate |
2fa_verified | Two-factor authentication status | 30 minutes | nepestate |
kyc_status | Identity verification progress | Session | nepestate |
cookie_consent | Stores your cookie preferences | 1 year | nepestate |
locale | Your language preference | 1 year | nepestate |
currency_pref | Your preferred display currency | 1 year | nepestate |
3.2 Functional Cookies
Enhance user experience - Can be disabled but may limit functionality
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
timezone | Display times in your timezone | 1 year | nepestate |
deal_filters | Remember your search preferences | 30 days | nepestate |
dashboard_layout | Your dashboard customization | 1 year | nepestate |
notification_prefs | Your notification settings | 1 year | nepestate |
recently_viewed | Recently viewed deals | 7 days | nepestate |
investment_calculator | Calculator preferences | 30 days | nepestate |
3.3 Analytics Cookies
Help us understand platform usage - Can be disabled
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
_ga | Google Analytics - unique visitor ID | 2 years | |
_ga_* | Google Analytics - session data | 2 years | |
_gid | Google Analytics - daily unique visitor | 24 hours | |
_utm* | Campaign tracking parameters | 6 months | nepestate |
mixpanel | User behavior analytics | 1 year | Mixpanel |
heap_id | User journey tracking | 1 year | Heap |
fullstory_id | Session replay for debugging | 1 year | FullStory |
3.4 Marketing Cookies
Used for targeted advertising - Can be disabled
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
fbp | Facebook pixel tracking | 90 days | |
_gcl_au | Google Ads conversion tracking | 90 days | |
li_sugr | LinkedIn insight tag | 90 days | |
twitter_sess | Twitter conversion tracking | Session | |
_pin_unauth | Pinterest tag | 1 year |
3.5 Performance Cookies
Monitor platform performance - Can be disabled
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
performance_metrics | Page load speed tracking | Session | nepestate |
error_tracking | Error monitoring | Session | nepestate |
api_latency | API performance monitoring | Session | nepestate |
3.6 Security Cookies
Protect against fraud and abuse - Cannot be disabled
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
device_fingerprint | Device recognition for security | 1 year | nepestate |
rate_limit | Prevent abuse and bot attacks | 1 hour | nepestate |
geo_compliance | Location-based compliance | Session | nepestate |
fraud_detection | Anti-fraud monitoring | Session | Stripe |
4. Third-Party Cookies
We work with trusted third parties who may set cookies:
4.1 Payment Providers
- Stripe: Payment processing and fraud prevention
- PayPal: Alternative payment method (where available)
- Local payment providers: Country-specific payment options
4.2 Identity Verification
- Onfido: KYC/AML verification
- Jumio: Document verification
- ComplyAdvantage: Sanctions screening
4.3 Communication Tools
- Intercom: Customer support chat
- SendGrid: Transactional emails
- Twilio: SMS notifications
4.4 Infrastructure
- Cloudflare: Security and performance
- AWS CloudFront: Content delivery
- Google reCAPTCHA: Bot protection
5. Cross-Border Cookie Considerations
As an international platform, cookies may be:
- Processed in multiple countries
- Subject to different regional laws
- Used to determine your location for compliance
- Synchronized across different domains we operate
6. How to Manage Cookies
6.1 Through Our Platform
Click the "Cookie Settings" button in the footer to:
- View all active cookies
- Disable non-essential cookies
- Update your preferences anytime
6.2 Through Your Browser
You can control cookies via browser settings:
Chrome: Settings → Privacy and security → Cookies
Firefox: Settings → Privacy & Security → Cookies
Safari: Preferences → Privacy → Cookies
Edge: Settings → Privacy, search, and services → Cookies
6.3 Mobile Devices
iOS: Settings → Safari → Block Cookies
Android: Chrome → Settings → Site settings → Cookies
6.4 Opt-Out Links
- Google Analytics: tools.google.com/dlpage/gaoptout
- Facebook: facebook.com/settings/ads
- LinkedIn: linkedin.com/psettings/guest-controls
- Twitter: twitter.com/settings/personalization
7. Impact of Disabling Cookies
If you disable certain cookies:
Essential Cookies (Cannot disable)
- Required for platform to function
- Cannot log in without these
Functional Cookies
- May need to re-enter preferences
- Dashboard customizations lost
- Filters reset each session
Analytics Cookies
- We can't improve your experience
- Unable to identify and fix issues
Marketing Cookies
- You'll still see ads, just not targeted
- May see irrelevant advertising
8. Cookie Duration
Cookies have different lifespans:
- Session cookies: Deleted when you close your browser
- Persistent cookies: Remain for set period (see tables above)
- First-party cookies: Set by nepestate
- Third-party cookies: Set by our partners
9. Updates to This Policy
We may update this policy to reflect:
- New cookies or technologies
- Changes in law or regulations
- New features or services
- Feedback from users
Updates will be posted on this page with the "Last Updated" date changed.
10. Regional Compliance
10.1 European Union (GDPR)
- We obtain explicit consent for non-essential cookies
- You can withdraw consent anytime
- We maintain records of consent
- Data minimization principles apply
10.2 California (CCPA)
- "Do Not Sell My Personal Information" option available
- You can opt-out of targeted advertising
- No discrimination for exercising rights
10.3 Brazil (LGPD)
- Similar rights to GDPR
- Local data protection considerations
10.4 Other Jurisdictions
We comply with applicable cookie laws in all jurisdictions where we operate.
11. Children's Privacy
Our platform is not intended for users under 18. We do not knowingly collect cookie data from minors.
12. Do Not Track Signals
Some browsers offer a "Do Not Track" (DNT) signal. Currently, there is no industry standard for DNT signals. Our platform does not currently respond to DNT signals, but you can manage cookies through the methods described above.
13. Local Storage and Similar Technologies
In addition to cookies, we use:
13.1 Local Storage
- Stores larger amounts of data
- Used for user preferences
- Persists until manually cleared
13.2 Session Storage
- Temporary storage
- Cleared when tab closes
- Used for multi-step forms
13.3 IndexedDB
- Stores structured data
- Used for offline functionality
- Investment calculator data
14. Cookie Security
We implement security measures for cookies:
- HTTPOnly flag (prevents JavaScript access)
- Secure flag (HTTPS only)
- SameSite attribute (CSRF protection)
- Encryption of sensitive cookie data
- Regular security audits
15. Questions and Contact
For questions about our use of cookies:
Email: privacy@nepestate.com
Cookie Settings: Available in platform footer
Data Protection Officer: dpo@nepestate.com
Mailing Address:
nepestate, Inc.
[Address Line 1]
[City, State ZIP]
[Country]
16. Consent Management
By using our platform, you consent to essential cookies. For other cookies:
- We request consent on first visit
- You can change preferences anytime
- Consent is stored for 12 months
- We log consent for compliance
17. Cookie Audit Log
We maintain records of:
- Cookies deployed on our platform
- Purpose and legal basis
- Third-party processors
- Data retention periods
- Regular compliance reviews
For more information about how we handle your data, please see our Privacy Policy and Terms of Service.