Cookies and storage

The Nidovo website is owned by:

KorynLabs S.L.
Tax ID (NIF): B23895097
Carrer d'Emili Juncadella, 36
08950 Esplugues de Llobregat, Barcelona, Spain
Email: privacy@nidovo.com
Website: https://www.nidovo.com

This policy describes the use of cookies and similar technologies on the public site and distinguishes them from the technical storage used by Nidovo's apps.

Cookies are small files or identifiers that a website can store in a visitor's browser.

They may be used to maintain sessions, remember preferences, ensure technical functions or, where authorised, obtain browsing statistics.

Not all storage technologies are cookies. Browsers may also use mechanisms such as localStorage or sessionStorage, and mobile apps may use databases and secure storage.

The applicable rules depend on the purpose and operation of each technology, not merely on its name.

As of the effective date of this policy, Nidovo does not plan to use behavioural advertising, remarketing or ad personalisation cookies.

Google Analytics 4 and Google Tag Manager are not declared to be installed or active on the public website. Their possible addition will take place in a later phase and will require a review of this policy and of the consent mechanisms.

Cloudflare is likewise not declared active as of the publication date. If it is added later to protect and deliver the site, the information on the technologies it actually uses will be updated.

Nidovo plans to serve typefaces from its own infrastructure to avoid remote requests to Google Fonts during the ordinary loading of the public website.

The definitive identification of cookies and other technical identifiers must be based on an actual check of the published site.

4.1. Strictly necessary technologies

These are technologies that are essential to provide a requested service, maintain essential functions or technically protect the site.

Where present and compliant with legal requirements, they may be used without consent for non-essential purposes, without prejudice to the duty to inform.

4.2. Preference technologies

These allow certain functional choices to be remembered.

Whether consent is needed will depend on the purpose, the context and whether the person has expressly requested the corresponding feature.

4.3. Analytics technologies

These provide statistical information about visits and interactions.

Nidovo plans to add analytics to the public website in the future, but does not declare it active as of the date of this policy.

Where the technology is subject to consent, it will remain deactivated until valid authorisation has been obtained.

4.4. Advertising technologies

Nidovo does not envisage using personalised advertising cookies, remarketing or cross-site advertising tracking in the configuration described.

The following inventory distinguishes between the status declared for launch and the planned tools:

• Own technical cookies of the site: essential functions, if any. Existence and details subject to technical verification.
• Functional browser storage: requested preferences or functions, if used. Subject to technical inventory.
• Site consent choice: if analytics is enabled, the visitor's choice is stored in the browser (key familymanagement.cookie_consent). At the date of this policy nothing is stored, because no analytics is configured.
• Google Analytics 4: browsing statistics. Not active; planned for a later phase.
• Google Tag Manager: tag management. Not active; planned for a later phase.
• Cloudflare: security and delivery. Pending activation.
• Remote Google Fonts: loading of typefaces from Google. To be replaced by locally hosted fonts before publication.
• Behavioural advertising and remarketing: tracking for advertising purposes. Not planned.

This inventory does not assert that any specific cookie exists where its presence has not been verified.

The names, providers, purposes and durations of any cookies detected must be added to the corresponding public inventory.

Technologies that are strictly necessary to provide a requested service may be exempt from the obligation to obtain consent in the cases provided for by law.

This exemption does not allow analytics, advertising or tracking technologies to be classified as necessary merely because they are useful to Nidovo.

Where a technology requires consent, it will not be activated before consent has been obtained.

The absence of a response, continued browsing or the closing of a notice will not by themselves be interpreted as consent.

If Nidovo adds optional technologies subject to consent, it will provide a mechanism to accept, reject and configure their use.

The options to accept and reject must be presented in a balanced and understandable way.

Visitors will be able to change or withdraw their consent as easily as they gave it.

As long as there are no optional technologies requiring consent, Nidovo does not need to request a fictitious authorisation for tools that are not installed.

If analytics is activated later, the preferences system must be operational before it is allowed to run.

Nidovo plans to use Google Analytics 4 exclusively to analyse the use of the public website and to measure aggregated conversions.

Its activation will be subject to the following conditions:

• Providing prior information on the processing and its providers.
• Obtaining consent where required.
• Preventing the loading or use of analytics identifiers before a valid choice has been made.
• Allowing refusal and the withdrawal of consent.
• Avoiding the deliberate sending of names, email addresses, internal user or family identifiers and private family content.
• Keeping unplanned advertising features disabled.
• Reviewing international transfers and the applicable contracts.

The mere addition of a tag manager does not constitute authorisation to run optional technologies without consent.

Nidovo is considering adding Cloudflare to improve the security and delivery of the website.

Depending on the configuration used, this type of service may use technical identifiers or verification mechanisms.

Before activating it, Nidovo will review the technologies actually used, their purposes, their durations and the corresponding information or consent obligations.

No specific cookies are attributed to Cloudflare while the service is not active and its behaviour has not been verified.

Nidovo plans to host locally the fonts used by the public website.

With this configuration, the ordinary loading of typefaces does not require the browser to request those files directly from Google Fonts.

The implementation must be verified in production to confirm that no remote typeface requests remain.

Nidovo's private apps may use browser storage to keep information necessary for authentication, sessions and preferences.

The keys identified in the web app's code include:

• familymanagement.access_token
• familymanagement.refresh_token
• familymanagement.active_family

The presence of these keys in the code does not mean that they are used on the public website or that they are HTTP cookies.

Authentication tokens are sensitive information and must be protected by appropriate security measures.

The use and retention of this data must be limited to the app's functional and security needs.

The administration app may use local storage to manage the sessions of authorised staff.

The keys identified in the code include:

• familymanagement.admin.access_token
• familymanagement.admin.refresh_token

These keys belong to the administrative environment and are not in themselves cookies of the public site.

Nidovo's mobile app may use secure device storage, local databases and app preferences.

Specifically, the mobile app stores on the device:

• Session: the access and refresh tokens, in the device's secure storage.
• Active family and pending invitation: the identifier of the active family and, if an invitation link is opened before signing in, the invitation code, also in secure storage.
• Offline copy: a local database with a copy of the family data visible to the person and the changes waiting to be synchronised, so that the app works without a connection.
• Hidden items lock: if enabled, a value derived from the PIN (never the PIN in clear) and the failed-attempt counters, in secure storage. Biometrics are handled by the operating system and Nidovo does not store biometric data.
• Home screen widget (Android): a summary of the day's events and the shopping list, so that they can be displayed.
• Preferences and scheduled reminders: language, notification settings and the local reminders scheduled on the device.

These technologies enable functions such as maintaining a session, keeping settings and managing information necessary for the app to work.

In native mobile versions, these mechanisms are not necessarily equivalent to browser cookies.

Third-party integrations and their possible processing are explained, where applicable, in the Privacy Policy.

The duration of a cookie or identifier depends on its purpose and configuration.

Session cookies may be deleted when the corresponding session ends.

Persistent technologies may be kept for a set period or until the user deletes them, depending on how they work.

Nidovo does not attribute specific durations to cookies that have not yet been detected and verified.

When optional technologies are added, the inventory must state their duration or the applicable retention criteria.

Visitors can view, block or delete cookies and website data through their browser's privacy settings.

The procedures depend on the browser and device used.

Deleting or blocking strictly necessary technologies may prevent certain features from working.

Browser controls are complementary to the consent mechanisms that Nidovo is required to provide.

Some technology services may involve processing or access from countries outside the European Economic Area.

Where an international transfer is subject to the GDPR, Nidovo will apply the corresponding legal mechanisms.

The specific information will depend on the providers actually active and their configuration.

The Privacy Policy provides additional information on recipients and transfers.

Nidovo will review this policy when it adds or changes storage, analytics or security technologies or third parties that affect the information provided.

The future addition of Google Analytics 4, Google Tag Manager or Cloudflare will require updating, where appropriate, the inventory and the privacy options before they are put into operation.

The current version is available at:

https://www.nidovo.com/cookies

For any questions about cookies, local storage or data protection:

KorynLabs S.L.
Carrer d'Emili Juncadella, 36
08950 Esplugues de Llobregat, Barcelona, Spain
privacy@nidovo.com

Related documents:

• Terms and Conditions: https://www.nidovo.com/terms
• Privacy Policy: https://www.nidovo.com/privacy