Cookie Policy

Cookies are small text files a website stores on your device so it can recognise it on your next request. We keep our own use deliberately narrow: cookies keep you signed in and remember preferences such as your language. Our own measurement of how the platform is used happens without cookies. Beyond the essential ones there are two kinds: the cookies of Microsoft Clarity and Google Analytics, set only with your consent, and our own test cookie, which is on unless you decline — see the sections below.

• Essential Cookies

  Always on

  Necessary for the platform to work: keeping you signed in, protecting forms against abuse, and serving the right language version. These cannot be switched off without breaking the site.

  Examples

  • Sign-in session cookies (sb-…-auth-token) and the staff session cookie (admin_session)
  • The locale cookie that remembers which language version to serve you, and nk_consent, which remembers your cookie choice so our servers can honour it

• Functional Cookies

  Preferences

  Remember choices you make so the interface behaves the way you left it. Most of these are not cookies at all — they live in your browser's local storage and never reach our servers.

  Examples

  • Language preference (nk_locale, locale), homepage layout preference (nk_home_mode), light/dark theme and interface sounds
  • Saved favourites, your comparison list and your preferred display currency

• Analytics Cookies

  With your consent

  We measure how the platform is used — which pages are opened, which searches come back empty, how quickly pages load — with our own first-party system, which sets no cookies. Separately, and only if you accept, Microsoft Clarity records anonymised interaction data (clicks, scrolling, mouse movement) so we can see where the interface fails people, and Google Analytics counts visits and where they come from; that is what the cookies below are for. Also only if you accept, our own click and scroll maps record which page elements were clicked and how far pages were scrolled; they set no cookie.

  Examples

  • Microsoft Clarity: _clck and _clsk on this site, plus cookies Microsoft sets on its own domains (clarity.ms, bing.com); Google Analytics: _ga and _ga_<id> on this site — all only after you accept
  • Our own measurement: a per-tab session id in session storage (nk-analytics-session-v2), no cookie, expiring after 30 minutes of inactivity

• Testing Cookie

  On unless you decline

  Now and then we try out a small change to one part of a page — a heading, the order of a section, a picture — by showing some visitors the current version and others the changed one. A random identifier in a cookie makes sure you keep seeing the same version. It records only which version you saw and what you did next on this site, as a count; never who you are. It is on unless you decline in the banner.

  Examples

  • nk_vid: a random identifier, set only on a page where a test is running, so you keep seeing the same version for 90 days
  • What is recorded: the version you saw and, as a count, whether you went on to search or open a listing — never your IP address, and never linked to an account

• Marketing Cookies

  Not used

  We do not use advertising or marketing cookies. There is no Google Ads, no Meta/Facebook Pixel and no other advertising SDK anywhere on this platform; Google Analytics runs with Google signals and ad personalisation switched off, and we do not sell or share visit data for advertising purposes.

  Examples

  • No ad-targeting or retargeting pixels
  • No cross-site profiling and no data sold to advertisers

Our own measurement runs entirely on our servers and needs no consent because it sets no cookies. Microsoft Clarity and Google Analytics are separate: they are third-party services, they do set cookies, and they run only if you accept. Our own click and scroll maps are first-party and set no cookie, but they too run only if you accept.

• No cookies. Your visit is grouped into a session using an identifier in your tab's session storage, which disappears when the tab closes and expires after 30 minutes of inactivity.
• Repeat visits within one day are recognised through a one-way hash of your IP address and browser, mixed with a secret that changes every day — so the same visitor cannot be linked from one day to the next.
• Your IP address itself is never stored. Location is recorded only as a country, and we use no device fingerprinting.
• For signed-in users, actions that already belong to your account (such as an inquiry you send) are recorded with your account id.
• Microsoft Clarity, only with your consent, records how the page is used: clicks, scrolling, mouse movement and the structure of the page, replayed as an anonymised session. Text you type is masked by Clarity before it leaves your browser. It sets the _clck and _clsk cookies, which expire after one year and one day respectively. You can withdraw consent at the bottom of this page, and Clarity then stops setting them.
• Google Analytics, only with your consent, counts visits: the pages viewed, where the visit came from, and the device type and approximate location. It sets the _ga and _ga_<id> cookies, which expire after two years. Google signals and ad personalisation are switched off, so the data is not used for advertising. You can withdraw consent at the bottom of this page; Google Analytics then stops setting the cookies and the ones on this site are deleted.
• Page tests. Now and then we show two versions of one part of a page and count which one works better. The test cookie (nk_vid) is a random identifier that keeps your version the same for 90 days; it is set only on pages where a test is running, it is never stored with your visit and never joined to an account. We record only which version you saw and what you did next, as a count. Decline in the banner, or send a “Do Not Track” or Global Privacy Control signal, and you always see the standard version and are not counted.
• Our own click and scroll maps are first-party, set no cookie and run only with your consent. They record which named page elements were clicked and how far a page was scrolled, never what you type. Page views are kept for 90 days and daily totals for 13 months.

Detailed records are deleted automatically on the schedule below. What remains is aggregated statistics that cannot be traced back to an individual visitor.

Microsoft Clarity and Google Analytics are the only third-party services that receive data about how you use the platform, and only with your consent. Beyond them, public pages contact only the services below, and each receives no more than the technical data needed to deliver its part of the page:

OpenStreetMap and CARTO

supply the map tiles; loading a map sends them your IP address, as any image on the internet would

Vercel

hosts the platform and delivers pages to your browser

Supabase

stores the platform's data and manages sign-in sessions

Microsoft Clarity

records anonymised page interactions for usability analysis, only after you accept analytics cookies; it receives your IP address, browser and the pages you view, and Microsoft states it does not use this data for advertising

Google Analytics

counts visits and their sources for traffic statistics, only after you accept analytics cookies; it receives your IP address, browser and the pages you view, and runs with Google signals and ad personalisation switched off

We place no advertising cookies ourselves, and Google Analytics runs with its advertising features off. Microsoft Clarity, once you accept it, does set cookies on Microsoft domains that can identify the same browser on other sites using Microsoft services; declining, or withdrawing at the bottom of this page, prevents them.

You can control and manage cookies in various ways. Please note that removing or blocking cookies may impact your user experience and some functionality may no longer be available.

• Chrome: Settings → Privacy and security → Third-party cookies
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Settings → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Manage cookies

You can manage cookies through your browser settings:

Independently of your cookie settings, we honour the “Do Not Track” and Global Privacy Control signals: if your browser sends either, your visit is not recorded in our statistics at all and you are not included in page tests. Clearing your browser's site data also removes locally stored preferences such as favourites and your comparison list.