A hosting routing cookie was observed on 29 September 2026. The site uses locally served fonts and media and does not deploy optional tracking.
01About this notice#
This notice concerns cookies, browser storage and similar technologies on the Nordstack Limited website. Read it with the Privacy Notice.
A cookie is information stored on your device by a website. Similar technologies include local storage, tracking pixels and some device-access techniques. Applicable data-protection and ePrivacy rules depend on what a technology does, not only its name.
02Technology inventory#
| Item / provider | Purpose and observation | Duration and consent assessment |
|---|---|---|
| GAESA Replit / Google's serving infrastructure | First-party cookie observed on nordstack.ltd, path /. Replit describes it as Google App Engine session affinity: an opaque routing identifier used to send requests to the right application instance, not application content or sensitive data. | Observed expiry approximately 30 days after inspection. Used for necessary infrastructure routing, not optional analytics. |
| Application cookies and device storage | No application-created cookies or application device storage identified. | This is a dated observation, not a guarantee for every browser or future configuration. |
| Contact submission handling | A request ID is generated in page memory. The server uses temporary IP and request-fingerprint records for reliability and abuse prevention, without a tracking cookie. | Page state is transient. The server's ten-minute and 24-hour validity windows and lazy cleanup are explained in the Privacy Notice; they are not Make or Gmail deletion periods. |
| Fonts | The website serves Inter, JetBrains Mono, Outfit and Space Mono locally under their licences. | Local font files may be held in ordinary browser HTTP cache according to browser/server settings. |
| House-tour media and imagery | Served from the website's own resources, not a third-party video-player embed. | Ordinary resource delivery and browser caching; no video tracking cookie was identified. |
| Google Calendar | The contact page uses an external booking link, not an embedded calendar. The booking site is opened only when selected. | Google's separate service may use its own cookies and storage; its privacy and cookie information applies there. |
| Optional analytics, advertising and tracking embeds | None deployed on this website. | Any future consent-requiring technology must remain off until valid consent. |
Replit's publishing documentation (opens in a new tab) explains that its Google serving infrastructure adds GAESA and that application code cannot change or disable it. The observed cookie lacked Secure and HttpOnly attributes; the provider documents that behaviour for this routing identifier.
03Limits of browser observations#
The GAESA observation was made on 29 September 2026 using a browser visit to nordstack.ltd. Browser-visible observations are time-limited and do not establish server-side retention, provider processing, access locations or every browser or geographic variation.
04Necessary technologies#
Where a technology is strictly necessary to provide a service you expressly request, applicable law may permit it without consent. “Useful to us” is not the same as strictly necessary. The routing cookie is included above for transparency rather than hidden behind a blanket “no cookies” statement.
05Optional technologies and your choices#
We do not deploy optional analytics, advertising cookies or similar tracking technologies, so there is no optional-tracking consent banner.
If consent-requiring technology is introduced, it must be explained and blocked until opt-in, with equally accessible acceptance and rejection, appropriate category choices and withdrawal as easy as giving consent. A future settings interface must actually control those technologies, not merely display a notice.
06Browser controls#
Your browser may let you inspect, block or delete cookies and site storage. Blocking genuinely necessary technology can affect the feature it supports; a routing cookie may be set again on a later request. Browser controls do not replace a website's duty to obtain consent when required.
07External websites#
Choosing Google Calendar or another external link takes you to a service controlled by another operator. Review that service's privacy and cookie information. Merely visiting Nordstack's website is not permission to track you on another service.
Google provides its Privacy Policy (opens in a new tab) and cookie information (opens in a new tab). Those documents do not replace Nordstack's own notice about its handling of meeting details.
08Contact#
Contact contact@nordstack.ltd about this notice. Further personal-data information and rights are explained in our Privacy Notice.