Cookie Policy

1. What Are Cookies?

• –Remember your preferences and settings;
• –Keep you logged in between sessions;
• –Understand how you use the site;
• –Personalize content and ads.

1.2 Similar Technologies

• Local Storage
  • –Stores data in your browser (like cookies but with larger capacity)
  • –Used for app settings, preferences, and temporary data
• Pixels / Web Beacons
  • –Invisible 1x1 pixel images embedded in emails or web pages
  • –Track whether you opened an email or viewed a page
• Device Identifiers
  • –Unique IDs assigned to your mobile device (UDID, Advertising ID)
  • –Used in mobile apps for analytics and personalization
• Session IDs
  • –Temporary identifiers for your browsing session
  • –Expire when you close the browser

2. Why We Use Cookies

We use cookies for the following purposes:

2.1 Essential Functionality (Strictly Necessary)

• –Keep you logged in to your account;
• –Remember your language and regional preferences;
• –Enable secure transactions and payments;
• –Protect against fraud and abuse;
• –Store your cookie consent preferences.

Legal Basis: Contract performance, legitimate interests (GDPR Article 6(1)(b), (f)). Can be disabled: ❌ No — required for the Service to function.

2.2 Performance and Analytics

• –Understand how users interact with the Platform;
• –Identify popular features and content;
• –Measure page load times and errors;
• –Improve user experience and fix bugs;
• –Conduct A/B testing.

Legal Basis: Consent (GDPR Article 6(1)(a)) or legitimate interests for anonymized analytics. Can be disabled: ✅ Yes.

2.3 Personalization and Preferences

• –Remember your display preferences (dark mode, font size);
• –Save your search filters and favorites;
• –Personalize content and recommendations;
• –Show relevant property listings based on your searches.

Legal Basis: Consent or legitimate interests. Can be disabled: ✅ Yes (but may reduce functionality).

2.4 Advertising and Marketing

• –Show relevant ads based on your interests (if applicable);
• –Measure ad campaign effectiveness;
• –Retarget users who visited our site (remarketing);
• –Track conversions from ads.

Legal Basis: Consent (GDPR Article 6(1)(a)). Can be disabled: ✅ Yes.

2.5 Social Media Integration

• –Enable social media sharing buttons;
• –Allow login via Google, Facebook, or Apple Sign-In;
• –Show social media feeds or widgets.

Legal Basis: Consent. Can be disabled: ✅ Yes.

3. Types of Cookies We Use

3.1 By Duration

• Session Cookies
  • –Temporary cookies that expire when you close your browser
  • –Used for login sessions, shopping carts, and form data
• Persistent Cookies
  • –Remain on your device for a set period (days, months, or years)
  • –Used for remembering preferences, analytics, advertising

3.2 By Source

• First-Party Cookies
  • –Set by DomuHq (domuhq.cz domain)
  • –Used for essential functionality, preferences, analytics
• Third-Party Cookies
  • –Set by external services (Google Analytics, payment processors, ad networks)
  • –Used for analytics, advertising, social media integration

3.3 By Category (Detailed)

• Strictly Necessary Cookies (cannot be disabled)
  • –domu_session — Keeps you logged in — Session — First-party
  • –domu_csrf — Protects against CSRF attacks — Session — First-party
  • –domu_lang — Remembers language preference — 1 year — First-party
  • –domu_consent — Stores cookie consent choices — 1 year — First-party
  • –domu_auth_token — Authenticates API requests — 30 days — First-party
• Performance/Analytics Cookies
  • –_ga — Google Analytics visitor identification — 2 years — Third-party (Google)
  • –_gid — Google Analytics session identification — 24 hours — Third-party (Google)
  • –_gat — Google Analytics throttle request rate — 1 minute — Third-party (Google)
  • –domu_analytics — Internal analytics tracking — 1 year — First-party (DomuHq)
• Functionality/Preference Cookies
  • –domu_theme — Dark/light mode preference — 1 year — First-party
  • –domu_search_filters — Remembers search filters — 30 days — First-party
  • –domu_map_zoom — Remembers map zoom level — 30 days — First-party
  • –domu_notifications — Notification preferences — 1 year — First-party
• Advertising/Marketing Cookies (if applicable)
  • –_fbp — Facebook Pixel ad tracking — 90 days — Third-party (Meta)
  • –IDE — Google Ads conversion tracking (consent required) — 1 year — Third-party (Google)
  • –fr — Facebook ad delivery — 90 days — Third-party (Meta)
  • –_gcl_au — Google Ads conversion linker — 90 days — Third-party (Google)

Analytics require consent (or may rely on legitimate interests only if truly anonymized). Advertising cookies require explicit consent.

4. Third-Party Cookies

4.1 Third-Party Services We Use

• Google Analytics
  • –Purpose: Understand website traffic and user behavior
  • –Cookies: _ga, _gid, _gat
  • –Privacy Policy: policies.google.com/privacy
  • –Opt-Out: tools.google.com/dlpage/gaoptout
• Payment Processor (Stripe)
  • –Purpose: Process subscription and service payments
  • –Cookies: Set by provider during checkout
  • –Privacy: Subject to provider’s privacy policy
• Social Login Providers (Google, Meta/Facebook, Apple)
  • –Purpose: Enable sign-in via Google OAuth, Facebook Login, or Apple Sign-In
  • –Google Sign-In data is used ONLY for authentication (see Privacy Policy Section 2.3 — Google User Data Limited Use Disclosure)
  • –Cookies: set during login authentication only
  • –Control: managed through your account settings on each provider
• Advertising and Conversion Tracking (Meta Pixel, Google Ads)
  • –Purpose: Measure ad campaign effectiveness and track conversions (completely separate from social login data)
  • –Meta/Facebook Pixel: tracks conversions from Facebook/Instagram ads
  • –Google Ads: tracks conversions from Google ad campaigns
  • –These cookies do NOT access or use any Google Sign-In or Calendar data
  • –Cookies: set only with your consent via the cookie consent banner
  • –Control: opt out via cookie consent banner, or ad opt-out tools (youronlinechoices.eu)
• Cloudflare
  • –Purpose: DDoS protection, CDN, bot management
  • –Cookies: __cf_bm (bot management), cf_clearance (challenge verification)
  • –Privacy Policy: cloudflare.com/privacypolicy
  • –These are classified as strictly necessary for security

4.2 Third-Party Cookie Control

• –Review the third party’s privacy policy and cookie settings;
• –Use browser settings to block third-party cookies;
• –Use opt-out tools provided by third parties (e.g., GA opt-out).

Third-party cookies are subject to the third party’s privacy policy and terms.

5. How to Manage Cookies

5.1 Cookie Consent Banner

• –Accept All — allows essential, analytics, marketing, and preferences
• –Reject Non-Essential — allows only strictly necessary cookies
• –Customize — choose which categories to enable (Strictly Necessary cannot be disabled; Performance & Analytics; Functionality & Preferences; Advertising & Marketing)

Your choice is saved and applies to future visits.

5.2 Change Cookie Preferences Anytime

• Option 1: In-App (Logged-In Users)
  • –Cookie consent popup (click 'Customize' to adjust categories)
  • –Toggle categories: Performance & Analytics; Functionality & Preferences; Advertising & Marketing
  • –Click Save Preferences
• Option 2: Cookie Policy Page (All Users)
  • –Visit domuhq.cz/cookies to review the full cookie policy
  • –Clear your browser cookies to trigger the consent popup again
• Option 3: Clear Consent and Choose Again
  • –Clear cookies in your browser (see 5.3)
  • –Revisit domuhq.cz — banner will appear again

5.3 Browser Settings

• Google Chrome
  • –Settings > Privacy and security > Cookies and other site data
  • –Block third-party cookies / Block all cookies (may break sites) / Clear cookies and site data
• Firefox
  • –Settings > Privacy & Security > Cookies and Site Data
  • –Block cookies and site data / Block third-party cookies / Custom settings
• Safari
  • –Preferences > Privacy
  • –Block all cookies or Prevent cross-site tracking
• Microsoft Edge
  • –Settings > Cookies and site permissions
  • –Manage and delete cookies
• Mobile Browsers (iOS/Android)
  • –Use browser app cookie controls
  • –May also be controlled via device privacy settings

Browser help pages (for reference): Chrome support, Firefox support, Safari support, Edge support.

5.4 Opt-Out Tools

• Google Analytics Opt-Out
  • –Install browser add-on: tools.google.com/dlpage/gaoptout
  • –Blocks GA tracking across all websites
• Network Advertising Initiative (NAI) Opt-Out
  • –optout.networkadvertising.org
• Digital Advertising Alliance (DAA) Opt-Out
  • –optout.aboutads.info
• European Interactive Digital Advertising Alliance (EDAA)
  • –youronlinechoices.eu

5.5 Mobile App Settings

• iOS (iPhone/iPad)
  • –Settings > Privacy & Security > Tracking
  • –Toggle off “Allow Apps to Request to Track” (or disable for DomuHQ specifically)
• Android
  • –Settings > Privacy > Ads
  • –Opt out of Ads Personalization; reset Advertising ID regularly
• In-App Settings
  • –DomuHQ app > Settings > Privacy > Tracking Preferences
  • –Disable analytics and personalization tracking

6. Consequences of Disabling Cookies

6.1 Disabling Strictly Necessary Cookies

• –Cannot log in; cannot stay logged in;
• –Forms won’t work (CSRF protection fails);
• –Payment processing fails;
• –Security features disabled; increased risk.

Result: The Service will not function properly. We strongly recommend keeping essential cookies enabled.

6.2 Disabling Performance/Analytics Cookies

• –Service still works — no functionality impact;
• –Harder to identify and fix bugs; slower improvement.

No negative impact on your experience.

6.3 Disabling Functionality/Preference Cookies

• –Settings not saved (language/theme resets);
• –Search filters lost;
• –Less convenient; repetitive setup each session.

Service works but is less personalized and convenient.

6.4 Disabling Advertising/Marketing Cookies

• –No impact on service functionality;
• –Ads (if shown) will be generic; no retargeting.

7. Cookies and Personal Data

7.1 Do Cookies Contain Personal Data?

• Cookies that DO contain personal data
  • –Session tokens linked to your account
  • –Authentication tokens containing user ID
  • –Unique identifiers that can be linked to you
• Cookies that DO NOT contain personal data
  • –Anonymous analytics IDs (cannot identify you individually)
  • –Preference settings (theme/language not linked to identity)
  • –Aggregated data (visitor counts, page views)

7.2 GDPR and Cookies

• –Strictly necessary cookies: no consent required (essential).
• –Analytics cookies (anonymized): may use legitimate interests if truly anonymized.
• –All other cookies: explicit consent required before placement.
• –Pre-ticked boxes are not valid consent — you must actively opt in.
• –Cookie walls are generally not permitted (except strictly necessary cookies).

Legal framework: GDPR + ePrivacy Directive (2002/58/EC).

7.3 Your Rights Regarding Cookie Data

• –Right of Access — request data collected via cookies
• –Right to Erasure — delete cookies and associated data
• –Right to Object — object to cookie-based profiling or marketing
• –Right to Withdraw Consent — change cookie preferences anytime

To exercise rights: see domuhq.cz/gdpr or email privacy@domuhq.cz.

8. Cookie Retention Periods

• –Session cookies — until browser closed — necessary for login session
• –Essential cookies — 30 days to 1 year — remember settings between visits
• –Analytics cookies — 24 hours to 2 years — track behavior over time
• –Advertising cookies — 90 days to 1 year — measure campaign effectiveness
• –Preference cookies — 30 days to 1 year — remember your choices

You can delete cookies anytime via browser settings or by clearing cookies to reset the consent popup.

9. Cookies in Emails

9.1 Email Tracking Pixels

• –Track whether you opened the email
• –See which links you clicked
• –Measure email campaign effectiveness

Legal Basis: Legitimate interests (improving communication) or consent (marketing emails).

9.2 How to Block Email Tracking

• –Disable image loading (Gmail: Settings > General > Images > Ask before displaying external images).
• –Outlook: File > Options > Trust Center > Automatic Download > Uncheck download pictures.
• –Apple Mail: Preferences > Privacy > Uncheck load remote content.
• –Unsubscribe from marketing emails via link or Profile > Preferences > Notifications.
• –Transactional emails may still contain pixels for security and delivery tracking.

10. Do Not Track (DNT) Signals

10.1 What is Do Not Track?

• –Chrome: Settings > Privacy and security > Send a “Do Not Track” request
• –Firefox: Settings > Privacy & Security > Send websites a Do Not Track signal
• –Safari: Preferences > Privacy > Ask websites not to track me

10.2 DomuHQ’s DNT Response

• –DomuHQ does not respond to DNT signals at this time.
• –Reason: No industry-wide standard for how to interpret DNT.
• –Instead we use: cookie consent banner, granular controls, and respect your preferences.

We may support DNT in the future if a standard emerges.

11. Children’s Privacy and Cookies

• –DomuHQ is not intended for children under 16.
• –We do not knowingly place cookies on devices of users under 16 without parental consent.
• –We do not knowingly collect data from children under 16 via cookies.

11.2 Parental Control

• –Monitor child activity; use parental controls; clear cookies regularly.
• –If your child is using DomuHQ: email privacy@domuhq.cz — we delete the account and associated cookies within 7 days.

12. Updates to This Cookie Policy

• –We may update this policy for changes in cookie usage, new technologies, law/regulatory changes, or feedback.
• –Material changes: email + prominent website banner.
• –Minor changes: update Last Updated date.
• –Changes take effect on the date stated at the top of the policy.

Version: 1.1 — Last Updated: April 1, 2026.

13. Contact Information

14. Glossary

• –Cookie — Small text file stored on your device by a website
• –Session Cookie — Temporary cookie that expires when you close the browser
• –Persistent Cookie — Cookie that remains on your device for a set period
• –First-Party Cookie — Set by the website you’re visiting (DomuHq)
• –Third-Party Cookie — Set by an external service (e.g., Google Analytics)
• –Pixel/Web Beacon — Invisible image used to track email opens or page views
• –Local Storage — Browser storage for data (like cookies but larger capacity)
• –Device Identifier — Unique ID for your device (e.g., Advertising ID)
• –CSRF Token — Security token to prevent Cross-Site Request Forgery attacks