nycid.com · Last updated October 2026
This page describes what nycid.com collects, why, and for how long. It covers building search, the newsletter, the project inquiry form, and analytics. Nothing is sold.
This site covers US residential properties only.
When you search for a building, the site logs the query to a private table (search_log) to understand what buildings people look for. The log row contains: the search query (checked against patterns for email-like and phone-like text; if found, the query field is stored as empty), the resolved building identifier (BBL), whether the search matched a building (resolved, ambiguous, or not found), and a random session token (described below). It does not contain your name, email, or IP address.
Separately, Cloud Run records every HTTP request (method, path, status, latency, response size, user agent, and source IP) in Cloud Logging. These infrastructure logs are independent of search_log and are retained under Google Cloud’s default 30-day retention policy.
If you answer the intake question on a building result page, your answer (for example, “planning a renovation” or “preparing to sell”) is stored in a second log row alongside the building identifier. Your answer is stored with the building identifier and session token only.
The first time you search for a building, the site sets a cookie named nycid_sid. It contains a randomly generated identifier (a UUID). It contains no personal information. The cookie is used only to link your search log rows to each other across visits for up to one year, so the site can understand search patterns without identifying individuals. The cookie expires after one year. It is set with httpOnly and sameSite=lax, which means it cannot be read by third-party scripts and does not travel on cross-site requests. In production, the cookie is also sent with the Secure flag.
If you subscribe to the newsletter, your email address is added to a Brevo (brevo.com) list under the source nycid.com. You can unsubscribe at any time. The email address is not combined with your search history.
When you submit a project inquiry through the Start a project form, the following information is stored in Brevo: your name, email address, phone number (optional), your role (owner, designer or architect, representative of the owner, or other), the property address, your project stage, and any additional details you write. This information is used only to arrange a discovery call and, if you opt in, to send you the newsletter. Brevo processes submitted inquiry data on behalf of this site. An email with the submitted details is also sent to the site inbox.
The site uses Google Analytics 4 (tracking ID G-62XPTB2162) to measure page views and traffic patterns. Google Analytics sets its own cookies and sends usage data to Google. Google’s privacy policy applies to this data (policies.google.com/privacy). Analytics data is not combined with search log data or subscriber information.
Consent defaults are set before the GA4 configuration runs. Visitors in the EEA, UK, and Switzerland are defaulted to analytics_storage denied, ad_storage denied, ad_user_data denied, and ad_personalization denied. All other visitors are defaulted to analytics_storage granted, with ad_storage, ad_user_data, and ad_personalization denied.
The newsletter subscription, project inquiry, and contact forms use Google reCAPTCHA Enterprise to detect automated submissions. When you submit any of these forms, a token is generated in your browser and sent to Google for risk scoring. No CAPTCHA puzzle is shown. The score is evaluated server-side and not stored. A submission that receives a low score is rejected silently. Google’s privacy policy applies (policies.google.com/privacy).
Web fonts (Google Sans and Noto Sans) are served directly from nycid.com, not from Google servers. No request is made to fonts.googleapis.com or fonts.gstatic.com. Display fonts (proxima-nova) are served through Adobe Fonts (use.typekit.net) under the Adobe Fonts terms.
nycid.com is operated by IDist®.
To request deletion of your data, or with any privacy question, use the contact form. You can also write to support@idist.com.