Coco's NestWhat happens to the ID you upload.
Why it is asked for at all
Your host has to be able to say who stayed. That is the only reason it is collected. If you are travelling on a foreign passport, your host is also required to report the stay to the FRRO, as every accommodation in India is.
Who can see it
Your host, and nobody else. Documents are held in private storage (never a public link) and are opened through a short-lived signed URL that expires. Every time one is opened, a record is written of who opened it and when.
How long it is kept
180 days from the day you upload it, then it is deleted by a scheduled job. Not longer because the stay ran long, and not indefinitely.
If you rent something
Some rentals, like a scooter, ask for a photo of an ID with the request. It is used only to hand the item over. It is held in private storage, opened only by the Cocosnest team through a short-lived link, and every opening is recorded. It is deleted 30 days after the rental ends, counted from the start date if no end date was given, or from the day you asked if no dates were given at all.
What is never stored
A full Aadhaar number. At most the last four digits are kept, and the database refuses to store more. That is a constraint, not a policy we ask ourselves to remember.
What we do not do with it
It is not used to market anything to you, it is not shared with other guests, and it is not sold. Requests you make during a stay go to your host, who confirms them with you directly.
Your name and email on the rentals pages
A request for a rental asks for your name, a phone number to call you on and an email address. We send a six-digit code to that address and record the request only once you have entered it, so nobody can file a request in your name. The code arrives by email from our sign-in service and contains nothing else.
While browsing, a small card may offer to save your name and email so later requests start filled in. It is optional and can be dismissed. We email people who saved their details only about a request they made, unless they ticked the box agreeing to occasional emails about rentals and guides, in which case every such email carries a way to stop them. The wording of that box is stored with the consent, and details are kept in your own browser as well, which you can clear at any time.
Videos on place pages
Some place pages show clips that travellers posted on YouTube. The preview picture is loaded from YouTube's image server. The player itself loads from youtube-nocookie.com, and only after you press play. From then on, YouTube's own privacy policy covers that video.
If something looks wrong
Ask whoever booked the stay: the check-in link should have reached you from them. If you did not expect it, do not upload anything.